|
Log-Analyse und Auswertung: Browser Hijacker trovi.com u.a.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
14.02.2015, 19:10 | #1 |
| Browser Hijacker trovi.com u.a. Hallo, na klasse, jahrelang nichts und dann zweimal innerhalb kurzer Zeit. Auf dem brandneuen Rechner ergab der Malwarebytes Scan folgendes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 14.02.2015 Scan Time: 18:33:58 Logfile: MWB1.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.02.14.03 Rootkit Database: v2015.02.03.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: Jan Scan Type: Threat Scan Result: Completed Objects Scanned: 333033 Time Elapsed: 6 min, 25 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 6 PUP.Optional.SearchProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, , [48caa575e9a164d2f324744009f813ed], PUP.Optional.SearchProtect.A, HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [b75be337e9a1f640689e1dea19ead42c], PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, , [d939fd1ddfaba88e245f6fa24bba5ba5], PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT, , [00129486107a90a65ebd1a9ba0632ed2], PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD, , [0909b862187271c5ae0a228cce3555ab], Registry Values: 2 PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT|InstallDir, C:\PROGRA~2\SearchProtect, , [00129486107a90a65ebd1a9ba0632ed2] PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD|ImagePath, \??\C:\Windows\system32\drivers\SPPD.sys, , [0909b862187271c5ae0a228cce3555ab] Registry Data: 3 PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll, Good: (), Bad: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll),,[5bb7e337fc8eb680f4232f85649d6d93] PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll, Good: (), Bad: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll),,[91810c0e7f0bb6807d9a1c98c0412ad6] PUP.Optional.Trovi.A, HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV=, Good: (www.google.com), Bad: (hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV=),,[ef23f624e4a63501dc72298c53b22fd1] Folders: 25 PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\rep, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\SearchProtect, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\SearchProtect\rep, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\SearchProtect\STG, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\UI, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\UI\rep, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf, , [a36fcb4fc4c60c2a35db69236b98c739], Files: 103 PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe, , [48caa575e9a164d2f324744009f813ed], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe, , [779bb268107afb3b7d9aa113867b3cc4], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe, , [24ee0e0c04866bcb0d0a2e86c53c44bc], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll, , [5bb7e337fc8eb680f4232f85649d6d93], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll, , [91810c0e7f0bb6807d9a1c98c0412ad6], PUP.Optional.SearchProtect, C:\Users\Jan\AppData\Local\Temp\nstE999.tmp\SPtool.dll, , [cd450b0f8bff6accc7c639da7b87d729], PUP.Optional.OpenCandy, C:\Users\Jan\AppData\Local\Temp\is-82E7D.tmp\OCSetupHlp.dll, , [14fe58c2404a92a4a5b707df897cef11], PUP.Optional.SearchProtect, C:\Users\Jan\AppData\Local\avaxvyyvyf\avaxvyyvyf.exe, , [d53de337afdb6ec8711c83907d850cf4], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\pbqrmvbub, , [c84a25f57515ef475cbb2d87d62b669a], PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, , [e92949d1e5a593a3c84fd1e3b1506898], PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, , [4fc305156f1b79bdfd1aa90b24dd59a7], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\EULA.txt, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.pun, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\cfi.bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\edk.bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\pni.bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\trn.bin, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def-grey.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-dia.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\SP_DialogBG.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\DialogAPI.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, , [e03268b2315915217758787ff80c6f91], PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, , [bb57ab6f04860630e6a190812fd6fc04], PUP.Optional.Avaxvavya.A, C:\Windows\System32\Tasks\avaxvyyvyf, , [d83ad04a2c5e0e289254df3a4db83ac6], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, , [d53d39e108829c9ae78039306e9534cc], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\bahvxfk, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\mkfvxfk, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\pvpqbjobmlpfqlovvawq, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\qokvxfk, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\rfobmlpfqlovvawq, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\rpboobmlpfqlovvawq, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.SearchProtect.A, C:\Users\Jan\AppData\Local\avaxvyyvyf\ycfvxfk, , [a36fcb4fc4c60c2a35db69236b98c739], PUP.Optional.Trovi.A, C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9E-A4DE-39B634B443E5");), ,[f022c4569af07fb736c9c833b5508c74] Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015 Ran by Jan (administrator) on MSI on 14-02-2015 18:59:54 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan & (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://msi13.msn.com HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9E-A4DE-39B634B443E5 FF SelectedSearchEngine: Trovi FF Homepage: about:home FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3557136 2015-02-02] (Client Connect LTD) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-14 18:59 - 2015-02-14 19:00 - 00020192 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-14 18:59 - 2015-02-14 18:59 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-14 18:58 - 02134528 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:41 - 2015-02-14 18:41 - 00020635 _____ () C:\Users\Jan\Desktop\MWB1.txt 2015-02-14 18:22 - 2015-02-14 18:32 - 00003436 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:24 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00035840 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Users\Jan\AppData\Local\SearchProtect 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Users\Jan\AppData\Local\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-14 09:50 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-14 18:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-14 09:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-14 09:32 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-14 18:33 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-14 18:33 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-14 09:37 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-14 15:52 - 00000000 __RDO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 18:37 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-14 18:22 - 2014-12-25 05:06 - 01412606 ____N () C:\Windows\WindowsUpdate.log 2015-02-14 15:40 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-14 15:40 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-14 15:40 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-14 15:40 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-14 15:40 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-14 15:40 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-14 15:40 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-14 15:40 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-14 15:40 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-14 15:40 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-14 15:40 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-14 15:40 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-14 15:40 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-14 15:40 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-14 15:40 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-14 15:40 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-14 15:40 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-14 15:40 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-14 15:40 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-14 15:40 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-14 15:40 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-14 15:40 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-14 15:40 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-14 15:40 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-14 15:40 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-14 15:40 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-14 15:40 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-14 15:40 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-14 15:40 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-14 15:40 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-14 15:40 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-14 15:40 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-14 15:40 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-14 15:40 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-14 15:40 - 2014-04-30 16:43 - 00731772 _____ () C:\Windows\system32\perfh005.dat 2015-02-14 15:40 - 2014-04-30 16:43 - 00152016 _____ () C:\Windows\system32\perfc005.dat 2015-02-14 15:40 - 2014-03-18 11:03 - 15624104 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-14 15:33 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-14 15:33 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:32 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-14 15:22 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:12 - 2014-10-20 18:03 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ Wäre für Hilfe sehr dankbar. Gruß, Jan |
14.02.2015, 19:11 | #2 |
| Browser Hijacker trovi.com u.a. Und hier noch die Addition.txt:
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-02-2015 Ran by Jan at 2015-02-14 19:00:11 Running from C:\Users\Jan\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) „Windows Live Essentials“ (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden µTorrent (HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\uTorrent) (Version: 3.4.2.38758 - BitTorrent Inc.) µTorrent (HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\uTorrent) (Version: 3.4.2.38758 - BitTorrent Inc.) µTorrent (HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\uTorrent) (Version: 3.4.2.38758 - BitTorrent Inc.) Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG) Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.624 - Avira) Battery Calibration (HKLM-x32\...\{619FA785-489B-4D22-911F-82D6EDF5BDB0}) (Version: 1.0.1405.0701 - Micro-Star International Co., Ltd.) Boot Configure (HKLM-x32\...\{AB72B3BB-A389-4F62-86EE-C08326B4BE60}) (Version: 20.014.05233 - Micro-Star International Co., Ltd.) BurnRecovery (HKLM-x32\...\{2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F}) (Version: 4.0.1408.201 - ) Canon MP560 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform) CDisplayEx 1.10.29 (HKLM\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5509.52 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.5 - Electronic Arts) Dragon Gaming Center (HKLM-x32\...\InstallShield_{965B16C7-0778-4C45-B7D1-83A59E6FBBCB}) (Version: 1.0.1410.1301 - Micro-Star International Co., Ltd.) Dragon Gaming Center (x32 Version: 1.0.1410.1301 - Micro-Star International Co., Ltd.) Hidden Fotoattēlu galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogaléria (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogalerii (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogalerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Foto-galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogalleri (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotogalleriet (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotoğraf Galerisi (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fotótár (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Fraps (HKLM-x32\...\Fraps) (Version: - ) Galeria de Fotografias (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galeria de Fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galería de fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galeria fotografii (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galerie foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Galerija fotografija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{0EC7F9CC-4741-45AE-9F55-6E9343F726F5}) (Version: 1.1.0.36960 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.2.4.1000 - Intel Corporation) KB9X Radio Switch Driver (HKLM\...\5AADE1068CF70DD983F763B20CF2CAAB72883915) (Version: 1.1.0.0 - ENE TECHNOLOGY INC.) MAGIX MX Suite (HKLM-x32\...\MAGIX_{43136332-880B-458A-966C-900C18752B66}) (Version: 1.13.0.121 - MAGIX AG) MAGIX MX Suite (Version: 1.13.0.121 - MAGIX AG) Hidden Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.) Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla) MSI Remind Manager (HKLM-x32\...\InstallShield_{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.0.1408.1401 - Micro-Star International Co., Ltd.) MSI Remind Manager (x32 Version: 1.0.1408.1401 - Micro-Star International Co., Ltd.) Hidden MSI Social Media Collection (HKLM-x32\...\{7ADEC426-BE95-48EF-84D4-086BD0F4D331}) (Version: 1.14.2251 - Micro-Star International Co., Ltd.) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Graphics Driver 344.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.24 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA Miracast Virtual Audio 344.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 344.24 - NVIDIA Corporation) NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.) PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC) Podstawowe programy Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Qualcomm Atheros 11AC Drivers (Version: 1.1.47.1058 - Qualcomm Atheros) Hidden Qualcomm Atheros 61x4 Bluetooth Suite (64) (HKLM\...\{628988B4-3FA5-4EA6-BAA3-DA640F6718BD}) (Version: 3.0.0.400 - Qualcomm Atheros) Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.1.47.1058 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer E220x Drivers (Version: 1.1.47.1058 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.47.1058 - Qualcomm Atheros) Qualcomm Atheros Network Manager (Version: 1.1.47.1058 - Qualcomm Atheros) Hidden Raccolta foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21249 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7344 - Realtek Semiconductor Corp.) SCM (HKLM\...\{9BC0C4F3-ACBB-42DF-9559-93175E3B4095}) (Version: 13.014.10147 - Application) Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.20.11.17 - Client Connect LTD) <==== ATTENTION SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Sound Blaster Cinema 2 (HKLM-x32\...\{B4F6F8CC-2C61-42CC-A4CC-76621F25BDC7}) (Version: 1.00.06 - Creative Technology Limited) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.8.450.22786 - SteelSeries) SUPER CHARGER (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.024 - MSI) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.7.0 - Synaptics Incorporated) Valokuvavalikoima (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation) WinZip 17.