Auch ich bin der DHL Fake Email auf den Leim gegangen und habe leider unüberlegt gehandelt. Ich habe den Link geöffnet, die zip runtergeladen und entpackt und das darin enthaltene pdf doppelgeklickt, welches danach einfach verschwand.

Ich wusste natürlich direkt, dass etwas nicht stimmt und versuche nun hier mein Glück.

Hier die Email:

Verehrte Frau, verehrter Herr,
Ihre unter der Nummer 10199743191319109974 erfaßte Sendung wurde von DHL in Empfang genommen und voraussichtlich für den 03.03.2015 zur Auslieferung vorgesehen.
 
Über die nachfolgende Verlinkung werden weitere Informationen zu Ihrer Sendung ausgegeben: 10199743191319109974.

Mit freundlichen Grüßen,
Ihr Transport-Team
         

Und hier der Link zur zip:

hxxp://www.item.u5937083.fsdata.se/dhl_paket_de_pkp
         

Mein System:
Windows Microsoft 8.1
Prozessor: Intel Core i7 CPU @ 2.67GHZ
Arbeitsspeicher: 6GB
Systemtyp: 64-Bit-Betriebssystem, x64-basierter Prozessor
Grafikkarte: NVIDIA GeForce GTX 285


Anbei meine logs von FRST, Addition, TDSSKiller und mbar.

Wäre nett wenn einer der Pros mal rein schauen würde, kenne mich leider nicht so gut aus.


FRST

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by Ben (administrator) on BEN-DESKTOP on 03-03-2015 22:55:07
Running from C:\Users\Ben\Desktop
Loaded Profiles: Ben (Available profiles: Ben & DefaultAppPool)
Platform: Windows 8.1 Pro with Media Center (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files (x86)\AirPrint\airprint.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Hobbyist Software) C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
(IgniteGT) C:\IgniteGT\Simraceway\SRWAgent.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
() C:\Users\Ben\Desktop\adwcleaner_4.111.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1840720 2007-04-03] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [319574 2010-10-25] (IVT Corporation)
HKLM-x32\...\Run: [MChk] => C:\Windows\system32\r.exe
HKLM-x32\...\Run: [NBKeyScan] => "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM-x32\...\Run: [Razer Lachesis Driver] => C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe [760720 2010-12-02] (Razer USA Ltd)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <====== ATTENTION
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Hobbyist Software VLC Streamer] => C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe [1194824 2014-09-11] (Hobbyist Software)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2010-02-22] (Hewlett-Packard Company)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-17] (Spotify Ltd)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-02-06] (Samsung Electronics)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Amazon Cloud Player] => C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [GoogleChromeAutoLaunch_8B4B86C2A5661DC92D9A84E265233F91] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-17] (Google Inc.)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [msdbd948108.exe] => C:\Users\Ben\AppData\Roaming\Microsoft\msdbd948108.exe [323661 2013-08-22] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inhaltsmanager-Assistent für PlayStation(R).lnk
ShortcutTarget: Inhaltsmanager-Assistent für PlayStation(R).lnk -> C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRW Download Manager.lnk
ShortcutTarget: SRW Download Manager.lnk -> C:\IgniteGT\Simraceway\SRWAgent.exe (IgniteGT)
Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-3405083392-531059733-2769391109-1001] => http=127.0.0.1:5555
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default
FF Homepage: hxxp://www.sweet-page.com/?type=hp&ts=1390044303&from=cor&uid=M4-CT128M4SSD1_00000000115203307FDF
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll (OnLive)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\alle-preise---guenstigerde.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\beemp3.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\dictcc-deen.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\filestube.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\geizhalsat-deutschland.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-autotranslate.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-images-1920x1080.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\guenstiger.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\idealode.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\mycroft-project.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\urban-dictionary.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\wiktionary-de.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\xrel.xml
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml
FF Extension: Fast Dial - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\fastdial@telega.phpnet.us [2014-09-24]
FF Extension: ProxTube - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\ich@maltegoetz.de.xpi [2014-09-15]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2012-05-11]
FF Extension: Personas Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\personas@christopher.beard.xpi [2013-03-01]
FF Extension: Tab Counter - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\tabcounter@morac.xpi [2012-01-24]
FF Extension: Download Status Bar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2013-12-27]
FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-06-19]
FF Extension: Download Statusbar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-11-02]

Chrome: 
=======
CHR HomePage: Default -> 
CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-13]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-15]
CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-13]
CHR Extension: (No Name) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2014-01-18]
CHR Extension: (Google Search) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-13]
CHR Extension: (Session Buddy) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2014-01-18]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2012-12-13]
CHR Extension: (AdBlock) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-12-13]
CHR Extension: (Tabs Counter) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibokmmioadhomkeikgbfenloopldkcoi [2012-12-13]
CHR Extension: (Search Box) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknehpjhljpfaghmicofickbkdagooni [2012-12-13]
CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AirPrint; C:\Program Files (x86)\AirPrint\Airprint.exe [234784 2010-12-23] (Apple Inc.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.)
R2 BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [1765484 2010-10-26] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [192000 2010-10-25] (IVT Corporation) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2711736 2015-01-13] (Microsoft Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2013-11-09] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 Simraceway Update Service; C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe [1630720 2013-07-11] () [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-09] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2013-11-09] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Abyssus; C:\Windows\System32\drivers\Abyssus.sys [10880 2009-10-30] (Razer (Asia-Pacific) Pte Ltd)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2010-06-24] (IVT Corporation.)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2013-09-30] (CSR plc.)
R1 MpKsl9d25ff37; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D0B6424B-853B-4B8A-88DA-F0DB58FD82B9}\MpKsl9d25ff37.sys [45352 2015-03-03] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2013-11-09] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-08-31] (Acronis)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
U3 idsvc; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 22:55 - 2015-03-03 22:55 - 00027600 _____ () C:\Users\Ben\Desktop\FRST.txt
2015-03-03 22:53 - 2015-03-03 22:55 - 00000000 ____D () C:\FRST
2015-03-03 22:52 - 2015-03-03 22:52 - 02092544 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe
2015-03-03 22:42 - 2015-03-03 22:43 - 02126848 _____ () C:\Users\Ben\Desktop\adwcleaner_4.111.exe
2015-02-24 23:48 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-02-24 23:48 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-02-24 23:48 - 2014-10-29 02:27 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-02-24 23:48 - 2014-10-29 02:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-02-24 23:48 - 2014-10-29 02:04 - 00868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-02-24 23:48 - 2014-10-29 02:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-02-21 16:59 - 2015-02-21 16:59 - 04560561 _____ () C:\Users\Ben\Desktop\Bewerbungsunterlagen.rar
2015-02-21 16:58 - 2015-02-21 16:58 - 00000000 ____D () C:\Users\Ben\Desktop\Bewerbungsunterlagen
2015-02-21 14:10 - 2015-02-24 23:48 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-13 18:29 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-13 18:29 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 00:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 00:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 00:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 00:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 00:56 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 00:56 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 00:56 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 00:56 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 00:56 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 00:56 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 00:56 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 00:56 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 00:56 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 00:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 00:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 00:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 00:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 00:56 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 00:56 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 00:56 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 00:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 00:56 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 00:56 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 00:56 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 00:56 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 00:56 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 00:55 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 00:55 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 00:55 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 00:55 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 00:55 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 00:55 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 00:55 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 00:55 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 00:55 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 00:55 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 00:55 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 00:55 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 00:55 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 00:55 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 00:55 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 00:55 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 00:55 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 00:55 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 00:55 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 00:55 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 00:55 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 00:55 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 00:55 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 00:55 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 00:55 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 00:55 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 00:55 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 00:55 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 00:55 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 00:55 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 00:55 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 00:55 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 00:55 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 00:55 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 00:55 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 00:55 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 00:55 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 00:55 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 00:55 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-11 00:55 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 00:55 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 00:55 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-10 23:23 - 2015-02-10 23:28 - 00000000 ____D () C:\Users\Ben\Desktop\GateWay
2015-02-10 23:17 - 2015-02-10 23:17 - 00337056 _____ () C:\WINDOWS\Minidump\021015-16125-01.dmp
2015-02-09 22:12 - 2015-02-09 22:12 - 00337112 _____ () C:\WINDOWS\Minidump\020915-9015-01.dmp
2015-02-09 21:52 - 2015-02-09 21:52 - 00001025 _____ () C:\Users\Public\Desktop\UE BOOM Update-Assistent 1.4.50.lnk
2015-02-09 21:52 - 2015-02-09 21:52 - 00000000 ____D () C:\Program Files (x86)\UE BOOM Update-Assistent 1.4.50
2015-02-07 16:27 - 2015-02-07 16:27 - 00000012 _____ () C:\Users\Ben\Desktop\3monkey.me VPN 2 Tage Test Code.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 22:52 - 2014-01-18 15:32 - 00000000 ____D () C:\AdwCleaner
2015-03-03 22:48 - 2013-03-18 12:40 - 01945726 _____ () C:\Simraceway.log
2015-03-03 22:37 - 2014-01-18 15:52 - 00000000 ____D () C:\Users\Ben\AppData\Local\JDownloader v2.0
2015-03-03 22:37 - 2013-09-30 05:14 - 02071876 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-03 22:37 - 2013-09-30 04:58 - 00879736 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-03 22:37 - 2013-09-30 04:58 - 00201766 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-03 22:29 - 2012-12-13 04:18 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-03 22:29 - 2012-12-13 04:18 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-03 22:18 - 2013-11-09 14:01 - 01132011 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-03 22:12 - 2012-09-14 13:21 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-03 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-03 21:58 - 2013-11-23 15:02 - 00000000 ___DO () C:\Users\Ben\SkyDrive
2015-03-03 21:58 - 2013-08-22 15:46 - 00042269 _____ () C:\WINDOWS\setupact.log
2015-03-03 21:58 - 2012-05-28 15:58 - 00005063 _____ () C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
2015-03-03 21:58 - 2012-05-28 15:58 - 00000092 _____ () C:\WINDOWS\SysWOW64\LOCALDEVICE.INI
2015-03-03 21:58 - 2010-10-26 10:04 - 00001089 _____ () C:\WINDOWS\SysWOW64\bscs.ini
2015-03-03 21:57 - 2013-11-09 14:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-03 21:57 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-03 14:17 - 2009-10-14 06:13 - 00295552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-03-02 22:49 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-28 19:10 - 2011-01-10 23:50 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\vlc
2015-02-28 16:56 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-28 16:54 - 2012-12-04 23:26 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3405083392-531059733-2769391109-1001
2015-02-28 16:43 - 2013-03-18 12:40 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\Simraceway
2015-02-28 16:40 - 2013-09-29 20:05 - 00083312 _____ () C:\WINDOWS\PFRO.log
2015-02-24 23:58 - 2014-08-07 22:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-02-24 23:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-21 16:21 - 2012-06-18 23:33 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\Spotify
2015-02-21 15:19 - 2014-06-20 14:29 - 00000000 ____D () C:\Users\Ben\Desktop\Neue Musik
2015-02-21 14:35 - 2012-06-18 23:33 - 00000000 ____D () C:\Users\Ben\AppData\Local\Spotify
2015-02-21 14:34 - 2013-11-16 12:18 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-21 14:21 - 2013-07-02 00:38 - 00000000 ____D () C:\Program Files\Java
2015-02-21 14:20 - 2014-02-15 11:04 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-02-21 14:20 - 2013-11-16 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-21 14:20 - 2013-07-02 00:38 - 00319912 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00191400 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00190888 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-02-21 14:20 - 2013-07-02 00:35 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-21 14:10 - 2011-06-21 16:25 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-21 14:10 - 2010-01-13 00:29 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-17 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-13 18:24 - 2013-08-22 15:44 - 00493632 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-12 00:41 - 2014-12-13 17:30 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-12 00:41 - 2014-07-13 19:13 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-11 22:26 - 2013-08-14 09:49 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-11 22:21 - 2009-10-14 06:12 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-11 00:08 - 2013-11-09 14:03 - 00000000 ____D () C:\Users\Ben
2015-02-10 23:22 - 2014-08-14 20:52 - 00000000 ____D () C:\Users\Ben\Desktop\Neuer Desktop Ordner nach 27 Zoll
2015-02-10 23:17 - 2013-11-10 21:02 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-09 22:24 - 2012-12-13 04:18 - 00004114 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 22:24 - 2012-12-13 04:18 - 00003878 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-09 21:52 - 2013-11-23 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Ears
2015-02-07 17:12 - 2012-09-14 13:21 - 00003796 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-07 16:18 - 2013-11-10 21:32 - 02488832 ___SH () C:\Users\Ben\Desktop\Thumbs.db
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 21:24 - 2012-05-11 13:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2010-02-07 11:04 - 2013-03-22 14:07 - 0000600 _____ () C:\Users\Ben\AppData\Roaming\winscp.rnd
2010-04-18 23:36 - 2013-02-04 18:50 - 0010240 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-09-22 00:22 - 2010-09-22 00:22 - 0000337 _____ () C:\Users\Ben\AppData\Local\Perfmon.PerfmonCfg
2010-01-24 17:30 - 2010-01-24 17:30 - 0000017 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\Ben\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcpowob.dll
C:\Users\Ben\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Ben\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ben\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Ben\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Ben\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Ben\AppData\Local\Temp\nvStInst.exe
C:\Users\Ben\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Ben\AppData\Local\Temp\proxy_vole2059752059536163529.dll
C:\Users\Ben\AppData\Local\Temp\Quarantine.exe
C:\Users\Ben\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Ben\AppData\Local\Temp\sfextra.dll
C:\Users\Ben\AppData\Local\Temp\sqlite3.dll
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Ben\AppData\Local\Temp\VLCStreamerSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-03 22:12