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DD}) (Version: 17.5.10562 - WinZip Computing, S.L. ) Συλλογή φωτογραφιών (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Основи Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Фотоальбом (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Фотогалерия (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Фотографии (общедоступная версия) (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Фотоколекція (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden גלריית התמונות (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 13-02-2015 21:04:39 Removed Norton Online Backup ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {2F8B3BDA-B91B-4E58-84FC-3BE9C96E97A6} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-10-20] (Synaptics Incorporated) Task: {664983E1-C512-4373-A97D-A7F13D1245C3} - System32\Tasks\Norton Anti-Theft\Norton Error Analyzer => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.9.0.14\SymErr.exe Task: {953BA247-35CC-4A10-B122-F7F8032B4087} - System32\Tasks\Norton Anti-Theft\Norton Error Processor => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.9.0.14\SymErr.exe Task: {9657A03F-6183-4FAA-965B-7D0028E11DD0} - System32\Tasks\avaxvyyvyf => C:\Users\Jan\AppData\Local\avaxvyyvyf\avaxvyyvyf.exe [2015-02-02] () Task: {ABF7DB9A-0689-4E0A-8060-27EEAB736A3D} - System32\Tasks\MSI_Dragon Gaming Center => C:\Program Files (x86)\MSI\Dragon Gaming Center\mDispatch.exe [2014-01-23] (TODO: <公司名稱>) Task: {CCCF5319-40DA-4420-9874-3040A6669311} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd) Task: {CF87BA6E-D837-480C-8DE6-3886922BC18C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-01-29] (Microsoft Corporation) Task: {E5181551-57B7-40D4-BDCB-23D7372E9127} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) Task: {ED1AF7CA-D6FD-4FA3-A8C0-8CD18FFDC8F8} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation) ==================== Loaded Modules (whitelisted) ============== 2014-10-20 17:52 - 2014-09-27 04:19 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-02-14 18:22 - 2014-06-16 16:28 - 00210944 _____ () C:\Program Files\CDisplayEx\unrarshell.dll 2015-02-14 18:22 - 2014-08-14 20:30 - 00402944 _____ () C:\Program Files\CDisplayEx\libwebp.dll 2015-02-14 18:22 - 2014-08-14 20:30 - 00044544 _____ () C:\Program Files\CDisplayEx\libwebpdemux.dll 2015-02-13 21:25 - 2015-02-13 21:28 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\ErrorReporting.dll 2014-10-20 18:04 - 2014-02-21 19:21 - 00089600 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL 2014-10-20 18:04 - 2014-02-21 19:19 - 00366080 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL 2014-01-22 18:44 - 2014-01-22 18:44 - 00075912 _____ () C:\Program Files (x86)\MSI\Dragon Gaming Center\WinIo64.dll 2013-05-23 17:15 - 2013-05-23 17:15 - 00025600 _____ () C:\Program Files (x86)\MSI\Dragon Gaming Center\CoreAudioApi.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00504832 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 09315328 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00015872 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00011264 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00011264 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00115200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll 2014-05-16 16:57 - 2014-05-16 16:57 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00034304 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll 2014-05-16 16:57 - 2014-05-16 16:57 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00189440 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00031744 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00159744 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00020992 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00029696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030208 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00023040 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030720 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll 2014-06-26 19:39 - 2014-06-26 19:39 - 00030208 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll 2013-08-12 21:25 - 2015-02-13 22:11 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2014-09-20 00:15 - 2014-09-20 00:15 - 00330240 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe 2013-05-10 01:58 - 2013-05-10 01:58 - 00119808 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe 2014-10-20 17:50 - 2013-12-09 23:26 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll 2013-03-07 20:53 - 2013-03-07 20:53 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll 2010-01-13 00:55 - 2010-01-13 00:55 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll 2010-01-13 00:55 - 2010-01-13 00:55 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll 2010-12-16 20:16 - 2010-12-16 20:16 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll 2010-01-18 07:34 - 2010-01-18 07:34 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll 2013-03-07 20:55 - 2013-03-07 20:55 - 00472576 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll 2013-03-07 20:58 - 2013-03-07 20:58 - 00499488 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll 2013-03-07 20:54 - 2013-03-07 20:54 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll 2010-12-17 20:56 - 2010-12-17 20:56 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll 2015-02-13 20:53 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Jan\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-3102993943-3818829656-705581800-500 - Administrator - Disabled) Gast (S-1-5-21-3102993943-3818829656-705581800-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3102993943-3818829656-705581800-1003 - Limited - Enabled) Jan (S-1-5-21-3102993943-3818829656-705581800-1001 - Administrator - Enabled) => C:\Users\Jan ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/14/2015 09:21:10 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Das Stammelement der Manifestdatei muss assembliert sein. Error: (02/14/2015 09:15:41 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Das Stammelement der Manifestdatei muss assembliert sein. Error: (02/13/2015 11:17:26 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.3.9600.17031 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 225c Startzeit: 01d047dab9180177 Endzeit: 4294967295 Anwendungspfad: C:\Windows\system32\wwahost.exe Berichts-ID: 1025708b-b3ce-11e4-826a-1008b18abac0 Vollständiger Name des fehlerhaften Pakets: Microsoft.BingNews_3.0.2.233_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AppexNews Error: (02/13/2015 11:17:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MSI) Description: Das Paket „Microsoft.BingNews_3.0.2.233_x64__8wekyb3d8bbwe+AppexNews“ wurde beendet, da das Anhalten zu lange dauerte. Error: (02/13/2015 08:42:09 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm explorer.exe, Version 6.3.9600.17039 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 174c Startzeit: 01d047c4faa5c5aa Endzeit: 0 Anwendungspfad: C:\Windows\explorer.exe Berichts-ID: 652705dc-b3b8-11e4-8268-1008b18abac0 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (02/13/2015 08:41:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm Explorer.EXE, Version 6.3.9600.17039 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 17c0 Startzeit: 01d047c4b3d8baf2 Endzeit: 0 Anwendungspfad: C:\Windows\Explorer.EXE Berichts-ID: 3822a218-b3b8-11e4-8268-1008b18abac0 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (02/13/2015 08:29:54 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (02/13/2015 08:12:07 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: ) Description: Die indizierten Daten von Windows Search für den Benutzer '<Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-02-13T19:12:07.000000000Z'/><EventRecordID>1462</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>MSI</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D00530049005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>' können im Zuge der Löschung des Benutzerprofils nicht entfernt werden. Fehlercode %2. %3. System errors: ============= Error: (02/13/2015 09:50:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/13/2015 09:50:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (02/13/2015 08:38:30 PM) (Source: DCOM) (EventID: 10010) (User: MSI) Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (12/25/2014 05:07:49 AM) (Source: DCOM) (EventID: 10010) (User: MSI) Description: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Microsoft Office Sessions: ========================= Error: (02/14/2015 09:21:10 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: c:\Program Files\WinZip\adxloader.dll.Manifestc:\Program Files\WinZip\adxloader.dll.Manifest2 Error: (02/14/2015 09:15:41 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: c:\Program Files\WinZip\adxloader.dll.Manifestc:\Program Files\WinZip\adxloader.dll.Manifest2 Error: (02/13/2015 11:17:26 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.3.9600.17031225c01d047dab91801774294967295C:\Windows\system32\wwahost.exe1025708b-b3ce-11e4-826a-1008b18abac0Microsoft.BingNews_3.0.2.233_x64__8wekyb3d8bbweAppexNews Error: (02/13/2015 11:17:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MSI) Description: Microsoft.BingNews_3.0.2.233_x64__8wekyb3d8bbwe+AppexNews Error: (02/13/2015 08:42:09 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: explorer.exe6.3.9600.17039174c01d047c4faa5c5aa0C:\Windows\explorer.exe652705dc-b3b8-11e4-8268-1008b18abac0 Error: (02/13/2015 08:41:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Explorer.EXE6.3.9600.1703917c001d047c4b3d8baf20C:\Windows\Explorer.EXE3822a218-b3b8-11e4-8268-1008b18abac0 Error: (02/13/2015 08:29:54 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (02/13/2015 08:12:07 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: ) Description: <Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-02-13T19:12:07.000000000Z'/><EventRecordID>1462</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>MSI</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D00530049005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event> ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz Percentage of memory in use: 14% Total physical RAM: 16336.83 MB Available physical RAM: 13907.23 MB Total Pagefile: 19280.83 MB Available Pagefile: 16093.11 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (OS_Install) (Fixed) (Total:237.47 GB) (Free:118.86 GB) NTFS Drive d: (Data) (Fixed) (Total:911.39 GB) (Free:910.3 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 238.5 GB) (Disk ID: F313CDC8) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: F313CDEA) Partition: GPT Partition Type. ==================== End Of Log ============================ |
14.02.2015, 19:32 | #3 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a. hi,
__________________Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
14.02.2015, 19:53 | #4 |
| Browser Hijacker trovi.com u.a. Danke für die schnelle Reaktion. Revo Uninstaller ist gelaufen. Hier die Logs: Code:
ATTFilter # AdwCleaner v4.110 - Bericht erstellt 14/02/2015 um 19:42:54 # Aktualisiert 05/02/2015 von Xplode # Datenbank : 2015-02-14.2 [Server] # Betriebssystem : Windows 8.1 (x64) # Benutzername : Jan - MSI # Gestarted von : C:\Users\Jan\Desktop\AdwCleaner_4.110.exe # Option : Löschen ***** [ Dienste ] ***** Dienst Gelöscht : CltMngSvc Dienst Gelöscht : SPPD ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files (x86)\SearchProtect Ordner Gelöscht : C:\Users\Jan\AppData\Local\SearchProtect ***** [ Geplante Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\SPPDCOM Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17416 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v35.0.1 (x86 de) [kjKyxiPc.default\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9[...] [kjKyxiPc.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.selectedEngine", "Trovi"); ************************* AdwCleaner[R0].txt - [2388 Bytes] - [14/02/2015 19:42:14] AdwCleaner[S0].txt - [1908 Bytes] - [14/02/2015 19:42:54] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1967 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.2 (02.02.2015:1) OS: Windows 8.1 x64 Ran by Jan on 14.02.2015 at 19:46:08,59 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Jan\appdata\local\searchprotect" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.02.2015 at 19:47:08,40 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015 Ran by Jan (administrator) on MSI on 14-02-2015 19:49:55 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF Homepage: about:home FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-14 19:49 - 2015-02-14 19:50 - 00015159 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-14 19:47 - 2015-02-14 19:47 - 00000757 _____ () C:\Users\Jan\Desktop\JRT.txt 2015-02-14 19:45 - 2015-02-14 19:45 - 01388274 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe 2015-02-14 19:44 - 2015-02-14 19:44 - 00002055 _____ () C:\Users\Jan\Desktop\AdwCleaner[S0].txt 2015-02-14 19:43 - 2015-02-14 19:43 - 00006548 _____ () C:\Windows\PFRO.log 2015-02-14 19:43 - 2015-02-14 19:43 - 00000348 _____ () C:\Windows\setupact.log 2015-02-14 19:43 - 2015-02-14 19:43 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-14 19:41 - 2015-02-14 19:42 - 00000000 ____D () C:\AdwCleaner 2015-02-14 19:40 - 2015-02-14 19:40 - 02112512 _____ () C:\Users\Jan\Desktop\AdwCleaner_4.110.exe 2015-02-14 19:36 - 2015-02-14 19:36 - 00001290 _____ () C:\Users\Jan\Desktop\Revo Uninstaller.lnk 2015-02-14 19:36 - 2015-02-14 19:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-02-14 19:35 - 2015-02-14 19:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jan\Desktop\revosetup95.exe 2015-02-14 18:59 - 2015-02-14 19:49 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-14 18:58 - 02134528 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:22 - 2015-02-14 18:32 - 00003436 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:24 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00035840 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Users\Jan\AppData\Local\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-14 09:50 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-14 18:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-14 09:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-14 09:32 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-14 18:33 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-14 18:33 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-14 09:37 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-14 19:43 - 00000000 ___DO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 19:41 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-14 19:44 - 2014-12-25 05:06 - 01425871 _____ () C:\Windows\WindowsUpdate.log 2015-02-14 19:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-14 19:43 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-14 15:40 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-14 15:40 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-14 15:40 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-14 15:40 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-14 15:40 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-14 15:40 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-14 15:40 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-14 15:40 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-14 15:40 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-14 15:40 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-14 15:40 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-14 15:40 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-14 15:40 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-14 15:40 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-14 15:40 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-14 15:40 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-14 15:40 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-14 15:40 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-14 15:40 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-14 15:40 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-14 15:40 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-14 15:40 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-14 15:40 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-14 15:40 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-14 15:40 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-14 15:40 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-14 15:40 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-14 15:40 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-14 15:40 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-14 15:40 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-14 15:40 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-14 15:40 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-14 15:40 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-14 15:40 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-14 15:40 - 2014-04-30 16:43 - 00731772 _____ () C:\Windows\system32\perfh005.dat 2015-02-14 15:40 - 2014-04-30 16:43 - 00152016 _____ () C:\Windows\system32\perfc005.dat 2015-02-14 15:40 - 2014-03-18 11:03 - 15624104 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-14 15:33 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-14 15:22 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe C:\Users\Jan\AppData\Local\Temp\Quarantine.exe C:\Users\Jan\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ --- --- --- EDIT: Im Autostartordner findet sich die Datei "C:\Users\Jan\AppData\Local\avaxvyyvyf\avaxvyyvyf.exe" die dort vermutlich ebenfalls nichts zu suchen hat, oder? Geändert von jcw108 (14.02.2015 um 20:15 Uhr) |