==================== End Of Log ============================
         

--- --- ---



Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2015
Ran by Ben at 2015-03-03 22:55:54
Running from C:\Users\Ben\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DMark (HKLM-x32\...\{F1A6C690-C12C-4E7A-B4BD-958678215418}) (Version: 1.1 - Futuremark)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version:  - )
Amazon Cloud Player (HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Amazon Amazon Cloud Player) (Version: 2.2.0.399 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music Importer (HKLM-x32\...\com.amazon.music.uploader) (Version: 2.0.1 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 2.0.1 - Amazon Services LLC) Hidden
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.3.8518 - )
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.1.7 - EA Digital Illusions CE AB)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.322.0 - Microsoft Corporation)
BlueSoleil 7.0.348.1 (HKLM\...\{208DF080-1321-4443-B9EE-D13380C3577C}) (Version: 7.0.348.1 - IVT Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
Canon MP610 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series) (Version:  - )
Canon MP610 series Benutzerregistrierung (HKLM-x32\...\Canon MP610 series Benutzerregistrierung) (Version:  - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.04 - Piriform)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version:  - )
CIB pdf brewer (HKLM\...\{E9E6A9B7-89B7-41D3-90A1-710E82427097}) (Version: 2.6.0034 - CIB software GmbH)
Core Temp 1.0 RC3 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
CPUID HWMonitor 1.19 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CrystalDiskInfo 5.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 5.0.0 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
F1 2010 (x32 Version: 1.0.0001.132 - Codemasters) Hidden
F1 2012 (HKLM-x32\...\Steam App 208500) (Version:  - )
Fanatec Wheel (HKLM\...\{1212516D-C434-4A14-9107-CE271E186019}) (Version: 8.14.4 - Endor AG)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.02 - Ubisoft)
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0002.135 - Rockstar Games Inc.) Hidden
HideIPVPN 2.0.0.3 (HKLM-x32\...\HideIPVPN) (Version: 2.0.0.3 - )
Inhaltsmanager-Assistent für PlayStation(R) (HKLM-x32\...\{32C46540-7693-49E1-A81E-121B09C8303B}) (Version: 3.00.7187.47 - Sony Computer Entertainment Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version:  - )
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LightScribe Applications (HKLM-x32\...\{88A4002B-BDBA-49A2-927C-D81E8DF32B1B}) (Version: 1.18.5.1 - LightScribe)
LightScribe System Software (HKLM-x32\...\{6AFDE3BE-BC01-45A4-9D06-BBF5AD207313}) (Version: 1.18.12.1 - LightScribe)
LightScribe Template Labeler (HKLM-x32\...\{7FD71A9E-C4D3-42ED-A998-CDA8290C39A3}) (Version: 1.18.5.1 - LightScribe)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Metro Last Light Update 2 (.v1.0.0.2.) 1.00 (HKLM-x32\...\Metro Last Light Update 2 (.v1.0.0.2.) 1.00) (Version: 1.00 - .x.X.RIDDICK.X.x.)
Metro: Last Light (c) Deep Silver version 1 (HKLM-x32\...\TWV0cm9MYXN0TGlnaHQ=_is1) (Version: 1 - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4693.1002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird (5.0) (HKLM-x32\...\Mozilla Thunderbird (5.0)) (Version: 5.0 (de) - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MXGP (HKLM-x32\...\TVhHUA==_is1) (Version: 1 - )
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.8 - )
NVIDIA 3D Vision Controller-Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.12 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4693.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4693.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4693.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1004 - Microsoft Corporation) Hidden
OnLive (HKLM-x32\...\OnLive) (Version:  - OnLive)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PDF Blender (HKLM-x32\...\PDF Blender) (Version:  - )
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
plist Editor for Windows 1.0.2 (HKLM-x32\...\plist Editor for Windows) (Version: 1.0.2 - VOWSoft,Ltd.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
RaceRoom Racing Experience  (HKLM-x32\...\Steam App 211500) (Version:  - )
Razer Lachesis 5600 (HKLM-x32\...\{580AEA6C-E35C-4470-818F-0F0A083EE1AD}) (Version: 2.01.01 - Razer USA Ltd.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.0.12114_1 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.0.12114_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.18.0 - SAMSUNG Electronics Co., Ltd.)
SHIELD Streaming (Version: 1.6.75 - NVIDIA Corporation) Hidden
Simraceway 28.87 (HKLM-x32\...\Simraceway) (Version: 28.87 - Simraceway)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sniper Elite 3 (HKLM-x32\...\U25pcGVyRWxpdGUz_is1) (Version: 1 - )
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuersparer 2014 (HKLM-x32\...\{485DBEA2-58E9-4136-9E6C-6C3022B02349}) (Version: 21.00.8480 - Buhl Data Service GmbH)
System Requirements Lab for Intel (HKLM-x32\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC)
Trials Evolution Gold Edition (HKLM-x32\...\InstallShield_{07D857B8-C956-401D-BC8F-EDA8459AF037}) (Version: 1.0.0.3 - Ubisoft)
Trials Evolution Gold Edition (x32 Version: 1.0.0.3 - Ubisoft) Hidden
UE BOOM Update-Assistent (HKLM-x32\...\{3E5B449E-C707-49CE-B45B-1CCEF3FC27E2}) (Version: 1.4.50 - Logitech, Inc.)
UE BOOM Update-Assistent (HKLM-x32\...\{E0426B93-AA36-4A2C-9BBD-9096BB9908F3}) (Version: 1.3.58 - Logitech, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
VCRedistSetup (x32 Version: 1.0.0 - Nero AG) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC Streamer 4.81 (HKLM-x32\...\VLC Streamer_is1) (Version:  - )
Win7codecs (HKLM-x32\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 2.2.6 - Shark007)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
WinSCP 4.2.5 (HKLM-x32\...\winscp3_is1) (Version: 4.2.5 - Martin Prikryl)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{312BFDCE-A901-4203-B4F2-ADCB957D1887}\InprocServer32 -> C:\ProgramData\Windows\msseedir.dll No File
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3405083392-531059733-2769391109-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2011-12-31 00:38 - 00000878 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A2A8832-26AB-45F1-A3EB-9F69B315A36D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated)
Task: {1435CFF7-C187-4F9F-BB2B-9B3B258B07D9} - System32\Tasks\{C9DD2D2F-6DC2-4229-B2F7-7F186B1EC675} => C:\Program Files (x86)\SEGA\Renegade Ops\Launcher.exe
Task: {1A670A5A-D193-43D1-9F8A-C93C6642CE51} - System32\Tasks\{858739C7-A111-4098-83F6-50FE6802566C} => pcalua.exe -a D:\Software\setupstb.exe -d D:\Software
Task: {1CEF8394-7F98-4C4D-BB1A-3B0B344BE068} - System32\Tasks\{89F85CE3-4F28-42F0-9800-5CF9859C09E3} => pcalua.exe -a C:\Users\Ben\Desktop\jre-6u20-windows-i586-iftw-rv.exe -d C:\Users\Ben\Desktop
Task: {2DDB6ACA-F0D0-4300-9A6C-7EA882A48D64} - System32\Tasks\{4C50E6BB-01E1-4D2A-AD46-E34598DC5624} => C:\Users\Ben\Desktop\ExtFat32_v2.00\DeleteBinFilesFromSystem32.exe
Task: {370D8711-E790-4955-853B-345428513151} - System32\Tasks\{5ACBDDB1-78D7-48E4-A920-F179283830B8} => C:\Users\Ben\Desktop\iRecovery\iRecovery_SVN\iRecovery.exe
Task: {392FFF77-1805-450B-B5C5-91AAB824E100} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {3AF964CC-16DF-4AE4-8AB4-9DB6E7734BAB} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {410E351D-52E7-4449-A7E2-2B7D64BC648A} - System32\Tasks\{F5B4C042-677A-453F-BB6E-3288865F132B} => pcalua.exe -a C:\Users\Ben\Desktop\blazingcolorsviz.exe -d C:\Users\Ben\Desktop
Task: {4166FD90-5C1C-4190-BE59-4B43E1DFDF66} - System32\Tasks\{768EC248-ED6C-4043-9C62-232359258156} => pcalua.exe -a C:\Users\Ben\Desktop\cibpdfbrewer26.exe -d C:\Users\Ben\Desktop
Task: {46BD9830-89CA-494C-86F8-04382CDEA9F8} - System32\Tasks\{3CE04636-715F-4F18-AD6F-E71D861BE861} => pcalua.exe -a C:\Users\Ben\Desktop\jxpiinstall.exe -d C:\Users\Ben\Desktop
Task: {4D794245-759F-42C4-9B8E-C8CFD7D18D69} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {51FA22C6-61BB-4958-8B21-5A8DF0BBBA0E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {5217DB58-FCB2-4AE8-BFB5-FADCA93D79D7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-12-30] (Microsoft Corporation)
Task: {53FF6DD0-655D-4464-A149-3B07DE75A253} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {57AC180D-59B0-4F05-9A83-26D4E65D2A08} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {588C1A24-EE59-4BF0-9521-15611CDE2B2B} - System32\Tasks\Microsoft_Hardware_Launch_rundll32_exe => Rundll32.exe url.dll,OpenURL hxxp://go.microsoft.com/fwlink/?LinkID=130644
Task: {5BADED4C-B830-4958-A3BC-7CE8E3C2DDC2} - System32\Tasks\{2C0CC774-6D98-4004-9C86-7A05F682B3E8} => C:\Users\Ben\Desktop\NFSHP_Activator\NFSHP_Activator.exe
Task: {6A34A9A8-F811-4361-AF32-238CBD0AE4BB} - System32\Tasks\{F28C964F-E66C-4D8F-8B7C-E83C0C06630D} => C:\Users\Ben\Desktop\24335_88v3id\88v3 id\msinst.exe
Task: {6FE1A5DF-0998-4C73-B850-2F52CAFACDC4} - System32\Tasks\{B6AE155C-B3D1-4C3B-BDDA-52F8A46EA349} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {719C9196-81B2-4170-97E3-31E473F4400F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-12-30] (Microsoft Corporation)
Task: {75764863-0389-4524-8458-40B0BF854A8C} - System32\Tasks\{3D3F6698-4160-4F4D-885C-7508539BF9DD} => C:\Users\Ben\Desktop\ExtFat32_v2.00\DeleteBinFilesFromSystem32.exe
Task: {79517377-8CC2-4A74-BC39-EECC8F03DEA2} - System32\Tasks\{7ED773AF-8B09-4867-8B05-DC73EF7BC27B} => C:\Users\Ben\Desktop\NFSHP_Activator\NFSHP_Activator.exe
Task: {7A9609CC-E82A-44D9-B72A-C43876D41DE8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {81A44ADF-427A-43E2-ABBA-CD6A44D87F03} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-06] (Microsoft Corporation)
Task: {855A09FA-BA56-462F-BDE5-41C2F3B88460} - System32\Tasks\{8483929B-DC43-4ACD-89AA-49CFF4FF713F} => C:\Users\Ben\Desktop\swissknife.exe
Task: {8BCE1AFB-B175-43EB-B151-702EB1C927A3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.)
Task: {94081B12-FE71-4E16-9D3A-7F9B99120743} - System32\Tasks\{8723E56F-EF62-4EB1-B131-E0C7F954AD94} => pcalua.exe -a "C:\Users\Ben\Desktop\Firefox Setup 3.5.7.exe" -d C:\Users\Ben\Desktop
Task: {94E1F138-8F92-4A03-AED8-64D7696133AD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-02-11] (Microsoft Corporation)
Task: {A1368E4B-FFF6-4597-AD64-D9C27C0AFE2F} - System32\Tasks\{EE44BEE5-0123-4A1A-8800-FF0E781324D5} => pcalua.exe -a "C:\Users\Ben\Desktop\Firefox Setup 3.5.6.exe" -d C:\Users\Ben\Desktop
Task: {A62E043D-5760-4677-82C6-3DEAFBCA4AD8} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {A9436078-2838-4949-B070-E77FC8F8D6C1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.)
Task: {AD6C911C-645A-4146-B756-9E1CC11C5D8B} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {B3D87DEE-4896-437E-8417-8345CB963D45} - System32\Tasks\{97B33906-B173-4CCE-AECF-A36288C8BC31} => C:\Users\Ben\Desktop\24335_88v3id\88v3 id\msinst.exe
Task: {D237B8DD-6461-41E7-85C9-B70FDFD54F85} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-06] (Microsoft Corporation)
Task: {D7B6D21D-EDEA-4396-AAC9-60EFEF7D96DB} - System32\Tasks\{FCC6E398-5281-41F3-B872-96BF05F4BB69} => pcalua.exe -a "C:\Users\Ben\Desktop\I-Doser + All Doses\sbagen-win-1.4.4.exe" -d "C:\Users\Ben\Desktop\I-Doser + All Doses"
Task: {D875CC52-BEAC-40ED-87B2-02FE479F1A06} - System32\Tasks\{08716D13-7091-4D6E-8DBE-D84E1C9F2DBB} => E:\jdownloads\_Games\3D Minidolf Ultra Deluxe\MINIGOLF.EXE
Task: {DB53236B-A298-4FDD-8EE8-A5FF96EA3B75} - System32\Tasks\{1ED197C8-AEEE-4524-BB0A-24B9C954F987} => pcalua.exe -a C:\Users\Ben\Desktop\jxpiinstall(2).exe -d C:\Users\Ben\Desktop
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-11-09 14:01 - 2013-11-11 16:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00022016 _____ () C:\WINDOWS\System32\BsTrace.dll
2008-03-07 12:54 - 2008-03-07 12:54 - 17892352 _____ () C:\Windows\system32\BsLangInDepRes.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00022016 _____ () C:\Windows\system32\BsTrace.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00009728 _____ () C:\Windows\system32\BsHelpCSps.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00047616 _____ () C:\Windows\system32\BlueSoleilCSps.dll
2010-01-06 00:07 - 2009-12-12 15:12 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2014-08-07 22:48 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-03-08 02:46 - 2013-07-11 23:27 - 01630720 _____ () C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe
2013-12-14 16:24 - 2013-12-12 20:56 - 03145536 _____ () C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
2015-03-03 22:42 - 2015-03-03 22:43 - 02126848 _____ () C:\Users\Ben\Desktop\adwcleaner_4.111.exe
2010-10-25 14:40 - 2010-10-25 14:40 - 00022016 _____ () C:\WINDOWS\SYSTEM32\BsTrace.dll
2010-10-25 14:37 - 2010-10-25 14:37 - 00118904 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\setup.dll
2010-05-13 15:30 - 2010-05-13 15:30 - 00028730 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\Driver\USB\btcusb.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00009728 _____ () C:\Windows\SYSTEM32\BsHelpCSps.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00047616 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
2013-03-08 02:45 - 2013-07-11 23:27 - 00252832 _____ () C:\Program Files (x86)\SimracewayUpdater\PATCHW32.dll
2015-01-29 21:04 - 2015-01-29 21:04 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2010-12-02 09:18 - 2010-12-02 09:18 - 00014208 _____ () C:\Program Files (x86)\Razer\Lachesis 5600\RzHook.dll
2010-02-22 11:19 - 2010-02-22 11:19 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2010-02-22 11:19 - 2010-02-22 11:19 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2010-02-22 11:19 - 2010-02-22 11:19 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2008-03-07 12:54 - 2008-03-07 12:54 - 17892352 _____ () C:\Windows\SYSTEM32\BsLangInDepRes.dll
2010-10-25 14:40 - 2010-10-25 14:40 - 00022016 _____ () C:\Windows\SYSTEM32\BsTrace.dll
2015-02-20 21:29 - 2015-02-17 23:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll
2015-02-20 21:29 - 2015-02-17 23:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll
2015-02-20 21:29 - 2015-02-17 23:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll
2008-03-07 12:54 - 2008-03-07 12:54 - 17892352 _____ () C:\WINDOWS\SYSTEM32\BsLangInDepRes.dll
2010-10-25 14:42 - 2010-10-25 14:42 - 00145920 _____ () C:\WINDOWS\SYSTEM32\BsProfilefunc.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:C8B8CEBD
AlternateDataStreams: C:\Users\Ben\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive (4).old:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive (5).old:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive (6).old:ms-properties
AlternateDataStreams: C:\Users\Ben\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3405083392-531059733-2769391109-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe"
MSCONFIG\startupreg: Steam => "E:\Steam\Steam.exe" -silent

==================== Accounts: =============================

Administrator (S-1-5-21-3405083392-531059733-2769391109-500 - Administrator - Disabled)
Ben (S-1-5-21-3405083392-531059733-2769391109-1001 - Administrator - Enabled) => C:\Users\Ben
Gast (S-1-5-21-3405083392-531059733-2769391109-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3405083392-531059733-2769391109-1006 - Limited - Enabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/03/2015 10:12:24 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (03/02/2015 10:15:16 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (03/02/2015 10:04:06 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (03/02/2015 09:58:27 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (02/28/2015 06:47:06 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (02/28/2015 04:55:11 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (02/28/2015 04:54:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (02/24/2015 11:59:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.3.9600.16384, Zeitstempel: 0x5215dfe3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17630, Zeitstempel: 0x54b0e17a
Ausnahmecode: 0xc0000008
Fehleroffset: 0x0000000000092d1a
ID des fehlerhaften Prozesses: 0xbf8
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3
Vollständiger Name des fehlerhaften Pakets: svchost.exe_stisvc4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe_stisvc5

Error: (02/24/2015 11:47:35 PM) (Source: MsiInstaller) (EventID: 1024) (User: BEN-DESKTOP)
Description: Produkt: Adobe Reader XI (11.0.09) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011010}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (02/21/2015 04:06:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: 852: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)


System errors:
=============
Error: (02/28/2015 07:07:39 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/24/2015 11:59:49 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.

Error: (02/24/2015 11:59:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/20/2015 11:51:32 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (02/20/2015 10:30:08 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/17/2015 09:37:25 PM) (Source: DCOM) (EventID: 10016) (User: BEN-DESKTOP)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BEN-DESKTOPBenS-1-5-21-3405083392-531059733-2769391109-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/17/2015 09:37:25 PM) (Source: DCOM) (EventID: 10016) (User: BEN-DESKTOP)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BEN-DESKTOPBenS-1-5-21-3405083392-531059733-2769391109-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/13/2015 06:51:27 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/13/2015 06:43:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/11/2015 00:57:11 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.


Microsoft Office Sessions:
=========================
Error: (03/03/2015 10:12:24 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (03/02/2015 10:15:16 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (03/02/2015 10:04:06 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (03/02/2015 09:58:27 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (02/28/2015 06:47:06 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (02/28/2015 04:55:11 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)

Error: (02/28/2015 04:54:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (02/24/2015 11:59:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_stisvc6.3.9600.163845215dfe3ntdll.dll6.3.9600.1763054b0e17ac00000080000000000092d1abf801d05083b2fb3615C:\WINDOWS\system32\svchost.exeC:\WINDOWS\SYSTEM32\ntdll.dllc37ac23d-bc78-11e4-80fa-00241d105d16

Error: (02/24/2015 11:47:35 PM) (Source: MsiInstaller) (EventID: 1024) (User: BEN-DESKTOP)
Description: Adobe Reader XI (11.0.09) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (02/21/2015 04:06:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: 852: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)


CodeIntegrity Errors:
===================================
  Date: 2015-02-28 16:56:44.600
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:43.818
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:43.326
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:42.669
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:42.194
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:41.740
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:38.262
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-28 16:56:37.442
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2015-02-21 16:25:11.202
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-21 16:25:10.384
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 35%
Total physical RAM: 6142.48 MB
Available physical RAM: 3972.37 MB
Total Pagefile: 12286.48 MB
Available Pagefile: 8859.93 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:118.8 GB) (Free:3.59 GB) NTFS
Drive e: (3TB Seagate) (Fixed) (Total:2794.39 GB) (Free:22.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 000A4C68)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2794.5 GB) (Disk ID: 4A4263C5)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