15.02.2015, 08:44 | #5 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a.ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.02.2015, 09:29 | #6 |
| Browser Hijacker trovi.com u.a. Alles erledigt, scheint nach wie vor ein Befall vorzuliegen. FRST folgt mit separatem Beitrag. [Hinweis: Ich hatte vergessen, daß der bereits erwähnte Eintrag im Autostartordner von mir manuell deaktiviert wurde, bevor ich hier zum Board gekommen bin. Um die Ergebnisse nicht zu verfälschen, habe ich die Deaktivierung heute Morgen wieder aufgehoben.] ESE: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=9f68a9865be8fc4082540553b6b6d5d9 # engine=22476 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-02-15 08:13:16 # local_time=2015-02-15 09:13:16 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 63691 14292315 0 0 # scanned=603239 # found=31 # cleaned=0 # scan_time=1251 sh=ECAFC53D5DDDE5257644CF9CEE6BBCB91EB60F6B ft=1 fh=4c2bb5dc7b67cd55 vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe.vir" sh=46BBA8C1AE634D4F9F254950A86CB05F704ACE33 ft=1 fh=6dfe405d34010908 vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll.vir" sh=FFC3FB4918C5E75E525E7496678EF91F2DE4499A ft=1 fh=78a837cddf8e1783 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe.vir" sh=8EB3819E9120B50BB4610D702E02A159E99FA440 ft=1 fh=d8d8d131b6d05606 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\uninstall.pun.vir" sh=9A1E5324C2A0897114F63517C5BCFB8A668D04C5 ft=1 fh=3525c324bb03549f vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe.vir" sh=61CB5532601E0673AF908170C6EB6C1F2C7859FE ft=1 fh=32eaa75fef5feb41 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir" sh=606AF3BEB58B8EB997AD382719FBFDA522F22AAE ft=1 fh=f041754f44982409 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir" sh=1DDD5E401572269599452C159AE31C4F01F90F75 ft=1 fh=417a2208d2cd5dcc vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll.vir" sh=D62013B6EA4ED609E8780E80AACE87F9913D5E08 ft=1 fh=59214ab9dc417421 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll.vir" sh=A45277BDF7FFF331C6E66CEB45C3BDF0263946EC ft=1 fh=d124106ad52aa0fa vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll.vir" sh=AB482AE5E1D8416CD711FDD8410CAF95E2A6C95E ft=1 fh=6416b53d3d7d1cd3 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll.vir" sh=01443F6B8D7C823E7F8790DA9E03D3FEAF927BDA ft=1 fh=e09fd061fc8a9f2e vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe.vir" sh=ECAFC53D5DDDE5257644CF9CEE6BBCB91EB60F6B ft=1 fh=4c2bb5dc7b67cd55 vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe" sh=46BBA8C1AE634D4F9F254950A86CB05F704ACE33 ft=1 fh=6dfe405d34010908 vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll" sh=FFC3FB4918C5E75E525E7496678EF91F2DE4499A ft=1 fh=78a837cddf8e1783 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe" sh=8EB3819E9120B50BB4610D702E02A159E99FA440 ft=1 fh=d8d8d131b6d05606 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.pun" sh=9A1E5324C2A0897114F63517C5BCFB8A668D04C5 ft=1 fh=3525c324bb03549f vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe" sh=61CB5532601E0673AF908170C6EB6C1F2C7859FE ft=1 fh=32eaa75fef5feb41 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll" sh=606AF3BEB58B8EB997AD382719FBFDA522F22AAE ft=1 fh=f041754f44982409 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe" sh=1DDD5E401572269599452C159AE31C4F01F90F75 ft=1 fh=417a2208d2cd5dcc vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll" sh=D62013B6EA4ED609E8780E80AACE87F9913D5E08 ft=1 fh=59214ab9dc417421 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll" sh=A45277BDF7FFF331C6E66CEB45C3BDF0263946EC ft=1 fh=d124106ad52aa0fa vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll" sh=AB482AE5E1D8416CD711FDD8410CAF95E2A6C95E ft=1 fh=6416b53d3d7d1cd3 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll" sh=01443F6B8D7C823E7F8790DA9E03D3FEAF927BDA ft=1 fh=e09fd061fc8a9f2e vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe" sh=B1695EA640724CA1B0DCFD803C1D666463790AB9 ft=1 fh=3c399a0814dff6f2 vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jan\AppData\Local\avaxvyyvyf\avaxvyyvyf.exe" sh=0E87EB5DD4F8B446B55E6A943B654D1F9898CA34 ft=1 fh=0eba33078c7384a2 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jan\AppData\Local\avaxvyyvyf\pbqrmvbub" sh=E85DD6CF817C85B889BA6A2F0B2E61F68BF9C86A ft=1 fh=cf499a48d27964dd vn="Variante von Win32/Conduit.SearchProtect.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll" sh=AB482AE5E1D8416CD711FDD8410CAF95E2A6C95E ft=1 fh=6416b53d3d7d1cd3 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\apppatch\apppatch64\VCLdr64.dll" sh=D62013B6EA4ED609E8780E80AACE87F9913D5E08 ft=1 fh=59214ab9dc417421 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\apppatch\nbin\VC32Loader.dll" sh=95B785C6D5465575F2B951FC5E31890B84D1FAA9 ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\36ddc.msi" sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="${Memory}" Code:
ATTFilter Results of screen317's Security Check version 0.99.96 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 64-bit 8 Update 31 Adobe Flash Player 16.0.0.305 Mozilla Firefox (35.0.1) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` |
15.02.2015, 09:30 | #7 |
| Browser Hijacker trovi.com u.a. FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015 Ran by Jan (administrator) on MSI on 15-02-2015 09:19:42 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan & (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF DefaultSearchEngine: Bing FF SelectedSearchEngine: Trovi FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3557136 2015-02-02] (Client Connect LTD) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-15 09:19 - 2015-02-15 09:19 - 00000743 _____ () C:\Users\Jan\Desktop\checkup.txt 2015-02-15 09:16 - 2015-02-15 09:16 - 00852594 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe 2015-02-15 08:49 - 2015-02-15 08:49 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe 2015-02-15 08:46 - 2015-02-15 08:46 - 00023482 _____ () C:\Users\Jan\Desktop\Addition.txt 2015-02-15 08:45 - 2015-02-15 08:45 - 00020431 _____ () C:\Users\Jan\Desktop\MWB.txt 2015-02-15 08:29 - 2015-02-15 08:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe 2015-02-15 07:54 - 2015-02-15 07:54 - 00000000 ____D () C:\Users\Jan\AppData\Local\SearchProtect 2015-02-15 07:54 - 2015-02-15 07:54 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2015-02-14 21:54 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-14 21:54 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2015-02-14 21:54 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2015-02-14 21:54 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-14 21:54 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-02-14 21:54 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-14 21:54 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2015-02-14 21:54 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-14 21:54 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2015-02-14 21:54 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-14 21:54 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2015-02-14 21:53 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 21:53 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 21:53 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-14 21:53 - 2014-07-24 16:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-14 21:53 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2015-02-14 21:53 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-14 21:53 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-14 21:53 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-14 21:53 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-14 21:53 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2015-02-14 21:53 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2015-02-14 21:53 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-14 21:53 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-14 21:53 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2015-02-14 21:53 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2015-02-14 21:53 - 2014-07-24 12:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-14 21:53 - 2014-07-24 12:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-14 21:53 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2015-02-14 21:53 - 2014-07-24 11:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-02-14 21:53 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2015-02-14 21:53 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-14 21:53 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2015-02-14 21:53 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2015-02-14 21:53 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2015-02-14 21:53 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-02-14 21:53 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2015-02-14 21:53 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2015-02-14 21:53 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2015-02-14 21:53 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-14 21:53 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2015-02-14 21:53 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2015-02-14 21:53 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2015-02-14 21:53 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-14 21:53 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-14 21:53 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2015-02-14 21:53 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-14 21:53 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2015-02-14 21:53 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2015-02-14 21:53 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-14 21:53 - 2014-07-24 09:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-14 21:53 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-14 21:53 - 2014-07-24 09:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-14 21:53 - 2014-07-24 09:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-14 21:53 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2015-02-14 21:53 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2015-02-14 21:53 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2015-02-14 21:53 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2015-02-14 21:53 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2015-02-14 21:53 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-14 21:53 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2015-02-14 21:53 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2015-02-14 21:53 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-14 21:53 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2015-02-14 21:53 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2015-02-14 21:53 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-14 21:53 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-14 21:53 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2015-02-14 21:53 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2015-02-14 21:53 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-14 21:53 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2015-02-14 21:53 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2015-02-14 21:53 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2015-02-14 21:53 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2015-02-14 21:53 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-14 21:53 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2015-02-14 21:53 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2015-02-14 21:53 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-14 21:53 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2015-02-14 19:49 - 2015-02-15 09:19 - 00019652 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-14 19:47 - 2015-02-14 19:47 - 00000757 _____ () C:\Users\Jan\Desktop\JRT.txt 2015-02-14 19:45 - 2015-02-14 19:45 - 01388274 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe 2015-02-14 19:44 - 2015-02-14 19:44 - 00002055 _____ () C:\Users\Jan\Desktop\AdwCleaner[S0].txt 2015-02-14 19:43 - 2015-02-14 22:00 - 00001044 _____ () C:\Windows\setupact.log 2015-02-14 19:43 - 2015-02-14 19:43 - 00006548 _____ () C:\Windows\PFRO.log 2015-02-14 19:43 - 2015-02-14 19:43 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-14 19:41 - 2015-02-14 19:42 - 00000000 ____D () C:\AdwCleaner 2015-02-14 19:40 - 2015-02-14 19:40 - 02112512 _____ () C:\Users\Jan\Desktop\AdwCleaner_4.110.exe 2015-02-14 19:36 - 2015-02-14 19:36 - 00001290 _____ () C:\Users\Jan\Desktop\Revo Uninstaller.lnk 2015-02-14 19:36 - 2015-02-14 19:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-02-14 19:35 - 2015-02-14 19:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jan\Desktop\revosetup95.exe 2015-02-14 18:59 - 2015-02-15 09:19 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-14 18:58 - 02134528 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:22 - 2015-02-15 07:54 - 00000000 ____D () C:\Users\Jan\AppData\Local\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 20:02 - 00003434 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:24 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00035840 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-14 09:50 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-15 08:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-14 09:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-14 09:32 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-14 18:33 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-14 21:24 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-14 09:37 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-15 07:51 - 00000000 ___DO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 20:01 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-15 08:11 - 2014-12-25 05:06 - 01631328 _____ () C:\Windows\WindowsUpdate.log 2015-02-14 22:07 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-14 22:07 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-14 22:07 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-14 22:07 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-14 22:07 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-14 22:07 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-14 22:07 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-14 22:07 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-14 22:07 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-14 22:07 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-14 22:07 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-14 22:07 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-14 22:07 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-14 22:07 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-14 22:07 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-14 22:07 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-14 22:07 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-14 22:07 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-14 22:07 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-14 22:07 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-14 22:07 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-14 22:07 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-14 22:07 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-14 22:07 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-14 22:07 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-14 22:07 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-14 22:07 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-14 22:07 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-14 22:07 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-14 22:07 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-14 22:07 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-14 22:07 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-14 22:07 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-14 22:07 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-14 22:07 - 2014-04-30 16:43 - 00731772 _____ () C:\Windows\system32\perfh005.dat 2015-02-14 22:07 - 2014-04-30 16:43 - 00152016 _____ () C:\Windows\system32\perfc005.dat 2015-02-14 22:07 - 2014-03-18 11:03 - 15624104 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-14 22:00 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-14 21:59 - 2014-04-30 19:36 - 00000000 ____D () C:\Windows\system32\Drivers\tr-TR 2015-02-14 21:59 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 21:59 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-02-14 21:57 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-14 19:43 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-14 15:33 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe C:\Users\Jan\AppData\Local\Temp\Quarantine.exe C:\Users\Jan\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ |
15.02.2015, 15:51 | #8 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files (x86)\SearchProtect C:\Users\Jan\AppData\Local\avaxvyyvyf C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll C:\Windows\apppatch\apppatch64\VCLdr64.dll C:\Windows\apppatch\nbin\VC32Loader.dll C:\Windows\Installer\36ddc.msi AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = FF SelectedSearchEngine: Trovi FF Homepage: about:home Emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.02.2015, 16:41 | #9 |
| Browser Hijacker trovi.com u.a. Hier die Logs: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015 Ran by Jan at 2015-02-15 16:36:37 Run:1 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan & (Available profiles: Jan) Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Program Files (x86)\SearchProtect C:\Users\Jan\AppData\Local\avaxvyyvyf C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll C:\Windows\apppatch\apppatch64\VCLdr64.dll C:\Windows\apppatch\nbin\VC32Loader.dll C:\Windows\Installer\36ddc.msi AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = FF SelectedSearchEngine: Trovi FF Homepage: about:home Emptytemp: ***************** FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015 Ran by Jan (administrator) on MSI on 15-02-2015 16:39:12 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9E-A4DE-39B634B443E5 FF DefaultSearchEngine: Bing FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3557136 2015-02-02] (Client Connect LTD) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2015-02-09] (Futuremark) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () S3 cpuz138; \??\C:\Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-15 16:39 - 2015-02-15 16:39 - 00017084 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-15 11:33 - 2015-02-15 11:33 - 00000000 ____D () C:\Users\Jan\AppData\Local\Macromedia 2015-02-15 11:10 - 2015-02-15 11:10 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2015-02-15 10:47 - 2015-02-15 11:10 - 00000022 _____ () C:\Windows\GPU-Z.INI 2015-02-15 10:47 - 2015-02-15 10:47 - 00000000 ____D () C:\Temp 2015-02-15 10:45 - 2015-02-15 10:47 - 00000000 ____D () C:\Users\Jan\Documents\3DMark 2015-02-15 10:45 - 2015-02-15 10:45 - 00001226 _____ () C:\Users\Public\Desktop\3DMark.lnk 2015-02-15 10:45 - 2015-02-15 10:45 - 00000000 ____D () C:\Users\Jan\AppData\Local\Futuremark 2015-02-15 10:44 - 2015-02-15 10:44 - 00000358 _____ () C:\Windows\DirectX.log 2015-02-15 10:44 - 2015-02-15 10:44 - 00000000 ____D () C:\Program Files\Futuremark 2015-02-15 09:16 - 2015-02-15 09:16 - 00852594 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe 2015-02-15 08:49 - 2015-02-15 08:49 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe 2015-02-15 08:29 - 2015-02-15 08:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe 2015-02-15 07:54 - 2015-02-15 16:36 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2015-02-15 07:54 - 2015-02-15 07:54 - 00000000 ____D () C:\Users\Jan\AppData\Local\SearchProtect 2015-02-14 21:54 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-14 21:54 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2015-02-14 21:54 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2015-02-14 21:54 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-14 21:54 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-02-14 21:54 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-14 21:54 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2015-02-14 21:54 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-14 21:54 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2015-02-14 21:54 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-14 21:54 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2015-02-14 21:53 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 21:53 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 21:53 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-14 21:53 - 2014-07-24 16:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-14 21:53 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2015-02-14 21:53 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-14 21:53 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-14 21:53 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-14 21:53 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-14 21:53 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2015-02-14 21:53 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2015-02-14 21:53 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-14 21:53 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-14 21:53 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2015-02-14 21:53 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2015-02-14 21:53 - 2014-07-24 12:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-14 21:53 - 2014-07-24 12:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-14 21:53 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2015-02-14 21:53 - 2014-07-24 11:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-02-14 21:53 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2015-02-14 21:53 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-14 21:53 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2015-02-14 21:53 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2015-02-14 21:53 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2015-02-14 21:53 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-02-14 21:53 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2015-02-14 21:53 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2015-02-14 21:53 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2015-02-14 21:53 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-14 21:53 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2015-02-14 21:53 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2015-02-14 21:53 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2015-02-14 21:53 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-14 21:53 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-14 21:53 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2015-02-14 21:53 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-14 21:53 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2015-02-14 21:53 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2015-02-14 21:53 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-14 21:53 - 2014-07-24 09:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-14 21:53 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-14 21:53 - 2014-07-24 09:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-14 21:53 - 2014-07-24 09:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-14 21:53 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2015-02-14 21:53 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2015-02-14 21:53 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2015-02-14 21:53 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2015-02-14 21:53 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2015-02-14 21:53 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-14 21:53 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2015-02-14 21:53 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2015-02-14 21:53 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-14 21:53 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2015-02-14 21:53 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2015-02-14 21:53 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-14 21:53 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-14 21:53 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2015-02-14 21:53 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2015-02-14 21:53 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-14 21:53 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2015-02-14 21:53 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2015-02-14 21:53 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2015-02-14 21:53 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2015-02-14 21:53 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-14 21:53 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2015-02-14 21:53 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2015-02-14 21:53 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-14 21:53 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2015-02-14 19:45 - 2015-02-14 19:45 - 01388274 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe 2015-02-14 19:43 - 2015-02-15 16:37 - 00008104 _____ () C:\Windows\PFRO.log 2015-02-14 19:43 - 2015-02-15 16:37 - 00001392 _____ () C:\Windows\setupact.log 2015-02-14 19:43 - 2015-02-14 19:43 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-14 19:41 - 2015-02-14 19:42 - 00000000 ____D () C:\AdwCleaner 2015-02-14 19:40 - 2015-02-14 19:40 - 02112512 _____ () C:\Users\Jan\Desktop\AdwCleaner_4.110.exe 2015-02-14 19:36 - 2015-02-14 19:36 - 00001290 _____ () C:\Users\Jan\Desktop\Revo Uninstaller.lnk 2015-02-14 19:36 - 2015-02-14 19:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-02-14 19:35 - 2015-02-14 19:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jan\Desktop\revosetup95.exe 2015-02-14 18:59 - 2015-02-15 16:39 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-14 18:58 - 02134528 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:22 - 2015-02-14 20:02 - 00003434 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:24 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00035840 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-14 09:50 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-15 08:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-14 09:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-14 09:32 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-14 18:33 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-14 21:24 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-15 10:45 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-15 16:38 - 00000000 __RDO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 20:01 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-15 16:37 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-15 16:37 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-15 16:37 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-15 12:14 - 2014-12-25 05:06 - 01701992 _____ () C:\Windows\WindowsUpdate.log 2015-02-15 11:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru 2015-02-14 22:07 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-14 22:07 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-14 22:07 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-14 22:07 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-14 22:07 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-14 22:07 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-14 22:07 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-14 22:07 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-14 22:07 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-14 22:07 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-14 22:07 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-14 22:07 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-14 22:07 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-14 22:07 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-14 22:07 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-14 22:07 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-14 22:07 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-14 22:07 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-14 22:07 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-14 22:07 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-14 22:07 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-14 22:07 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-14 22:07 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-14 22:07 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-14 22:07 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-14 22:07 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-14 22:07 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-14 22:07 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-14 22:07 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-14 22:07 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-14 22:07 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-14 22:07 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-14 22:07 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-14 22:07 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-14 22:07 - 2014-04-30 16:43 - 00731772 _____ () C:\Windows\system32\perfh005.dat 2015-02-14 22:07 - 2014-04-30 16:43 - 00152016 _____ () C:\Windows\system32\perfc005.dat 2015-02-14 22:07 - 2014-03-18 11:03 - 15624104 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-14 21:59 - 2014-04-30 19:36 - 00000000 ____D () C:\Windows\system32\Drivers\tr-TR 2015-02-14 21:59 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 21:59 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-02-14 21:57 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ |
15.02.2015, 18:47 | #10 |