TDSSKiller

23:03:59.0358 0x1510  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
23:04:02.0779 0x1510  ============================================================
23:04:02.0781 0x1510  Current date / time: 2015/03/03 23:04:02.0779
23:04:02.0781 0x1510  SystemInfo:
23:04:02.0782 0x1510  
23:04:02.0782 0x1510  OS Version: 6.3.9600 ServicePack: 0.0
23:04:02.0782 0x1510  Product type: Workstation
23:04:02.0782 0x1510  ComputerName: BEN-DESKTOP
23:04:02.0783 0x1510  UserName: Ben
23:04:02.0783 0x1510  Windows directory: C:\WINDOWS
23:04:02.0783 0x1510  System windows directory: C:\WINDOWS
23:04:02.0783 0x1510  Running under WOW64
23:04:02.0783 0x1510  Processor architecture: Intel x64
23:04:02.0783 0x1510  Number of processors: 8
23:04:02.0783 0x1510  Page size: 0x1000
23:04:02.0783 0x1510  Boot type: Normal boot
23:04:02.0783 0x1510  ============================================================
23:04:03.0016 0x1510  KLMD registered as C:\WINDOWS\system32\drivers\48232908.sys
23:04:03.0244 0x1510  System UUID: {04908E9A-7061-425A-EC4E-06947E5FA7BF}
23:04:03.0787 0x1510  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF74DE00 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0xE584, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000040
23:04:03.0806 0x1510  Drive \Device\Harddisk1\DR1 - Size: 0x2BAA1476000 ( 2794.52 Gb ), SectorSize: 0x200, Cylinders: 0x59101, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:04:03.0883 0x1510  ============================================================
23:04:03.0883 0x1510  \Device\Harddisk0\DR0:
23:04:03.0883 0x1510  MBR partitions:
23:04:03.0883 0x1510  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
23:04:03.0883 0x1510  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xED9A000
23:04:03.0883 0x1510  \Device\Harddisk1\DR1:
23:04:03.0902 0x1510  GPT partitions:
23:04:03.0913 0x1510  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {7E375998-0D5C-46F1-9D8E-FF3A10679B29}, Name: , StartLBA 0x22, BlocksNum 0x40000
23:04:03.0913 0x1510  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {8765D8CE-1F09-4B73-ACA0-688D9893DCB6}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x5D4C9800
23:04:03.0913 0x1510  MBR partitions:
23:04:03.0913 0x1510  ============================================================
23:04:03.0914 0x1510  C: <-> \Device\Harddisk0\DR0\Partition2
23:04:03.0991 0x1510  E: <-> \Device\Harddisk1\DR1\Partition2
23:04:03.0999 0x1510  ============================================================
23:04:03.0999 0x1510  Initialize success
23:04:03.0999 0x1510  ============================================================
23:05:04.0020 0x126c  ============================================================
23:05:04.0022 0x126c  Scan started
23:05:04.0022 0x126c  Mode: Manual; 
23:05:04.0022 0x126c  ============================================================
23:05:04.0022 0x126c  KSN ping started
23:05:06.0454 0x126c  KSN ping finished: true
23:05:07.0936 0x126c  ================ Scan system memory ========================
23:05:07.0937 0x126c  System memory - ok
23:05:07.0937 0x126c  ================ Scan services =============================
23:05:08.0002 0x126c  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
23:05:08.0009 0x126c  1394ohci - ok
23:05:08.0024 0x126c  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
23:05:08.0032 0x126c  3ware - ok
23:05:08.0036 0x126c  [ CDF91E688D456B9702B2EA72C85F840C, F24CF756C541F11C16A6189E331591987DB12C6EE9A403B7CF0B71B7E09E35CA ] Abyssus         C:\WINDOWS\system32\drivers\Abyssus.sys
23:05:08.0038 0x126c  Abyssus - ok
23:05:08.0057 0x126c  [ 9539F7917B4B6D92C90F0FAA6B86C605, B4C284E8EECC2E7025053A3320EFDC9F47BCA9828853AD2A805DB826CA4AC27E ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
23:05:08.0075 0x126c  ACPI - ok
23:05:08.0081 0x126c  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
23:05:08.0087 0x126c  acpiex - ok
23:05:08.0092 0x126c  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
23:05:08.0098 0x126c  acpipagr - ok
23:05:08.0103 0x126c  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
23:05:08.0104 0x126c  AcpiPmi - ok
23:05:08.0108 0x126c  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
23:05:08.0110 0x126c  acpitime - ok
23:05:08.0117 0x126c  [ 4C72FDD915D62EAEF149BD9C73AB9CF4, 8EA45A1B88DFD819F0ADA3AF36D464E1BF52574269592370E0CC8D0490680E1F ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:05:08.0122 0x126c  AdobeARMservice - ok
23:05:08.0165 0x126c  [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:05:08.0172 0x126c  AdobeFlashPlayerUpdateSvc - ok
23:05:08.0193 0x126c  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX         C:\WINDOWS\system32\drivers\ADP80XX.SYS
23:05:08.0210 0x126c  ADP80XX - ok
23:05:08.0227 0x126c  [ 0F17D49BE041B7EFF1D33BF1414E7AC6, F8B536B60903814DF88DAF535753288537EF0993E42AA4E734EDA8D68B24C7AB ] AeLookupSvc     C:\WINDOWS\System32\aelupsvc.dll
23:05:08.0232 0x126c  AeLookupSvc - ok
23:05:08.0249 0x126c  [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD             C:\WINDOWS\system32\drivers\afd.sys
23:05:08.0264 0x126c  AFD - ok
23:05:08.0271 0x126c  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
23:05:08.0277 0x126c  agp440 - ok
23:05:08.0286 0x126c  [ F0CB6DB513CAC393D04A0FCE0A59E1BF, E6EE159D0E6B1F666946B1FE421874044E89BB2EB60A521BAA111A1229FA7B2D ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys
23:05:08.0289 0x126c  ahcache - ok
23:05:08.0292 0x126c  AirPrint - ok
23:05:08.0298 0x126c  [ A91D8E1E433EFB32551BCE69037E1CE7, 41DFDD5B56918D19D09DFB3E4B07460AA85647A8647ABBBB906158D8D6653290 ] ALG             C:\WINDOWS\System32\alg.exe
23:05:08.0301 0x126c  ALG - ok
23:05:08.0308 0x126c  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
23:05:08.0317 0x126c  AmdK8 - ok
23:05:08.0323 0x126c  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
23:05:08.0327 0x126c  AmdPPM - ok
23:05:08.0333 0x126c  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
23:05:08.0339 0x126c  amdsata - ok
23:05:08.0352 0x126c  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
23:05:08.0358 0x126c  amdsbs - ok
23:05:08.0363 0x126c  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
23:05:08.0367 0x126c  amdxata - ok
23:05:08.0374 0x126c  [ 9DCB42905F1EBF9CEC57EE5DF0BDA965, 4C888AAD0DDE01565FD7FBB6B70A500158CF2E4CECF9ADD4AFD302A993587269 ] AppHostSvc      C:\WINDOWS\system32\inetsrv\apphostsvc.dll
23:05:08.0380 0x126c  AppHostSvc - ok
23:05:08.0386 0x126c  [ 04951A9A937CBE28A2D3FEEA360B6D1F, D8AAF000BE4FE4B203DC2EB2A64F780A542E5238CE3F9952FD03277379B11529 ] AppID           C:\WINDOWS\system32\drivers\appid.sys
23:05:08.0389 0x126c  AppID - ok
23:05:08.0393 0x126c  [ C0DC3F58214A227980AEB091CFD2F973, 0C3E8453C9F65ADA3E74C38C0E3AC3E0CBFD807B827097046265B38839E151E3 ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
23:05:08.0403 0x126c  AppIDSvc - ok
23:05:08.0410 0x126c  [ 034ED41F13D9C1845C1E081F05B640DB, E4E17BA0B22C464DE60A6BF68D4D035D1B838DE4F0361029DED1AE00503E135C ] Appinfo         C:\WINDOWS\System32\appinfo.dll
23:05:08.0414 0x126c  Appinfo - ok
23:05:08.0422 0x126c  [ 8176FBA685178FB0F52D46693474FA50, 69FE3692C7FE24289A479ADD74F2C782B59A099B7B07FE5ACFC4DA899E40BFDE ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
23:05:08.0428 0x126c  AppMgmt - ok
23:05:08.0443 0x126c  [ CB12C47647D8BDAFAA94C0856B14128B, 5590C98095357C92563EF94800107D3611AA6ECA1A70BE463C03B279E618A6C4 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
23:05:08.0456 0x126c  AppReadiness - ok
23:05:08.0487 0x126c  [ F7529BD3FFAC9C33D15F6DE3B7353B03, 8EF0A84C9687A246B60939A326E498121039E9CC617A7ABBA933EDD327F3467E ] AppXSvc         C:\WINDOWS\system32\appxdeploymentserver.dll
23:05:08.0524 0x126c  AppXSvc - ok
23:05:08.0540 0x126c  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
23:05:08.0544 0x126c  arcsas - ok
23:05:08.0560 0x126c  [ AA2E8C6B8D7EA7BAF04C988801927F48, 4B82043F1B9C67CDCDC71102F7AEE05EEA8F9775A5CB33AE80F4DCDB42521C40 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:05:08.0567 0x126c  aspnet_state - ok
23:05:08.0571 0x126c  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
23:05:08.0573 0x126c  atapi - ok
23:05:08.0582 0x126c  [ 8779FDAE68BC948B0FE152E758CC8DA7, 13070C2073F8E7546B48AE9CF54067B9BB75DFCD98F2987B90FFAD20D40D54CF ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
23:05:08.0596 0x126c  AudioEndpointBuilder - ok
23:05:08.0622 0x126c  [ 61EA45A645854FE81D8A924E2D93DFFE, 34F79532297F609CA93C380B68BB8B7B0F027F9C8F4FB8E02A9A43EA3D155F1B ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
23:05:08.0647 0x126c  Audiosrv - ok
23:05:08.0660 0x126c  [ 96E8CAF20FC4B6C31CAD7816A801EB78, E4870DB8FFBDCFEE98449338D0BDBF2DD0B5FEC75514E41C11A882BE6EB16833 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
23:05:08.0664 0x126c  AxInstSV - ok
23:05:08.0680 0x126c  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
23:05:08.0695 0x126c  b06bdrv - ok
23:05:08.0702 0x126c  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
23:05:08.0704 0x126c  BasicDisplay - ok
23:05:08.0710 0x126c  [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
23:05:08.0719 0x126c  BasicRender - ok
23:05:08.0727 0x126c  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
23:05:08.0728 0x126c  bcmfn2 - ok
23:05:08.0740 0x126c  [ E07C80468D0C599BFF01D9D4EC7AEDC3, F675F455924DEC3FF69AD816DFEB6E74C804AEC3D3BFF7515953DB9D79C9B2D0 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
23:05:08.0756 0x126c  BDESVC - ok
23:05:08.0761 0x126c  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
23:05:08.0762 0x126c  Beep - ok
23:05:08.0783 0x126c  [ 20FB137ADDE1255F15F265A7BD9579BE, 87B4D5C91EFEAD987AAC3491A4360F82824C46AFF958B6F4CAED7C12224EF159 ] BFE             C:\WINDOWS\System32\bfe.dll
23:05:08.0805 0x126c  BFE - ok
23:05:08.0817 0x126c  [ 2126CCA1F93D7BCDF6F37CB8A7BFC004, 6D4BE257BDBF281E15AADF93AE8E3B0B25B993EC59601A24CF04C477E6286412 ] BingDesktopUpdate C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
23:05:08.0822 0x126c  BingDesktopUpdate - ok
23:05:08.0849 0x126c  [ 15225081966C785A9192782401643FD4, E2BA0C8D044556FDD9DD7A25F7F71553DE7A2924E78F9284413C2AC46F0BF4EB ] BITS            C:\WINDOWS\System32\qmgr.dll
23:05:08.0875 0x126c  BITS - ok
23:05:08.0918 0x126c  [ 18D87D378D3C7DFBB045C9753A3632E8, 2FCA82893AC4D788561F3858E7372FDA76E6BF70C479D9ABD376847705B7682E ] BlueSoleilCS    C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
23:05:08.0955 0x126c  BlueSoleilCS - ok
23:05:08.0975 0x126c  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
23:05:08.0985 0x126c  Bonjour Service - ok
23:05:08.0992 0x126c  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
23:05:08.0999 0x126c  bowser - ok
23:05:09.0008 0x126c  [ E325BCD68EC0CF2E2EDD0AB7CC17C698, 4DEDEF91F6BD1CC8DBE118AC28CA6BD874449A053B9CDE9FFEB1C7B98501D938 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
23:05:09.0015 0x126c  BrokerInfrastructure - ok
23:05:09.0023 0x126c  [ 041A999E4FF9A7CDBE67357751881FB8, 356C52637EA715D6FA2B65BD311C9BF1635A582023434902EC2DE4A2448961F8 ] Browser         C:\WINDOWS\System32\browser.dll
23:05:09.0034 0x126c  Browser - ok
23:05:09.0042 0x126c  [ D289B5956B33C97F0FD352E5AD7F775D, BA0202501E82665A809B3E99E8491D663E518C8103D3F91720AA2E1388A241B7 ] BsHelpCS        C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
23:05:09.0047 0x126c  BsHelpCS - ok
23:05:09.0052 0x126c  [ 0A24821CE12B2CB5B711FBD69344E743, 3B0F511D45157D8114C84059340526A33DA7AD40BB8B3AB830A341763B977C66 ] Btcsrusb        C:\WINDOWS\System32\Drivers\btcusb.sys
23:05:09.0060 0x126c  Btcsrusb - ok
23:05:09.0065 0x126c  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
23:05:09.0067 0x126c  BthAvrcpTg - ok
23:05:09.0073 0x126c  [ 746B9F94214915AECDE4B7FEA5FF9664, EA2877D49DB4B7B9CE61653D63E8776DFF1CBCCAB12C14DB1D20DA44B8F06357 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
23:05:09.0076 0x126c  BthHFEnum - ok
23:05:09.0080 0x126c  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
23:05:09.0085 0x126c  bthhfhid - ok
23:05:09.0091 0x126c  [ 07E33226AD218A2A162662A05CAFB52F, 0AC3D8B79EDA6DA232FA4E1CAF6592420A9EDE96350D1F0504C2434261684F0B ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
23:05:09.0098 0x126c  BTHMODEM - ok
23:05:09.0105 0x126c  [ E5E48FEED73D463175EAB1542495191C, 0A8182F5BA7B694AB1DD3680F1194E4A568FE40DBA4BFDFF2EA09BAD045FFB29 ] bthserv         C:\WINDOWS\system32\bthserv.dll
23:05:09.0109 0x126c  bthserv - ok
23:05:09.0115 0x126c  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
23:05:09.0130 0x126c  cdfs - ok
23:05:09.0139 0x126c  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
23:05:09.0144 0x126c  cdrom - ok
23:05:09.0158 0x126c  [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
23:05:09.0166 0x126c  CertPropSvc - ok
23:05:09.0171 0x126c  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
23:05:09.0173 0x126c  circlass - ok
23:05:09.0186 0x126c  [ 179A41249055D5F039F1B6703F3B6D2B, 886CF715D9E85DB5C9B991EBCB9B12E27AA0EEE52528E222C80CA5B5B0A7AF52 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
23:05:09.0198 0x126c  CLFS - ok
23:05:09.0266 0x126c  [ 399F2E92269D4559F1A813624DD78496, 731606646390D2B279B2A51C8AE0E38E5CDE271CDA7D00061186EBBC3E37A72E ] ClickToRunSvc   C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
23:05:09.0324 0x126c  ClickToRunSvc - ok
23:05:09.0339 0x126c  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
23:05:09.0348 0x126c  CmBatt - ok
23:05:09.0364 0x126c  [ 3930E508DDA46C1FF68FD963F350AA0A, BF63F9C7AB30E2A8199D65EDD6DCBB797C93A4A0B972373643FBE1C38BCFA697 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
23:05:09.0383 0x126c  CNG - ok
23:05:09.0390 0x126c  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
23:05:09.0392 0x126c  CompositeBus - ok
23:05:09.0398 0x126c  COMSysApp - ok
23:05:09.0403 0x126c  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
23:05:09.0410 0x126c  condrv - ok
23:05:09.0415 0x126c  [ C08063F052308B6F5882482615387F30, 523D1D43E896077F32CD9ACAA8E85B513BFB7B013A625E56F0D4E9675D9822BA ] cpuz135         C:\Windows\system32\drivers\cpuz135_x64.sys
23:05:09.0416 0x126c  cpuz135 - ok
23:05:09.0426 0x126c  cpuz136 - ok
23:05:09.0437 0x126c  [ 0EFE4B5884A8032617826A4D76F80969, 083D296CC623C83D36A97AEE343ADF819B17E490F931DBE4D161BD1E8C289E02 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
23:05:09.0444 0x126c  CryptSvc - ok
23:05:09.0460 0x126c  [ EE2F3C0D6ADBC975D6B621EC15ACF4E2, D158C0FACA6344BCD77616EC3D23212F9FD76D7D0C834ACA51998B80162106D5 ] CSC             C:\WINDOWS\system32\drivers\csc.sys
23:05:09.0473 0x126c  CSC - ok
23:05:09.0493 0x126c  [ 936D9E2871CEEFF6A33695D98374367B, C30D42E870F196C4FA20AF95C7B9D9C9C5414D6DDE71268F88C3FC5BF372E61B ] CscService      C:\WINDOWS\System32\cscsvc.dll
23:05:09.0518 0x126c  CscService - ok
23:05:09.0524 0x126c  [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam             C:\WINDOWS\system32\drivers\dam.sys
23:05:09.0532 0x126c  dam - ok
23:05:09.0539 0x126c  [ BA25D4B9B067248F7CAC416E855D706B, EB00FEC005863284D25AC708CEF65D945A1599801A3FDE4B992C1AD4593E2036 ] dc3d            C:\WINDOWS\System32\drivers\dc3d.sys
23:05:09.0542 0x126c  dc3d - ok
23:05:09.0563 0x126c  [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
23:05:09.0581 0x126c  DcomLaunch - ok
23:05:09.0598 0x126c  [ D249C3A58A4FCF755EF4C94F7047E015, 68C044CE2DB93FB502F85F6E081EA164F6E6DCBA6B3EE2A5CBDA122065E522F8 ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
23:05:09.0610 0x126c  defragsvc - ok
23:05:09.0623 0x126c  [ 8F387C2C99EE09C6E2AC316205F86A17, EC9E8AE72A21992AA118964E17090BA4503EB051273AD18185C95172F57328CE ] DeviceAssociationService C:\WINDOWS\system32\das.dll
23:05:09.0637 0x126c  DeviceAssociationService - ok
23:05:09.0644 0x126c  [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
23:05:09.0663 0x126c  DeviceInstall - ok
23:05:09.0670 0x126c  [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
23:05:09.0674 0x126c  Dfsc - ok
23:05:09.0681 0x126c  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
23:05:09.0691 0x126c  dg_ssudbus - ok
23:05:09.0703 0x126c  [ 05DE04005CE0D84D0E6AD21CAEB369C6, E6704A2A685BCFD560796D7C328F8E53DF0793DBDA590598A492D9070D109298 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
23:05:09.0713 0x126c  Dhcp - ok
23:05:09.0724 0x126c  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\WINDOWS\system32\drivers\disk.sys
23:05:09.0728 0x126c  disk - ok
23:05:09.0732 0x126c  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
23:05:09.0734 0x126c  dmvsc - ok
23:05:09.0744 0x126c  [ FE7656474448BE6A6C68E5C9BEB7CA94, 8B9F04CAA29A6EEFCA3D1E7BAFE340D5CCA8AF665474E69B1DF7E2A518B83A89 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
23:05:09.0759 0x126c  Dnscache - ok
23:05:09.0770 0x126c  [ 50288EA079BB520C2B8C8A154202D518, 8916A9180CA009D124FFDFB4CCF5FDFEF7FA2FD37CBCD49FAD4C68E051B4734D ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
23:05:09.0790 0x126c  dot3svc - ok
23:05:09.0799 0x126c  [ 281BEE07BA97E3E98D12A822D923D0D8, 6EB482B2D4D6048D145C3738B2B6FA27A90B5EA53E9167447820F9981B004E63 ] DPS             C:\WINDOWS\system32\dps.dll
23:05:09.0814 0x126c  DPS - ok
23:05:09.0821 0x126c  [ DDC11A202207C0400CBE07315B8FDE5E, 3ED0CA3A714582D92001BA3BFF78BE082F4DC8021298D5A2632F3B2B0A1C09DC ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
23:05:09.0823 0x126c  drmkaud - ok
23:05:09.0832 0x126c  [ 5B074F14F5DD6418F46EE4CA2DEB7EA8, B8223D73C3DE123759101F7D5D45C60BD12B221F09D349575A1044CE3F43CBC5 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
23:05:09.0852 0x126c  DsmSvc - ok
23:05:09.0901 0x126c  [ 313DCE665B57000B18CB26C6B6A10DFE, 6C332D4AD13A316C192321AB7E7597E66AF8E1688101FFD851E06C52128DBA52 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
23:05:09.0937 0x126c  DXGKrnl - ok
23:05:09.0946 0x126c  [ 6073537F250B45E1CB2A02E97F0FE1B2, 653F3F2F2019168EDF225944A88AFDBF8393B62AA076BD19980691778F3DB67D ] Eaphost         C:\WINDOWS\System32\eapsvc.dll
23:05:09.0951 0x126c  Eaphost - ok
23:05:10.0026 0x126c  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
23:05:10.0102 0x126c  ebdrv - ok
23:05:10.0112 0x126c  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] EFS             C:\WINDOWS\System32\lsass.exe
23:05:10.0128 0x126c  EFS - ok
23:05:10.0147 0x126c  [ 44C5F3F4B70D1C8D21C90E724E249796, 49B31B9E7E45A2E42BDA803D9CDC3837E0CB73A1E1E6DA00CF4282573D60526F ] ehRecvr         C:\WINDOWS\ehome\ehRecvr.exe
23:05:10.0167 0x126c  ehRecvr - ok
23:05:10.0174 0x126c  [ 8EFB35A528A48D682C5322A5A07D4352, 5886991ECA449C48A89A3BB2950468EA7CCBD0998774C4C77A1194866827D267 ] ehSched         C:\WINDOWS\ehome\ehsched.exe
23:05:10.0183 0x126c  ehSched - ok
23:05:10.0189 0x126c  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
23:05:10.0195 0x126c  EhStorClass - ok
23:05:10.0202 0x126c  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
23:05:10.0206 0x126c  EhStorTcgDrv - ok
23:05:10.0211 0x126c  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
23:05:10.0216 0x126c  ErrDev - ok
23:05:10.0233 0x126c  [ 030CE75B7D8F75FAA7BA1EC6FD0EB5A3, 5264734F0572FAEDCCB008221C9982CCB7922C4FFC358605424EA413CDCDAE99 ] EventSystem     C:\WINDOWS\system32\es.dll
23:05:10.0247 0x126c  EventSystem - ok
23:05:10.0256 0x126c  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
23:05:10.0261 0x126c  exfat - ok
23:05:10.0270 0x126c  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
23:05:10.0281 0x126c  fastfat - ok
23:05:10.0299 0x126c  [ 2BC8532ABF2B3756B78FA1DA54147DDE, DF65EE2AB0255A2CF3221085A6BE7C37E3DB6BFEED3BCADCDD69BB1049F6DCB1 ] Fax             C:\WINDOWS\system32\fxssvc.exe
23:05:10.0327 0x126c  Fax - ok
23:05:10.0332 0x126c  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
23:05:10.0339 0x126c  fdc - ok
23:05:10.0343 0x126c  [ DC1A78BCCCB7EE53D6FD3BD615A8E222, EE16B6853185AAE779D7135035983938009901658F76A8856AAC12EBA15BB34E ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
23:05:10.0349 0x126c  fdPHost - ok
23:05:10.0353 0x126c  [ E5AD448F2DC84B1CF387FA7F2A3D1936, BBB29C79A085C503F5EFFB5144596D5DEC48A4EB34A049A4E7B38B27F6D92E0A ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