| Browser Hijacker trovi.com u.a. Oops, sorry. Da ist beim posten des Fixlog etwas schiefgelaufen, hier die richtige (d.h. komplette) Fassung: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015 Ran by Jan at 2015-02-15 16:36:37 Run:1 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan & (Available profiles: Jan) Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Program Files (x86)\SearchProtect C:\Users\Jan\AppData\Local\avaxvyyvyf C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll C:\Windows\apppatch\apppatch64\VCLdr64.dll C:\Windows\apppatch\nbin\VC32Loader.dll C:\Windows\Installer\36ddc.msi AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = FF SelectedSearchEngine: Trovi FF Homepage: about:home Emptytemp: ***************** "C:\Program Files (x86)\SearchProtect" directory move: C:\Program Files (x86)\SearchProtect\EULA.txt => Moved successfully. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\DialogAPI.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-dia.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def-grey.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\SP_DialogBG.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.css" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.html" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\defaults.js" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\rep\cfi.bin" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\rep\edk.bin" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\rep\pni.bin" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\rep\trn.bin" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.pun" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\SearchProtect" directory. => Scheduled to move on reboot. C:\Users\Jan\AppData\Local\avaxvyyvyf => Moved successfully. C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll => Moved successfully. Could not move "C:\Windows\apppatch\apppatch64\VCLdr64.dll" => Scheduled to move on reboot. Could not move "C:\Windows\apppatch\nbin\VC32Loader.dll" => Scheduled to move on reboot. C:\Windows\Installer\36ddc.msi => Moved successfully. "C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll" => Value Data removed successfully. "C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll" => Value Data removed successfully. HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key deleted successfully. HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. "HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9EA152EC-3022-472E-89C1-A07C47BCF400}" => Key deleted successfully. HKCR\CLSID\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key deleted successfully. HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. "HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9EA152EC-3022-472E-89C1-A07C47BCF400}" => Key deleted successfully. HKCR\CLSID\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. Firefox SelectedSearchEngine deleted successfully. Firefox homepage deleted successfully. EmptyTemp: => Removed 4.8 GB temporary data. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-15 16:37:25)<= "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\DialogAPI.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-dia.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def-grey.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\SP_DialogBG.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.css" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.html" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\defaults.js" => File could not move. "C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\rep\cfi.bin" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\rep\edk.bin" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\rep\pni.bin" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\rep\trn.bin" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe" => File could not move. "C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.pun" => File could not move. "C:\Program Files (x86)\SearchProtect" => Directory could not move. "C:\Windows\apppatch\apppatch64\VCLdr64.dll" => File could not move. "C:\Windows\apppatch\nbin\VC32Loader.dll" => File could not move. ==== End of Fixlog 16:37:27 ==== |
16.02.2015, 06:57 | #11 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a. Fix bitte im abgesicherten Modus wiederholen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.02.2015, 08:21 | #12 |
| Browser Hijacker trovi.com u.a. Guten Morgen, ist erledigt. Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015 Ran by Jan at 2015-02-16 08:16:12 Run:2 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** C:\Program Files (x86)\SearchProtect C:\Users\Jan\AppData\Local\avaxvyyvyf C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll C:\Windows\apppatch\apppatch64\VCLdr64.dll C:\Windows\apppatch\nbin\VC32Loader.dll C:\Windows\Installer\36ddc.msi AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [257808 2015-02-02] (Client Connect LTD) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [221968 2015-02-02] (Client Connect LTD) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=55&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=M8115DC3A-7CA5-43B7-8707-A76C6C0F7C44&SearchSource=58&CUI=&UM=8&UP=SP178C5E91-94A5-4AF9-AFE1-996CAA83C6DC&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9EA152EC-3022-472E-89C1-A07C47BCF400} URL = FF SelectedSearchEngine: Trovi FF Homepage: about:home Emptytemp: ***************** C:\Program Files (x86)\SearchProtect => Moved successfully. "C:\Users\Jan\AppData\Local\avaxvyyvyf" => File/Directory not found. "C:\Users\Jan\AppData\Local\Temp\nsn6179.tmp\SPtool.dll" => File/Directory not found. C:\Windows\apppatch\apppatch64\VCLdr64.dll => Moved successfully. C:\Windows\apppatch\nbin\VC32Loader.dll => Moved successfully. "C:\Windows\Installer\36ddc.msi" => File/Directory not found. "C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll" => Value Data not found. "C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll" => Value Data not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key deleted successfully. HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. HKCR\CLSID\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. HKU\S-1-5-21-3102993943-3818829656-705581800-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. HKCR\CLSID\{9EA152EC-3022-472E-89C1-A07C47BCF400} => Key not found. Firefox SelectedSearchEngine deleted successfully. Firefox homepage deleted successfully. EmptyTemp: => Removed 45.4 MB temporary data. The system needed a reboot. ==== End of Fixlog 08:16:13 ==== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-02-2015 Ran by Jan (administrator) on MSI on 16-02-2015 08:18:26 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" File Not Found Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9E-A4DE-39B634B443E5 FF DefaultSearchEngine: Bing FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2015-02-09] (Futuremark) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () S3 cpuz138; \??\C:\Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-16 08:18 - 2015-02-16 08:18 - 00015751 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-16 08:18 - 2015-02-16 08:18 - 00000000 ____D () C:\Users\Jan\Desktop\FRST-OlderVersion 2015-02-16 07:22 - 2015-02-16 08:16 - 00000348 _____ () C:\Windows\setupact.log 2015-02-16 07:22 - 2015-02-16 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-15 11:33 - 2015-02-15 11:33 - 00000000 ____D () C:\Users\Jan\AppData\Local\Macromedia 2015-02-15 11:10 - 2015-02-15 11:10 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2015-02-15 10:47 - 2015-02-15 11:10 - 00000022 _____ () C:\Windows\GPU-Z.INI 2015-02-15 10:47 - 2015-02-15 10:47 - 00000000 ____D () C:\Temp 2015-02-15 10:45 - 2015-02-15 10:47 - 00000000 ____D () C:\Users\Jan\Documents\3DMark 2015-02-15 10:45 - 2015-02-15 10:45 - 00001226 _____ () C:\Users\Public\Desktop\3DMark.lnk 2015-02-15 10:45 - 2015-02-15 10:45 - 00000000 ____D () C:\Users\Jan\AppData\Local\Futuremark 2015-02-15 10:44 - 2015-02-15 10:44 - 00000000 ____D () C:\Program Files\Futuremark 2015-02-15 09:16 - 2015-02-15 09:16 - 00852594 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe 2015-02-15 08:49 - 2015-02-15 08:49 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe 2015-02-15 08:29 - 2015-02-15 08:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe 2015-02-15 07:54 - 2015-02-15 07:54 - 00000000 ____D () C:\Users\Jan\AppData\Local\SearchProtect 2015-02-14 21:54 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-14 21:54 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2015-02-14 21:54 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2015-02-14 21:54 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-14 21:54 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-02-14 21:54 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-14 21:54 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2015-02-14 21:54 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-14 21:54 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2015-02-14 21:54 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-14 21:54 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2015-02-14 21:53 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 21:53 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 21:53 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-14 21:53 - 2014-07-24 16:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-14 21:53 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2015-02-14 21:53 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-14 21:53 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-14 21:53 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-14 21:53 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-14 21:53 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2015-02-14 21:53 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2015-02-14 21:53 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-14 21:53 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-14 21:53 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2015-02-14 21:53 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2015-02-14 21:53 - 2014-07-24 12:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-14 21:53 - 2014-07-24 12:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-14 21:53 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2015-02-14 21:53 - 2014-07-24 11:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-02-14 21:53 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2015-02-14 21:53 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-14 21:53 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2015-02-14 21:53 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2015-02-14 21:53 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2015-02-14 21:53 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-02-14 21:53 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2015-02-14 21:53 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2015-02-14 21:53 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2015-02-14 21:53 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-14 21:53 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2015-02-14 21:53 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2015-02-14 21:53 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2015-02-14 21:53 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-14 21:53 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-14 21:53 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2015-02-14 21:53 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-14 21:53 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2015-02-14 21:53 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2015-02-14 21:53 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-14 21:53 - 2014-07-24 09:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-14 21:53 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-14 21:53 - 2014-07-24 09:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-14 21:53 - 2014-07-24 09:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-14 21:53 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2015-02-14 21:53 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2015-02-14 21:53 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2015-02-14 21:53 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2015-02-14 21:53 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2015-02-14 21:53 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-14 21:53 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2015-02-14 21:53 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2015-02-14 21:53 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-14 21:53 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2015-02-14 21:53 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2015-02-14 21:53 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-14 21:53 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-14 21:53 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2015-02-14 21:53 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2015-02-14 21:53 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-14 21:53 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2015-02-14 21:53 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2015-02-14 21:53 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2015-02-14 21:53 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2015-02-14 21:53 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-14 21:53 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2015-02-14 21:53 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2015-02-14 21:53 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-14 21:53 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2015-02-14 19:45 - 2015-02-14 19:45 - 01388274 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe 2015-02-14 19:41 - 2015-02-14 19:42 - 00000000 ____D () C:\AdwCleaner 2015-02-14 19:40 - 2015-02-14 19:40 - 02112512 _____ () C:\Users\Jan\Desktop\AdwCleaner_4.110.exe 2015-02-14 19:36 - 2015-02-14 19:36 - 00001290 _____ () C:\Users\Jan\Desktop\Revo Uninstaller.lnk 2015-02-14 19:36 - 2015-02-14 19:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-02-14 19:35 - 2015-02-14 19:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jan\Desktop\revosetup95.exe 2015-02-14 18:59 - 2015-02-16 08:18 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-16 08:18 - 02085888 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:22 - 2015-02-15 21:41 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-15 19:27 - 00202752 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-14 20:02 - 00003434 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-15 22:52 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-15 22:51 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-15 08:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-15 19:14 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-15 21:44 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-15 22:55 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-15 22:53 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-15 10:45 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-16 08:17 - 00000000 ___DO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 20:01 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-16 08:16 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-16 08:16 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-16 08:08 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-16 07:51 - 2014-04-30 16:42 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2015-02-16 07:51 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\winrm 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\Com 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\MUI 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\Com 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\IME 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Dism 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\servicing 2015-02-16 07:46 - 2014-12-25 05:06 - 01776859 _____ () C:\Windows\WindowsUpdate.log 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\WCN 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\slmgr 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\migwiz 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-16 07:42 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2015-02-15 16:44 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-15 16:44 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-15 16:44 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-15 16:44 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-15 16:44 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-15 16:44 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-15 16:44 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-15 16:44 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-15 16:44 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-15 16:44 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-15 16:44 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-15 16:44 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-15 16:44 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-15 16:44 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-15 16:44 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-15 16:44 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-15 16:44 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-15 16:44 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-15 16:44 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-15 16:44 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-15 16:44 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-15 16:44 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-15 16:44 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-15 16:44 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-15 16:44 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-15 16:44 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-15 16:44 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-15 16:44 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-15 16:44 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-15 16:44 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-15 16:44 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-15 16:44 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-15 16:44 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-15 16:44 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-15 16:44 - 2014-03-18 11:03 - 15624104 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-15 16:37 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-15 11:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru 2015-02-14 21:59 - 2014-04-30 19:36 - 00000000 ____D () C:\Windows\system32\Drivers\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ |
16.02.2015, 18:07 | #13 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CloseProcesses: AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" File Not Found S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [X] Emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Nochmal frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.02.2015, 19:07 | #14 |
| Browser Hijacker trovi.com u.a. Ist erledigt. Hier die Logs: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-02-2015 Ran by Jan at 2015-02-16 19:02:32 Run:3 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" File Not Found S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [X] Emptytemp: ***************** Processes closed successfully. "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL" => Value Data removed successfully. "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" => Value Data removed successfully. CltMngSvc => Service deleted successfully. EmptyTemp: => Removed 160.6 MB temporary data. The system needed a reboot. ==== End of Fixlog 19:02:45 ==== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-02-2015 Ran by Jan (administrator) on MSI on 16-02-2015 19:05:22 Running from C:\Users\Jan\Desktop Loaded Profiles: Jan (Available profiles: Jan) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe () C:\Users\Jan\Desktop\NetMeterEvo.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-20] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-10-20] (Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-10-14] (MSI) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-10-20] (Synaptics Incorporated) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\...\Run: [NetMeter Evo] => C:\Users\Jan\Desktop\NetMeterEvo.exe [1192448 2015-02-13] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3102993943-3818829656-705581800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=MD9FB5F31-809C-4F7D-88AA-04952E131069&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP0A61548E-0616-4F9E-A4DE-39B634B443E5 FF DefaultSearchEngine: Bing FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Extension: Avira Browser Safety - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\abs@avira.com [2015-02-13] FF Extension: feedly - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\feedly@devhd.xpi [2015-02-13] FF Extension: Download Status Bar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2015-02-13] FF Extension: NoScript - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-13] FF Extension: Sage - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2015-02-13] FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\kjKyxiPc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [309376 2014-09-19] (Qualcomm Atheros) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-26] (CyberLink) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2015-02-09] (Futuremark) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-20] (NVIDIA Corporation) S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-10-20] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-10-14] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-20] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-20] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-14] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-20] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-02-04] (Avira Operations GmbH & Co. KG) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-09-11] (Qualcomm Atheros, Inc.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-20] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-10-20] (Windows (R) Win 7 DDK provider) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-10-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-20] (NVIDIA Corporation) R3 Qcamain; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2233344 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-10-20] (Realsil Semiconductor Corporation) S3 SAlphamBth; C:\Windows\System32\drivers\SAlphabt64.sys [31232 2014-05-16] (SteelSeries Corporation) S3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\drivers\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2014-10-20] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-10-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () S3 cpuz138; \??\C:\Windows\TEMP\cpuz138\cpuz138_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-16 19:05 - 2015-02-16 19:05 - 00015486 _____ () C:\Users\Jan\Desktop\FRST.txt 2015-02-16 17:54 - 2015-02-16 17:54 - 09969115 _____ () C:\Users\Jan\Desktop\DieWache-EvaMaron.rm 2015-02-16 07:22 - 2015-02-16 19:03 - 00000696 _____ () C:\Windows\setupact.log 2015-02-16 07:22 - 2015-02-16 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-15 11:33 - 2015-02-15 11:33 - 00000000 ____D () C:\Users\Jan\AppData\Local\Macromedia 2015-02-15 11:10 - 2015-02-15 11:10 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2015-02-15 10:47 - 2015-02-15 11:10 - 00000022 _____ () C:\Windows\GPU-Z.INI 2015-02-15 10:47 - 2015-02-15 10:47 - 00000000 ____D () C:\Temp 2015-02-15 10:45 - 2015-02-15 10:47 - 00000000 ____D () C:\Users\Jan\Documents\3DMark 2015-02-15 10:45 - 2015-02-15 10:45 - 00001226 _____ () C:\Users\Public\Desktop\3DMark.lnk 2015-02-15 10:45 - 2015-02-15 10:45 - 00000000 ____D () C:\Users\Jan\AppData\Local\Futuremark 2015-02-15 10:44 - 2015-02-15 10:44 - 00000000 ____D () C:\Program Files\Futuremark 2015-02-15 09:16 - 2015-02-15 09:16 - 00852594 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe 2015-02-15 08:49 - 2015-02-15 08:49 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe 2015-02-15 08:29 - 2015-02-15 08:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe 2015-02-15 07:54 - 2015-02-15 07:54 - 00000000 ____D () C:\Users\Jan\AppData\Local\SearchProtect 2015-02-14 21:54 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-14 21:54 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2015-02-14 21:54 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2015-02-14 21:54 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-14 21:54 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-02-14 21:54 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-02-14 21:54 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-14 21:54 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2015-02-14 21:54 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2015-02-14 21:54 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-14 21:54 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2015-02-14 21:54 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-14 21:54 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2015-02-14 21:53 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-14 21:53 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-14 21:53 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-14 21:53 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-14 21:53 - 2014-07-24 16:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-14 21:53 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2015-02-14 21:53 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2015-02-14 21:53 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-14 21:53 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-14 21:53 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-14 21:53 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-02-14 21:53 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-14 21:53 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-14 21:53 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2015-02-14 21:53 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2015-02-14 21:53 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2015-02-14 21:53 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2015-02-14 21:53 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2015-02-14 21:53 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-14 21:53 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-14 21:53 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2015-02-14 21:53 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2015-02-14 21:53 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2015-02-14 21:53 - 2014-07-24 12:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-14 21:53 - 2014-07-24 12:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-14 21:53 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2015-02-14 21:53 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2015-02-14 21:53 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2015-02-14 21:53 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2015-02-14 21:53 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2015-02-14 21:53 - 2014-07-24 11:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-02-14 21:53 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2015-02-14 21:53 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-14 21:53 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2015-02-14 21:53 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2015-02-14 21:53 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2015-02-14 21:53 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2015-02-14 21:53 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2015-02-14 21:53 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-02-14 21:53 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2015-02-14 21:53 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2015-02-14 21:53 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2015-02-14 21:53 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2015-02-14 21:53 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-14 21:53 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2015-02-14 21:53 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2015-02-14 21:53 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2015-02-14 21:53 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-14 21:53 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-14 21:53 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2015-02-14 21:53 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2015-02-14 21:53 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-14 21:53 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2015-02-14 21:53 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2015-02-14 21:53 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2015-02-14 21:53 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2015-02-14 21:53 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2015-02-14 21:53 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2015-02-14 21:53 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2015-02-14 21:53 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2015-02-14 21:53 - 2014-07-24 09:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2015-02-14 21:53 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-14 21:53 - 2014-07-24 09:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2015-02-14 21:53 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2015-02-14 21:53 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-14 21:53 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2015-02-14 21:53 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-14 21:53 - 2014-07-24 09:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-14 21:53 - 2014-07-24 09:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-02-14 21:53 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2015-02-14 21:53 - 2014-07-24 09:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-02-14 21:53 - 2014-07-24 09:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-14 21:53 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-14 21:53 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2015-02-14 21:53 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2015-02-14 21:53 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2015-02-14 21:53 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-14 21:53 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2015-02-14 21:53 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2015-02-14 21:53 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2015-02-14 21:53 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-14 21:53 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2015-02-14 21:53 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2015-02-14 21:53 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2015-02-14 21:53 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2015-02-14 21:53 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-14 21:53 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2015-02-14 21:53 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2015-02-14 21:53 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-14 21:53 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-14 21:53 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2015-02-14 21:53 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2015-02-14 21:53 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-14 21:53 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2015-02-14 21:53 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2015-02-14 21:53 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2015-02-14 21:53 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2015-02-14 21:53 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-14 21:53 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2015-02-14 21:53 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2015-02-14 21:53 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2015-02-14 21:53 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-14 21:53 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2015-02-14 21:53 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2015-02-14 