23:05:10.0357 0x126c  FDResPub - ok
23:05:10.0363 0x126c  [ 0046E0BD031213D37123876B0D0FA61C, A4FE17D56F0BAFB70D0D421ED9D1B6E50AF8ADAA4B59328A41AEC5B4C068A3CB ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
23:05:10.0372 0x126c  fhsvc - ok
23:05:10.0378 0x126c  [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
23:05:10.0381 0x126c  FileInfo - ok
23:05:10.0386 0x126c  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
23:05:10.0387 0x126c  Filetrace - ok
23:05:10.0392 0x126c  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
23:05:10.0394 0x126c  flpydisk - ok
23:05:10.0405 0x126c  [ 6592D192E2823C043EDBC010E7774053, C025A0EC5517DC3BD5D6656DC0F0F19021FB3D2EE90EC6194E1BD74E638EBBDC ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
23:05:10.0415 0x126c  FltMgr - ok
23:05:10.0448 0x126c  [ 3FA6DC6B29717E32E211C1FD821F2C75, E467F3775427C93CC2B87327B0A45669631A5FC460C558F6796BA26002A8BBFC ] FontCache       C:\WINDOWS\system32\FntCache.dll
23:05:10.0479 0x126c  FontCache - ok
23:05:10.0485 0x126c  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:05:10.0494 0x126c  FontCache3.0.0.0 - ok
23:05:10.0500 0x126c  [ 35005534E600E993A90B036E4E599F2B, DA56FA3776FBD3D50276CB7410E0CB6F137DD8FCA84C0F3FEF8B1FEA5F6CA592 ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
23:05:10.0504 0x126c  FsDepends - ok
23:05:10.0509 0x126c  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:05:10.0511 0x126c  Fs_Rec - ok
23:05:10.0517 0x126c  [ B99C240DEA85007044E178C1C9C75659, 3EBF269FDCBAC46F47CC0670D6932D62A134EC489CDE4E87A8ED5F392A98EC76 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
23:05:10.0530 0x126c  Futuremark SystemInfo Service - ok
23:05:10.0548 0x126c  [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
23:05:10.0566 0x126c  fvevol - ok
23:05:10.0571 0x126c  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM           C:\WINDOWS\System32\drivers\fxppm.sys
23:05:10.0573 0x126c  FxPPM - ok
23:05:10.0578 0x126c  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
23:05:10.0581 0x126c  gagp30kx - ok
23:05:10.0588 0x126c  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:05:10.0594 0x126c  GEARAspiWDM - ok
23:05:10.0599 0x126c  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
23:05:10.0602 0x126c  gencounter - ok
23:05:10.0609 0x126c  [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
23:05:10.0615 0x126c  GPIOClx0101 - ok
23:05:10.0650 0x126c  [ 69DB09F0263C637DA8568D404842466A, D042194266978AAD31E04DAF7018CD50754077212DC74A4D8AFF6BFEE80CDD20 ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
23:05:10.0684 0x126c  gpsvc - ok
23:05:10.0695 0x126c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:05:10.0699 0x126c  gupdate - ok
23:05:10.0703 0x126c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:05:10.0706 0x126c  gupdatem - ok
23:05:10.0722 0x126c  [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys
23:05:10.0733 0x126c  HdAudAddService - ok
23:05:10.0739 0x126c  [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
23:05:10.0746 0x126c  HDAudBus - ok
23:05:10.0754 0x126c  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
23:05:10.0756 0x126c  HidBatt - ok
23:05:10.0762 0x126c  [ 1EA1B4FABB8CC348E73CA90DBA22E104, 5C18C6BD499272F216DD4626B5E8D38181AEAC9AD917FBEB614A75B70467B258 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
23:05:10.0765 0x126c  HidBth - ok
23:05:10.0770 0x126c  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
23:05:10.0777 0x126c  hidi2c - ok
23:05:10.0784 0x126c  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
23:05:10.0786 0x126c  HidIr - ok
23:05:10.0790 0x126c  [ 449A20A674AA3FAA7F0DD4E33EE2DC20, 28B9BDA306456E8640C355718DE3477537B0FAF8C37F633C709129AAB64D9873 ] hidserv         C:\WINDOWS\system32\hidserv.dll
23:05:10.0794 0x126c  hidserv - ok
23:05:10.0798 0x126c  [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
23:05:10.0809 0x126c  HidUsb - ok
23:05:10.0815 0x126c  [ 7BF3ADCBD021D4F4A84CF40EB49C71B5, 5758A51FD2EBE67E6DBE3A298D714D351910F9E01C428D0C1359457C9242B298 ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
23:05:10.0820 0x126c  hkmsvc - ok
23:05:10.0830 0x126c  [ 6CD9C3819BE8C0A3DACC82AE5D3C4F18, 46BF4A968E506DE17CA401401D716B444CDC10A5C60EB081890DD4B886AEDF5F ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
23:05:10.0842 0x126c  HomeGroupListener - ok
23:05:10.0855 0x126c  [ 1A4DA1D6287B99033D144B436C23B656, D4D1EEB372E61512EA36A33F095E68C225B8E6C72CC57ED8BD00533F88012F40 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
23:05:10.0868 0x126c  HomeGroupProvider - ok
23:05:10.0875 0x126c  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
23:05:10.0880 0x126c  HpSAMD - ok
23:05:10.0906 0x126c  [ 9DDCA7F18983C5410DEFF79F819DF93C, CE97B4440377BFC5CA81BB600C3BD1DD9FB3951CA1EB70735F5E2050EBB74223 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
23:05:10.0930 0x126c  HTTP - ok
23:05:10.0936 0x126c  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
23:05:10.0942 0x126c  hwpolicy - ok
23:05:10.0946 0x126c  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
23:05:10.0948 0x126c  hyperkbd - ok
23:05:10.0952 0x126c  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
23:05:10.0953 0x126c  HyperVideo - ok
23:05:10.0960 0x126c  [ 84CFC5EFA97D0C965EDE1D56F116A541, 0155EA62BF07D99D98D1C9B6559C8E3301B016A20D03DF1EF64B2FAB8C37403B ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
23:05:10.0968 0x126c  i8042prt - ok
23:05:10.0973 0x126c  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
23:05:10.0975 0x126c  iaLPSSi_GPIO - ok
23:05:10.0980 0x126c  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C     C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
23:05:10.0983 0x126c  iaLPSSi_I2C - ok
23:05:10.0998 0x126c  [ ABBF174CB394F5C437410A788B7E404A, 95554F675329E7062F0936E4E902FEFF2456CAD95D6C9B60DCC213EF6E4C62D8 ] iaStor          C:\WINDOWS\system32\drivers\iaStor.sys
23:05:11.0014 0x126c  iaStor - ok
23:05:11.0032 0x126c  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
23:05:11.0048 0x126c  iaStorAV - ok
23:05:11.0061 0x126c  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
23:05:11.0074 0x126c  iaStorV - ok
23:05:11.0079 0x126c  IEEtwCollectorService - ok
23:05:11.0106 0x126c  [ DEA76F90F9777E3427D70E380222B23B, B917BA423896A12E45623E3D494CA03317A6FC612CA433C62C897524DC3E756B ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
23:05:11.0132 0x126c  IKEEXT - ok
23:05:11.0140 0x126c  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
23:05:11.0142 0x126c  intelide - ok
23:05:11.0147 0x126c  [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
23:05:11.0153 0x126c  intelpep - ok
23:05:11.0163 0x126c  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
23:05:11.0167 0x126c  intelppm - ok
23:05:11.0173 0x126c  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:05:11.0175 0x126c  IpFilterDriver - ok
23:05:11.0199 0x126c  [ ACFEE9487693C2BD573DFCA71D98E17C, A347FD476147CD3568EEE6993B46AFC05A66A4269094CA51572D0FD013FCB535 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
23:05:11.0222 0x126c  iphlpsvc - ok
23:05:11.0229 0x126c  [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
23:05:11.0232 0x126c  IPMIDRV - ok
23:05:11.0239 0x126c  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
23:05:11.0251 0x126c  IPNAT - ok
23:05:11.0255 0x126c  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
23:05:11.0256 0x126c  IRENUM - ok
23:05:11.0261 0x126c  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
23:05:11.0262 0x126c  isapnp - ok
23:05:11.0274 0x126c  [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
23:05:11.0317 0x126c  iScsiPrt - ok
23:05:11.0322 0x126c  [ 8BE92376799B6B44D543E8D07CDCF885, 425B8BB1BAF62F735B3CB5A002E6055879F02E7207E55942BFD37F1784F5F368 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
23:05:11.0325 0x126c  kbdclass - ok
23:05:11.0329 0x126c  [ FB6E47E569D4872ABEB506BE03A45FBA, 5C4056CADA8F67587A119D9AE2A0EFAB30387CF6298F4019FF68AC92E2F6F54B ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
23:05:11.0336 0x126c  kbdhid - ok
23:05:11.0341 0x126c  [ DB7A09BC90DF20F44F16F8B0F9ED3491, 2DF5E042284D61368A5801B2557351B2C4B1044AA6F966DF4DDCE7B453D1B9AE ] kbldfltr        C:\WINDOWS\system32\drivers\kbldfltr.sys
23:05:11.0347 0x126c  kbldfltr - ok
23:05:11.0351 0x126c  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic           C:\WINDOWS\system32\DRIVERS\kdnic.sys
23:05:11.0353 0x126c  kdnic - ok
23:05:11.0357 0x126c  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] KeyIso          C:\WINDOWS\system32\lsass.exe
23:05:11.0361 0x126c  KeyIso - ok
23:05:11.0369 0x126c  [ ADDECBCC777665BD113BED437E602AB0, B6283475A1219CE44E9F683DD3BEB8C42DA0943297E5C4699B22176AD8A6A7ED ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
23:05:11.0380 0x126c  KSecDD - ok
23:05:11.0388 0x126c  [ 15C8C65CEA018C02EA0F648448C491C5, DF909704D22D891BE439B2E3D8386EA659444F91DC92AABFF9766446AEE5EBC0 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
23:05:11.0393 0x126c  KSecPkg - ok
23:05:11.0397 0x126c  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
23:05:11.0403 0x126c  ksthunk - ok
23:05:11.0415 0x126c  [ 32B1A8351160F307A8C66BCB0F94A9C2, 52F1DEC2BBD4D5DDBB85ED20B99D96BBA7EB83304D76F183A11FDAFDA364E873 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
23:05:11.0428 0x126c  KtmRm - ok
23:05:11.0441 0x126c  [ 793EACA6BAE9F481C2059BCB3743EB4A, 2624905C6B6A1227BD1CAC7D4FE55A5F6543E1278DAB31EC553748472D180D1D ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
23:05:11.0452 0x126c  LanmanServer - ok
23:05:11.0462 0x126c  [ D0D9C2ECA4D03A8F06DCD91236B90C98, E2D1144DC8040EA5FEB0602A20BA4CB920B4BC86AD5AD05FC0DF7D74DC95DC66 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
23:05:11.0480 0x126c  LanmanWorkstation - ok
23:05:11.0497 0x126c  [ 626D19F1771E1AE72208AE9A8F3082F7, 78FDB64545ED2EAE9F51C08120E21D2C3285208F6846BD8BBA08CAA839E7A0C4 ] lfsvc           C:\WINDOWS\System32\GeofenceMonitorService.dll
23:05:11.0514 0x126c  lfsvc - ok
23:05:11.0519 0x126c  [ 47269F0DE1E5089C6F23BC1EC48CFC31, 20B0B428E1EB140778AEE4BFDD6AD45DCA5C5526DB8FEC8CAA0FDA08D2C10A7A ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
23:05:11.0530 0x126c  LightScribeService - ok
23:05:11.0535 0x126c  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
23:05:11.0537 0x126c  lltdio - ok
23:05:11.0547 0x126c  [ 00E070FC0C673311AFD4B068D1242780, 50B0E0E625361145332C849709498FF444E46578DCAD2536E6D0289E0125580F ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
23:05:11.0562 0x126c  lltdsvc - ok
23:05:11.0567 0x126c  [ D113FAD71A5E67AA94B32A0F8828D265, 08DDB4BBDB570C59926DBF5E27FCF46DCDF8B8212BB9251E97837E0504516FB3 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
23:05:11.0571 0x126c  lmhosts - ok
23:05:11.0576 0x126c  [ 28AA6E8F6CA9F3716AC8A310DFBAB1B5, 4452084D2211CEDC7CED7FC02D04A28EB2211BEAD97271F142DD95EF2B3C6D58 ] Logi_Headset_DFU C:\WINDOWS\System32\Drivers\lhusbdfuamd64.sys
23:05:11.0578 0x126c  Logi_Headset_DFU - ok
23:05:11.0586 0x126c  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
23:05:11.0592 0x126c  LSI_SAS - ok
23:05:11.0598 0x126c  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
23:05:11.0602 0x126c  LSI_SAS2 - ok
23:05:11.0607 0x126c  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\WINDOWS\system32\drivers\lsi_sas3.sys
23:05:11.0610 0x126c  LSI_SAS3 - ok
23:05:11.0615 0x126c  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
23:05:11.0622 0x126c  LSI_SSS - ok
23:05:11.0643 0x126c  [ 8EBB271E4588D835784A3FF7E80076A8, A508BE95F6F5063A76F4C8726D9425BB1F00DE803EFE73A0BE145DD9AB82FF0A ] LSM             C:\WINDOWS\System32\lsm.dll
23:05:11.0668 0x126c  LSM - ok
23:05:11.0676 0x126c  [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
23:05:11.0685 0x126c  luafv - ok
23:05:11.0693 0x126c  [ 9D2252224DF2213E1B44FA608E6A1D14, E2C644C5FDCCA7BD2547ADC110FDDB26EA91C734AB53CD4196266C746BFDFAA4 ] Mcx2Svc         C:\WINDOWS\system32\Mcx2Svc.dll
23:05:11.0698 0x126c  Mcx2Svc - ok
23:05:11.0703 0x126c  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
23:05:11.0705 0x126c  megasas - ok
23:05:11.0723 0x126c  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
23:05:11.0736 0x126c  megasr - ok
23:05:11.0742 0x126c  [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] MMCSS           C:\WINDOWS\system32\mmcss.dll
23:05:11.0754 0x126c  MMCSS - ok
23:05:11.0759 0x126c  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem           C:\WINDOWS\system32\drivers\modem.sys
23:05:11.0761 0x126c  Modem - ok
23:05:11.0765 0x126c  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
23:05:11.0767 0x126c  monitor - ok
23:05:11.0772 0x126c  [ CEAC6D40FE887CE8406C2393CF97DE06, 34E76908B802764FF0D7AB3AF89BE77BD35B44787983343FAD89891891C0A045 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
23:05:11.0781 0x126c  mouclass - ok
23:05:11.0788 0x126c  [ 02D98BF804084E9A0D69D1C69B02CCA9, EC5BC5D87043DFFD035FD4DD27B3D94E03119063519E4151BCC3522B613E2D7F ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
23:05:11.0790 0x126c  mouhid - ok
23:05:11.0795 0x126c  [ 515549560D481138E6E21AF7C6998E56, C7E4B38D8CCAF15B9BDA63C8C8209F6193AD220DA02E1264F1B687AACD8F409F ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
23:05:11.0799 0x126c  mountmgr - ok
23:05:11.0806 0x126c  [ 345477F02C308B7480702767218C86A2, 98AFB5CF35BD82BA44B8F52CBC5FA3760506ADD7892C2AA1A77E8DF71FC8523F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:05:11.0818 0x126c  MozillaMaintenance - ok
23:05:11.0825 0x126c  [ 6DDB2BEFF00EA756FF0F65132330D4F4, A50749C3FDB57B686F91109CC55DF05300A6DF224B58649CE514506D074EADC9 ] MpKsl9d25ff37   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D0B6424B-853B-4B8A-88DA-F0DB58FD82B9}\MpKsl9d25ff37.sys
23:05:11.0827 0x126c  MpKsl9d25ff37 - ok
23:05:11.0832 0x126c  [ F170510BE94CF45E3C6274578F6204B2, 344C3DDE1D622607CA2ABECB2C47CB0166D2D258BD94A7960C45A5ADBB640566 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
23:05:11.0840 0x126c  mpsdrv - ok
23:05:11.0864 0x126c  [ D186C5844393252147BE934F3871DB7A, 30160F8268B9F46E82C5CB536867E0CF280DC98074A481595072E3320200E343 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
23:05:11.0897 0x126c  MpsSvc - ok
23:05:11.0908 0x126c  [ 9054B51D656282CFF395F9F22E369DCC, 26ED08ADCEA48FC263AE58525B9FB7ED47DE58FD0E09BB89EC60EB68A265BDBF ] MQAC            C:\WINDOWS\system32\drivers\mqac.sys
23:05:11.0913 0x126c  MQAC - ok
23:05:11.0919 0x126c  [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
23:05:11.0923 0x126c  MRxDAV - ok
23:05:11.0936 0x126c  [ 7A1A3F213CDB3363D179D5014272025D, 6756F5B7D9FBF6839DB1FF4E94EA45B5499D7DF925E75581C96FBBA4BE131542 ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:05:11.0948 0x126c  mrxsmb - ok
23:05:11.0958 0x126c  [ 3E28B99198B514DFEB152EACF913025E, 6C1D8353DCD5F811F39C0C3CB5DF3D2457F0D17EE80FB06196AA169E3D19E9B2 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
23:05:11.0969 0x126c  mrxsmb10 - ok
23:05:11.0980 0x126c  [ C910E5D18958914A66F0E45689D0B40A, AD7C91DD8A60A511E580DD56BACC97F85075A539E7C5D95040A8F870A621DAF4 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
23:05:11.0985 0x126c  mrxsmb20 - ok
23:05:11.0992 0x126c  [ E0927EFA25D473367C3341B9F5969779, B77A162BD3334557623674373D8EC2BE7CC0B359DF06304E467ABFFEE0530271 ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
23:05:12.0000 0x126c  MsBridge - ok
23:05:12.0008 0x126c  [ A082C17D14D0790E27D064EA4B138AE1, 9A565ED885782D9D5135C8399C11C356DBF9EBF3B8EB4B4504BD2604AD0B45E6 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
23:05:12.0014 0x126c  MSDTC - ok
23:05:12.0024 0x126c  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
23:05:12.0030 0x126c  Msfs - ok
23:05:12.0035 0x126c  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
23:05:12.0037 0x126c  msgpiowin32 - ok
23:05:12.0041 0x126c  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
23:05:12.0043 0x126c  mshidkmdf - ok
23:05:12.0046 0x126c  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
23:05:12.0048 0x126c  mshidumdf - ok
23:05:12.0052 0x126c  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
23:05:12.0066 0x126c  msisadrv - ok
23:05:12.0074 0x126c  [ 810F8A0A0680662BB0CE44D0E2CEF90C, 5631B07911B7EF378CB1583A480A3C5715E59A5488B33A528F4D7A2F849B9113 ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
23:05:12.0080 0x126c  MSiSCSI - ok
23:05:12.0088 0x126c  msiserver - ok
23:05:12.0093 0x126c  [ D22AE5313F6B7EFDDD8C117B5501F4A3, 1937EEE33BF9C4485F172B10FB17AEF3F3B8978371307F49C3338D74D96A8389 ] MsKeyboardFilter C:\WINDOWS\System32\KeyboardFilterSvc.dll
23:05:12.0102 0x126c  MsKeyboardFilter - ok
23:05:12.0106 0x126c  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:05:12.0107 0x126c  MSKSSRV - ok
23:05:12.0112 0x126c  [ 375E44168F2DFB91A68B8A3F619C5A7C, AC243E02E9A39D0B4DE9571F196941700EE6EB5E94F5B0BA8994FB551E73A7A8 ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
23:05:12.0121 0x126c  MsLldp - ok
23:05:12.0126 0x126c  [ 8DB47E205BB11C2B9A9949DF369ADBCF, 93A6D757C7BFD9E18065B4B52E9DD382F2FAE8683DE290AE2DD2A0D9E82459A3 ] MSMQ            C:\WINDOWS\system32\mqsvc.exe
23:05:12.0131 0x126c  MSMQ - ok
23:05:12.0135 0x126c  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:05:12.0136 0x126c  MSPCLOCK - ok
23:05:12.0140 0x126c  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
23:05:12.0141 0x126c  MSPQM - ok
23:05:12.0153 0x126c  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
23:05:12.0165 0x126c  MsRPC - ok
23:05:12.0174 0x126c  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
23:05:12.0185 0x126c  mssmbios - ok
23:05:12.0189 0x126c  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
23:05:12.0193 0x126c  MSTEE - ok
23:05:12.0198 0x126c  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
23:05:12.0199 0x126c  MTConfig - ok
23:05:12.0205 0x126c  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
23:05:12.0212 0x126c  Mup - ok
23:05:12.0217 0x126c  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
23:05:12.0224 0x126c  mvumis - ok
23:05:12.0237 0x126c  [ 41A45D2A75494EABF2806EA051E00376, EB2497561C8E33A4297C044604C717FF854C7F046882A9E4A400AE7679BF5467 ] napagent        C:\WINDOWS\system32\qagentRT.dll
23:05:12.0259 0x126c  napagent - ok
23:05:12.0273 0x126c  [ 26ACA481FAFEC59FE311D719E3027BBA, 16A24CCA95A38BDFE970580159F6ACAA13FF1B74CF2290B1B020D909F90D3347 ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
23:05:12.0288 0x126c  NativeWifiP - ok
23:05:12.0296 0x126c  [ 71E3C0100AA19D11373CCEB2F51A6008, 58FBF35F5FE19BEABE483C11E9996BE93D76721C8C34465350FA98B465CA3672 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
23:05:12.0308 0x126c  NcaSvc - ok
23:05:12.0315 0x126c  [ 51DF09CAB2CAC64FEE3E371D9028ED01, 9B81604D0D0359AF8F54FED6DA7116FFD2F40407895028EAD99FF1D7CFDC2D14 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
23:05:12.0322 0x126c  NcbService - ok
23:05:12.0327 0x126c  [ 2586C4C167499210DCBF3ECFD8CCE210, D8129FEDE9918BF4FB0057CC58700D4E08457060E810B9CC25CA0F598506ADB8 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
23:05:12.0332 0x126c  NcdAutoSetup - ok
23:05:12.0361 0x126c  [ E4B4BE2D7750849C07589DA0B0AABA01, BB5AA727BA018A94B5DE2C4E0B594DD2E7A2B3457885446EE568F3A1E18AB3B0 ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
23:05:12.0389 0x126c  NDIS - ok
23:05:12.0395 0x126c  [ C6BB12BC35D1637CA17AE16D3A4725EB, 01C1D9FA738886A195166F88207EEB6715A1DE0608978ED6C5DC738AF5C02513 ] NdisCap         C:\WINDOWS\system32\DRIVERS\ndiscap.sys
23:05:12.0402 0x126c  NdisCap - ok
23:05:12.0408 0x126c  [ B1AA3B19A2E596A59224F893E01A5A75, E08696CA5E087E51AC3E64D4FB8490EEADD612DDF30C9A94DD1BD1BA124B71B7 ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
23:05:12.0412 0x126c  NdisImPlatform - ok
23:05:12.0416 0x126c  [ 9423421E735BD5394351E0C47C76BB92, 763E5D06F896C0EF8AD52515464F28BA85DB7A1560E451857AC9AA68FAFCBC66 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:05:12.0418 0x126c  NdisTapi - ok