21:53 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2015-02-14 19:45 - 2015-02-14 19:45 - 01388274 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe 2015-02-14 19:41 - 2015-02-14 19:42 - 00000000 ____D () C:\AdwCleaner 2015-02-14 19:40 - 2015-02-14 19:40 - 02112512 _____ () C:\Users\Jan\Desktop\AdwCleaner_4.110.exe 2015-02-14 19:36 - 2015-02-14 19:36 - 00001290 _____ () C:\Users\Jan\Desktop\Revo Uninstaller.lnk 2015-02-14 19:36 - 2015-02-14 19:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-02-14 19:35 - 2015-02-14 19:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jan\Desktop\revosetup95.exe 2015-02-14 18:59 - 2015-02-16 19:05 - 00000000 ____D () C:\FRST 2015-02-14 18:58 - 2015-02-16 08:18 - 02085888 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2015-02-14 18:22 - 2015-02-16 17:15 - 00210432 ___SH () C:\Users\Jan\Desktop\Thumbs.db 2015-02-14 18:22 - 2015-02-15 21:41 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\CDisplayEx 2015-02-14 18:22 - 2015-02-14 20:02 - 00003434 _____ () C:\Windows\System32\Tasks\avaxvyyvyf 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx 2015-02-14 18:22 - 2015-02-14 18:22 - 00000000 ____D () C:\Program Files\CDisplayEx 2015-02-14 15:50 - 2015-02-14 15:50 - 00000295 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-02-14 14:59 - 2015-02-14 15:00 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-14 14:59 - 2015-01-29 17:49 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-14 14:58 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2015-02-14 14:58 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2015-02-14 14:57 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-02-14 14:57 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2015-02-14 14:57 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2015-02-14 14:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-14 14:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-14 14:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-14 14:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-02-14 14:56 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-14 14:56 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-14 14:56 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-14 14:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-14 14:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-14 14:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-14 14:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-14 14:56 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-14 14:56 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-02-14 14:56 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-02-14 14:56 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-02-14 14:56 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-02-14 14:56 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-02-14 14:53 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-14 14:53 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-14 14:53 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-14 14:53 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-14 14:53 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-14 14:53 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-14 14:53 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml 2015-02-14 14:53 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-14 14:53 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-14 14:53 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-02-14 14:53 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-14 14:53 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-14 14:53 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-02-14 14:53 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-14 14:53 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-02-14 14:53 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-02-14 14:53 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-02-14 14:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-14 14:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-02-14 14:53 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-14 14:53 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-14 14:53 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2015-02-14 14:53 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-14 14:52 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-14 14:52 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-02-14 14:51 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-14 14:51 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-14 14:51 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-14 14:51 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-02-14 14:51 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-14 14:51 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2015-02-14 14:51 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-14 14:51 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2015-02-14 14:51 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2015-02-14 14:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-14 14:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-14 14:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-14 14:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-14 14:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-14 14:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-14 14:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-14 14:48 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-14 14:48 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-14 14:48 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-14 14:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-02-14 14:48 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-14 14:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-14 14:48 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-14 14:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-14 14:48 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-14 14:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-14 14:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-14 14:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-14 14:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-14 14:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-14 14:48 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-14 14:48 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-14 14:48 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-02-14 14:48 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-14 14:48 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-14 14:48 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-14 14:48 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-02-14 14:48 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-14 14:48 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-14 14:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-14 14:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-14 14:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-14 14:48 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-14 14:48 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-14 14:48 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-14 14:48 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-14 14:48 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-14 14:48 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-14 14:48 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-02-14 14:48 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-14 14:48 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-14 14:48 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-14 14:48 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-14 14:48 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-14 14:48 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-14 14:48 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-02-14 14:48 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-02-14 14:48 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-02-14 14:48 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-02-14 14:48 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-02-14 14:48 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-02-14 14:48 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-14 14:48 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-14 14:48 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-14 14:48 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-14 14:48 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-14 14:48 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-02-14 14:48 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-14 14:48 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-14 14:48 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-02-14 14:48 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-14 14:48 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-02-14 14:48 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-14 14:48 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-02-14 14:48 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-02-14 14:48 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-02-14 14:48 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-02-14 14:48 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-02-14 14:48 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-02-14 14:48 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-02-14 14:48 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-02-14 14:48 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-02-14 14:48 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-14 14:48 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-02-14 14:48 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-14 14:46 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-14 14:46 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-14 14:46 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-02-14 14:46 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2015-02-14 14:46 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2015-02-14 14:46 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-02-14 14:46 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-14 14:46 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2015-02-14 14:46 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-02-14 14:46 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2015-02-14 14:46 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2015-02-14 14:46 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2015-02-14 14:46 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2015-02-14 14:46 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-14 14:46 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2015-02-14 14:46 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2015-02-14 14:46 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-02-14 14:46 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2015-02-14 14:46 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2015-02-14 14:46 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2015-02-14 14:46 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-02-14 14:46 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2015-02-14 14:46 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-14 14:46 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-02-14 14:46 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-02-14 14:46 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-02-14 14:46 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2015-02-14 14:46 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-14 14:46 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-02-14 14:46 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-14 14:45 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-02-14 14:45 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-02-14 14:45 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-14 14:45 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-02-14 14:45 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2015-02-14 14:45 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2015-02-14 14:45 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-14 14:45 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-02-14 14:45 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe 2015-02-14 14:45 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2015-02-14 14:45 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2015-02-14 14:44 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-14 14:44 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-14 14:44 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-02-14 14:44 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-14 14:44 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-14 14:44 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-14 14:44 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-02-14 14:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-02-14 14:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-02-14 14:44 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-02-14 14:44 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-02-14 14:44 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-02-14 14:44 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-02-14 14:44 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-02-14 14:44 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-14 14:44 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-14 14:44 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-02-14 14:44 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-14 14:44 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-14 14:44 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-14 14:44 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-14 14:44 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2015-02-14 14:44 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-02-14 14:44 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-02-14 14:44 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-14 14:44 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-02-14 14:44 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll 2015-02-14 14:44 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll 2015-02-14 14:44 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-02-14 14:44 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-14 14:44 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2015-02-14 14:44 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2015-02-14 14:44 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2015-02-14 14:44 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-02-14 14:44 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-14 14:44 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2015-02-14 14:44 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-02-14 14:44 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-02-14 14:44 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-02-14 14:44 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-02-14 14:44 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-02-14 14:44 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2015-02-14 09:40 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\Documents\BioWare 2015-02-14 09:37 - 2015-02-14 09:39 - 00001350 _____ () C:\Users\Public\Desktop\Dragon Age Inquisition.lnk 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-14 08:46 - 2015-02-14 08:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP560 series 2015-02-14 08:45 - 2015-02-14 08:45 - 00000000 ___HD () C:\ProgramData\CanonBJ 2015-02-14 08:45 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA0.DLL 2015-02-14 08:44 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC560C.dll 2015-02-14 08:44 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC560I.dll 2015-02-14 08:44 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560U.dll 2015-02-14 08:44 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC560L.dll 2015-02-14 08:44 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC560L.dll 2015-02-14 08:44 - 2009-02-16 12:19 - 00012800 _____ () C:\Windows\SysWOW64\CNC173ED.TBL 2015-02-14 08:44 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-02-14 08:44 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-02-14 00:37 - 2015-02-14 00:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\PackageStaging 2015-02-14 00:32 - 2015-02-14 08:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2015-02-14 00:30 - 2015-02-15 22:52 - 00000000 ____D () C:\ProgramData\Origin 2015-02-14 00:30 - 2015-02-15 22:51 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\Users\Jan\AppData\Local\Origin 2015-02-14 00:30 - 2015-02-14 09:40 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-14 00:30 - 2015-02-14 08:37 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Origin 2015-02-14 00:30 - 2015-02-14 00:30 - 00001001 _____ () C:\Users\Public\Desktop\Origin.lnk 2015-02-14 00:30 - 2015-02-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-02-13 23:56 - 2015-02-13 23:56 - 00000000 ____D () C:\Users\Jan\Documents\WB Games 2015-02-13 23:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-13 23:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-13 23:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-13 23:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-13 23:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-13 23:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-13 23:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-13 23:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-13 23:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-13 23:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-13 23:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-13 23:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-13 23:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-13 23:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-13 23:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-13 23:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-13 23:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-13 23:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-13 23:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-13 23:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-13 23:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-13 23:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-13 23:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-13 23:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-13 23:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-13 23:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-13 23:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-13 23:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-13 23:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-13 23:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-13 23:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-13 23:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-13 23:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-13 23:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-13 23:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-13 23:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-13 23:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-13 23:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-13 23:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-13 23:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-13 23:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-13 23:46 - 2015-02-13 23:46 - 00000580 _____ () C:\Users\Public\Desktop\Fraps.lnk 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-02-13 23:46 - 2015-02-13 23:46 - 00000000 ____D () C:\Fraps 2015-02-13 23:07 - 2015-02-15 08:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 23:07 - 2015-02-13 23:07 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 23:07 - 2015-02-13 23:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-13 23:07 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 23:07 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 22:57 - 2015-02-16 17:59 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\vlc 2015-02-13 22:56 - 2015-02-13 22:56 - 00001092 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-13 22:56 - 2015-02-13 22:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2015-02-13 22:30 - 2015-02-13 22:30 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-13 22:30 - 2015-02-13 22:30 - 00000844 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-13 22:30 - 2015-02-13 22:30 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-13 22:23 - 2015-02-15 21:44 - 00000000 ____D () C:\Program Files\PeerBlock 2015-02-13 22:23 - 2015-02-13 22:23 - 00001758 _____ () C:\Users\Jan\Desktop\PeerBlock.lnk 2015-02-13 22:23 - 2015-02-13 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock 2015-02-13 22:19 - 2015-02-13 22:19 - 00000902 _____ () C:\Users\Jan\Desktop\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000882 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-13 22:19 - 2015-02-13 22:19 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Macromedia 2015-02-13 22:18 - 2015-02-15 22:55 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent 2015-02-13 21:49 - 2015-02-15 22:53 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-13 21:49 - 2015-02-13 21:49 - 00000985 _____ () C:\Users\Public\Desktop\Steam.lnk 2015-02-13 21:49 - 2015-02-13 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-02-13 21:22 - 2015-02-13 21:22 - 00000000 _____ () C:\Users\Jan\agent.log 2015-02-13 21:12 - 2015-02-13 21:12 - 00000000 ____D () C:\ProgramData\SplitMediaLabs 2015-02-13 21:10 - 2015-02-13 21:10 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\NVIDIA 2015-02-13 21:09 - 2015-02-13 21:09 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Jan\Desktop\GPU-Z.0.8.1.exe 2015-02-13 20:53 - 2015-02-13 20:53 - 00001181 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00001169 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Local\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-13 20:53 - 2015-02-13 20:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-13 20:49 - 2015-02-14 17:27 - 00000001 _____ () C:\Users\Public\Documents\dgc.txt 2015-02-13 20:46 - 2015-02-13 20:46 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Avira 2015-02-13 20:46 - 2015-02-13 20:45 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-13 20:45 - 2015-02-13 20:53 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Mozilla 2015-02-13 20:45 - 2015-02-04 17:51 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-13 20:45 - 2015-02-04 17:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\ProgramData\Avira 2015-02-13 20:44 - 2015-02-13 20:45 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-02-13 20:44 - 2015-02-13 20:44 - 00001163 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-02-13 20:43 - 2015-02-15 10:45 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 20:38 - 2015-02-13 20:38 - 00000000 ____D () C:\Users\Jan\AppData\Local\Micro-Star_International_ 2015-02-13 20:36 - 2015-02-16 19:04 - 00000000 ___DO () C:\Users\Jan\OneDrive 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieUserList 2015-02-13 20:36 - 2015-02-13 20:36 - 00000000 __SHD () C:\Users\Jan\AppData\Local\EmieSiteList 2015-02-13 20:35 - 2015-02-14 20:01 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3102993943-3818829656-705581800-1001 2015-02-13 20:32 - 2015-02-13 20:32 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Anti-Theft 2015-02-13 20:30 - 2015-02-13 20:30 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Intel Corporation 2015-02-13 20:29 - 2015-02-14 08:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages 2015-02-13 20:29 - 2015-02-13 20:29 - 00001460 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 20:29 - 2015-02-13 20:29 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\SteelSeries 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Adobe 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\VirtualStore 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\SteelSeries_ApS 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA Corporation 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\NVIDIA 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSIOnlineRegister 2015-02-13 20:29 - 2015-02-13 20:29 - 00000000 ____D () C:\Users\Jan\AppData\Local\MSI 2015-02-13 20:28 - 2015-02-13 21:22 - 00000000 ____D () C:\Users\Jan 2015-02-13 20:28 - 2015-02-13 20:28 - 00000020 ___SH () C:\Users\Jan\ntuser.ini 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Vorlagen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Startmenü 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Netzwerkumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Lokale Einstellungen 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Eigene Dateien 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Druckumgebung 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Musik 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Documents\Eigene Bilder 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Verlauf 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\AppData\Local\Anwendungsdaten 2015-02-13 20:28 - 2015-02-13 20:28 - 00000000 _SHDL () C:\Users\Jan\Anwendungsdaten 2015-02-13 20:28 - 2014-10-20 18:29 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-13 20:28 - 2014-10-20 18:19 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-13 20:28 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-13 20:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-16 19:03 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-16 19:03 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI 2015-02-16 17:19 - 2014-12-25 05:06 - 01797051 _____ () C:\Windows\WindowsUpdate.log 2015-02-16 17:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru 2015-02-16 17:00 - 2014-04-30 19:59 - 00794198 _____ () C:\Windows\system32\perfh010.dat 2015-02-16 17:00 - 2014-04-30 19:59 - 00156618 _____ () C:\Windows\system32\perfc010.dat 2015-02-16 17:00 - 2014-04-30 19:39 - 00715852 _____ () C:\Windows\system32\perfh01F.dat 2015-02-16 17:00 - 2014-04-30 19:39 - 00150496 _____ () C:\Windows\system32\perfc01F.dat 2015-02-16 17:00 - 2014-04-30 19:29 - 00725714 _____ () C:\Windows\system32\perfh01D.dat 2015-02-16 17:00 - 2014-04-30 19:29 - 00152568 _____ () C:\Windows\system32\perfc01D.dat 2015-02-16 17:00 - 2014-04-30 19:00 - 00781366 _____ () C:\Windows\system32\perfh019.dat 2015-02-16 17:00 - 2014-04-30 19:00 - 00161902 _____ () C:\Windows\system32\perfc019.dat 2015-02-16 17:00 - 2014-04-30 18:44 - 00789794 _____ () C:\Windows\system32\prfh0816.dat 2015-02-16 17:00 - 2014-04-30 18:44 - 00164364 _____ () C:\Windows\system32\prfc0816.dat 2015-02-16 17:00 - 2014-04-30 18:36 - 00775938 _____ () C:\Windows\system32\prfh0416.dat 2015-02-16 17:00 - 2014-04-30 18:36 - 00159030 _____ () C:\Windows\system32\prfc0416.dat 2015-02-16 17:00 - 2014-04-30 18:27 - 00798998 _____ () C:\Windows\system32\perfh015.dat 2015-02-16 17:00 - 2014-04-30 18:27 - 00163880 _____ () C:\Windows\system32\perfc015.dat 2015-02-16 17:00 - 2014-04-30 18:19 - 00798450 _____ () C:\Windows\system32\perfh013.dat 2015-02-16 17:00 - 2014-04-30 18:19 - 00162528 _____ () C:\Windows\system32\perfc013.dat 2015-02-16 17:00 - 2014-04-30 18:11 - 00441798 _____ () C:\Windows\system32\perfh014.dat 2015-02-16 17:00 - 2014-04-30 18:11 - 00077450 _____ () C:\Windows\system32\perfc014.dat 2015-02-16 17:00 - 2014-04-30 17:54 - 00743600 _____ () C:\Windows\system32\perfh00E.dat 2015-02-16 17:00 - 2014-04-30 17:54 - 00178186 _____ () C:\Windows\system32\perfc00E.dat 2015-02-16 17:00 - 2014-04-30 17:39 - 00409156 _____ () C:\Windows\system32\perfh00D.dat 2015-02-16 17:00 - 2014-04-30 17:39 - 00065162 _____ () C:\Windows\system32\perfc00D.dat 2015-02-16 17:00 - 2014-04-30 17:31 - 00802432 _____ () C:\Windows\system32\perfh00C.dat 2015-02-16 17:00 - 2014-04-30 17:31 - 00159382 _____ () C:\Windows\system32\perfc00C.dat 2015-02-16 17:00 - 2014-04-30 17:23 - 00427404 _____ () C:\Windows\system32\perfh00B.dat 2015-02-16 17:00 - 2014-04-30 17:23 - 00081986 _____ () C:\Windows\system32\perfc00B.dat 2015-02-16 17:00 - 2014-04-30 17:09 - 00800858 _____ () C:\Windows\system32\perfh00A.dat 2015-02-16 17:00 - 2014-04-30 17:09 - 00166748 _____ () C:\Windows\system32\perfc00A.dat 2015-02-16 17:00 - 2014-04-30 17:02 - 00542830 _____ () C:\Windows\system32\perfh008.dat 2015-02-16 17:00 - 2014-04-30 17:02 - 00089394 _____ () C:\Windows\system32\perfc008.dat 2015-02-16 17:00 - 2014-04-30 16:55 - 00766620 _____ () C:\Windows\system32\perfh007.dat 2015-02-16 17:00 - 2014-04-30 16:55 - 00159902 _____ () C:\Windows\system32\perfc007.dat 2015-02-16 17:00 - 2014-04-30 16:48 - 00456706 _____ () C:\Windows\system32\perfh006.dat 2015-02-16 17:00 - 2014-04-30 16:48 - 00079958 _____ () C:\Windows\system32\perfc006.dat 2015-02-16 17:00 - 2014-03-18 11:03 - 14740106 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-16 08:08 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-02-16 07:51 - 2014-04-30 16:42 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2015-02-16 07:51 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\winrm 2015-02-16 07:51 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\Com 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\MUI 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\Com 2015-02-16 07:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\IME 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Dism 2015-02-16 07:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\servicing 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\WCN 2015-02-16 07:42 - 2014-03-18 10:32 - 00000000 ____D () C:\Windows\system32\slmgr 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\migwiz 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2015-02-16 07:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-16 07:42 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2015-02-15 16:37 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-14 21:59 - 2014-04-30 19:36 - 00000000 ____D () C:\Windows\system32\Drivers\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\he-IL 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\et-EE 2015-02-14 21:59 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2015-02-14 15:32 - 2014-04-30 22:38 - 00000000 ____D () C:\Windows\uk 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2015-02-14 15:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2015-02-14 14:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-14 08:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-02-14 08:45 - 2013-08-22 16:36 - 00000000 __RSD () C:\Windows\Media 2015-02-13 22:31 - 2014-04-30 17:10 - 00000000 ____D () C:\Windows\Panther 2015-02-13 22:11 - 2013-08-12 21:25 - 01192448 _____ () C:\Users\Jan\Desktop\NetMeterEvo.exe 2015-02-13 21:05 - 2014-04-30 22:52 - 00000000 ____D () C:\ProgramData\boost_interprocess 2015-02-13 21:05 - 2014-04-30 22:47 - 00000000 ____D () C:\ProgramData\Norton 2015-02-13 21:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2015-02-13 20:48 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-02-13 20:48 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-30 16:11 ==================== End Of Log ============================ |
17.02.2015, 09:49 | #15 |
/// the machine /// TB-Ausbilder | Browser Hijacker trovi.com u.a. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Browser Hijacker trovi.com u.a. |
consent, defender, download, explorer, homepage, install.exe, internet, internet explorer, pup.optional.avaxvavya.a, pup.optional.opencandy, pup.optional.searchprotect, pup.optional.searchprotect.a, pup.optional.trovi.a, search protect entfernen, services.exe, software, super, svchost.exe, vc32loader.dll, windowsapps, winlogon.exe |