23:05:12.0423 0x126c  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:05:12.0425 0x126c  Ndisuio - ok
23:05:12.0431 0x126c  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
23:05:12.0437 0x126c  NdisVirtualBus - ok
23:05:12.0445 0x126c  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:05:12.0451 0x126c  NdisWan - ok
23:05:12.0458 0x126c  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:05:12.0467 0x126c  NdisWanLegacy - ok
23:05:12.0472 0x126c  [ A5BD69A8812FA79D1A487691DD3FB244, 67B5EDE101943E0E8B8041DB2353D20C8B9F2D253E77964761CFE8F136C0BBC7 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
23:05:12.0475 0x126c  NDProxy - ok
23:05:12.0481 0x126c  [ 5A072F0B90C29C5233D78BE33EF5ED78, B32ED76A674B1FC743361FB7BBD4C915A78B14132AB056AADD445D5995AD4F32 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
23:05:12.0484 0x126c  Ndu - ok
23:05:12.0489 0x126c  [ A83D67D347A684F10B7D3019C8A6380C, 2B86832967981C8C786BF24C1CF8E13E01745ACE3333CF5C821DD93D623B96E4 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
23:05:12.0497 0x126c  NetBIOS - ok
23:05:12.0507 0x126c  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
23:05:12.0515 0x126c  NetBT - ok
23:05:12.0519 0x126c  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] Netlogon        C:\WINDOWS\system32\lsass.exe
23:05:12.0530 0x126c  Netlogon - ok
23:05:12.0540 0x126c  [ B7AD851A21FEBA3BA214972627614207, 29605320CCC3DAAD062CAECF0009DACBC2F6D28ED4E8AF7CE76132129F5572A0 ] Netman          C:\WINDOWS\System32\netman.dll
23:05:12.0549 0x126c  Netman - ok
23:05:12.0558 0x126c  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:05:12.0567 0x126c  NetMsmqActivator - ok
23:05:12.0573 0x126c  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:05:12.0576 0x126c  NetPipeActivator - ok
23:05:12.0591 0x126c  [ F0F0A372C2EF6358399C4936F91B6131, CE596C71EB4D1A5E104D3148F2D0D8789882C59FD198DCF33CCAC7A08B50E4EE ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
23:05:12.0610 0x126c  netprofm - ok
23:05:12.0616 0x126c  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:05:12.0627 0x126c  NetTcpPortSharing - ok
23:05:12.0633 0x126c  [ 70414DB660BFBB7BD58FCE8EA4364E1B, 6DFB3897CD55E22BA1EDF0AE672F4D7A6A1F512F8A0A26AF106765E6B1CF65AC ] netvsc          C:\WINDOWS\system32\DRIVERS\netvsc63.sys
23:05:12.0636 0x126c  netvsc - ok
23:05:12.0648 0x126c  [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
23:05:12.0668 0x126c  NlaSvc - ok
23:05:12.0673 0x126c  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
23:05:12.0679 0x126c  Npfs - ok
23:05:12.0683 0x126c  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
23:05:12.0691 0x126c  npsvctrig - ok
23:05:12.0695 0x126c  [ 6E2271ED0C3E95B8E29F3752B91B9E84, 44026AD9757EA82967D7F7578455802FAD7FE0057EAC088E0AE207C15F594B86 ] nsi             C:\WINDOWS\system32\nsisvc.dll
23:05:12.0700 0x126c  nsi - ok
23:05:12.0704 0x126c  [ E490B459978CB87779E84C761D22B827, 1E5CA38626E41618E4CA16DD0C70EB2FA86E986F0CF21A749BDE2A17015DEEC6 ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
23:05:12.0712 0x126c  nsiproxy - ok
23:05:12.0764 0x126c  [ 038C77D577900EE39410662478BB0D50, A33AAFD5750245C17A47EC71F3C6EAD2E0925CAD34C65AB3E6CEE44756C668E6 ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
23:05:12.0812 0x126c  Ntfs - ok
23:05:12.0821 0x126c  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\WINDOWS\system32\drivers\Null.sys
23:05:12.0823 0x126c  Null - ok
23:05:13.0100 0x126c  [ F554291C0A11F5B713B54C5886D4AA31, 65B7DF4BB3DFF616DC2C863988E30F901E14221C00E2A99A2079E19D91D93BAE ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
23:05:13.0354 0x126c  nvlddmkm - ok
23:05:13.0406 0x126c  [ 1D3878E5722F0AB3C22D04E88AC4AC55, F36048FA1CDDA5065AD1DEF1F08A241D1859A1BC199B073DCD1C355257A97D7C ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
23:05:13.0435 0x126c  NvNetworkService - ok
23:05:13.0445 0x126c  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
23:05:13.0449 0x126c  nvraid - ok
23:05:13.0456 0x126c  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
23:05:13.0467 0x126c  nvstor - ok
23:05:13.0793 0x126c  [ 34F09EE6871318C287E65949A683B198, 0ADD3DC6BFE77C932913A3D8C227FBBBC81100B94B5E3CEFD430DE1B2F09E3AE ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
23:05:14.0102 0x126c  NvStreamSvc - ok
23:05:14.0147 0x126c  [ 8E99BF264C1F20934A67E91BC9F4FB20, 89AA8823B751F4CEF4E862F1270E7EFDA81A6E5D9C5F72625CBF83C70B312353 ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
23:05:14.0216 0x126c  nvsvc - ok
23:05:14.0222 0x126c  [ E54A699931F73E52C6DA2DA2776BA98D, F600F4C5535F9C170265EF0B6BEE9D03F19A07A6A7B45FD606B2E64D085CA0BF ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
23:05:14.0224 0x126c  nvvad_WaveExtensible - ok
23:05:14.0230 0x126c  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
23:05:14.0233 0x126c  nv_agp - ok
23:05:14.0241 0x126c  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:05:14.0249 0x126c  ose - ok
23:05:14.0257 0x126c  [ 11E0B35479C895888BA3D7F619DCFFF3, 6ED82C19898101EC00BD64A9F90595C3D20AD2D2902AA8765B740FB3B9312DDF ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:05:14.0262 0x126c  ose64 - ok
23:05:14.0275 0x126c  [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
23:05:14.0293 0x126c  p2pimsvc - ok
23:05:14.0306 0x126c  [ 2A57A937BC5B1B2D6AFE6A8C5925F50B, 00D84EFED5A7129AAD86945940030474795905C32D65CBD5B1A3EBADCED8F873 ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
23:05:14.0325 0x126c  p2psvc - ok
23:05:14.0331 0x126c  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport         C:\WINDOWS\System32\drivers\parport.sys
23:05:14.0341 0x126c  Parport - ok
23:05:14.0346 0x126c  [ EF0C1749C9A8CEE9A457473D433CC00F, A5FDAB5AD47471640D697C6CFBA6C67730878ABBA47D394EAA47C9733EDCE1F3 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
23:05:14.0350 0x126c  partmgr - ok
23:05:14.0363 0x126c  [ 9A5309EF92F39346CFD5A4C2C3D1BFAD, 5908E0C9562F9CB24784491BD9AE7983A33A6BDF81AFA0A08045518A0C9BB2B1 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
23:05:14.0387 0x126c  PcaSvc - ok
23:05:14.0397 0x126c  [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci             C:\WINDOWS\system32\drivers\pci.sys
23:05:14.0408 0x126c  pci - ok
23:05:14.0413 0x126c  [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
23:05:14.0415 0x126c  pciide - ok
23:05:14.0421 0x126c  [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
23:05:14.0426 0x126c  pcmcia - ok
23:05:14.0430 0x126c  [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
23:05:14.0437 0x126c  pcw - ok
23:05:14.0443 0x126c  [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
23:05:14.0446 0x126c  pdc - ok
23:05:14.0464 0x126c  [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
23:05:14.0483 0x126c  PEAUTH - ok
23:05:14.0535 0x126c  [ 084DE525DFE82AE7453DD527390FA110, 8216AE63AE740D97204CDED6543B66FC1FB55DB86D42FBA0EC629361C40F9EC0 ] PeerDistSvc     C:\WINDOWS\system32\peerdistsvc.dll
23:05:14.0583 0x126c  PeerDistSvc - ok
23:05:14.0619 0x126c  [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
23:05:14.0657 0x126c  PerfHost - ok
23:05:14.0695 0x126c  [ 928061178CD9856CA6B67FFFCE6BA766, 71DE3C7CA7F83EAAA550CD8A68FB67DE042B0AE51BFACB1ECB8852D502E11F50 ] pla             C:\WINDOWS\system32\pla.dll
23:05:14.0729 0x126c  pla - ok
23:05:14.0737 0x126c  [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
23:05:14.0755 0x126c  PlugPlay - ok
23:05:14.0759 0x126c  [ 045EB4F260606A03BE340D09DEAF3BA4, 6F34B8D414F7F69F4388F2F8A86E0F3AD179E423126990AF3E1EC4DCCB8E7693 ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
23:05:14.0764 0x126c  PNRPAutoReg - ok
23:05:14.0775 0x126c  [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
23:05:14.0788 0x126c  PNRPsvc - ok
23:05:14.0794 0x126c  [ 34A8FAE065249F85A67A3215FF5ECB34, 913297755C1046BA004E79660B7DA5BBE5E92B96AAA83D78AE3FF379371950D5 ] Point64         C:\WINDOWS\System32\drivers\point64.sys
23:05:14.0796 0x126c  Point64 - ok
23:05:14.0808 0x126c  [ C16097D77A232A288D65F299E2E01105, 5CE4B44B06FD26569C0F92FF1D3991D0128D8444AE7BC9EBEF5A33811D721BE8 ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
23:05:14.0823 0x126c  PolicyAgent - ok
23:05:14.0831 0x126c  [ 00E08B30E7F7C13ECE2CDF4F46A77311, 1807C0A64C1794E572C86730816C01DCF4D8F773ADE9CAEA3AC0658F7BD71A4E ] Power           C:\WINDOWS\system32\umpo.dll
23:05:14.0849 0x126c  Power - ok
23:05:14.0915 0x126c  [ 3C96A45CA3403A276B0F045C448EC27B, C0011DB8C5A85817CAF815CC0095EE2C1CDD5964DCD8EAF4C35A2495D6A873CC ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
23:05:14.0978 0x126c  PrintNotify - ok
23:05:14.0987 0x126c  [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor       C:\WINDOWS\System32\drivers\processr.sys
23:05:14.0996 0x126c  Processor - ok
23:05:15.0005 0x126c  [ 19424364D8C03B990C4281BE53963FD0, 958FC8436E6B754858E20BC48B0D4B269991E8CA94C15C2761BF04ED52591907 ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
23:05:15.0013 0x126c  ProfSvc - ok
23:05:15.0020 0x126c  [ 8528BB05E4D4E25945F78B00B2555FB7, FF8E0D4580F93CD348080967F52FE6C2C68B56DAEACAE2EAEF04E19412A953AE ] Psched          C:\WINDOWS\system32\DRIVERS\pacer.sys
23:05:15.0030 0x126c  Psched - ok
23:05:15.0042 0x126c  [ AF90BB44C99D6820BE52C9BBAA523283, 9772D9CC1666959EC8EE4ED740A5179473CE4F38762109F1123DD68010D20EA1 ] QWAVE           C:\WINDOWS\system32\qwave.dll
23:05:15.0053 0x126c  QWAVE - ok
23:05:15.0058 0x126c  [ 3FB466684609A4329858CF2EBD62E0FD, CFC8FBAB1436948F9D34CE6A2D6DE2F86F3E93E50B86851CED979C8CCE609798 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
23:05:15.0065 0x126c  QWAVEdrv - ok
23:05:15.0069 0x126c  [ 2C56F0EE27E4EF70CA4B4983D3638905, AFFDD686886CE982424B644D9168D61C6F86A5244FF97BC644DF75B321E415E5 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:05:15.0071 0x126c  RasAcd - ok
23:05:15.0077 0x126c  [ 5F061AC45266841A2860C1858ED863B8, 9E0D52BAC8A50225C32D0397C35350601B996443E2481C808CC59D3B0763FEF0 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
23:05:15.0089 0x126c  RasAuto - ok
23:05:15.0104 0x126c  [ 5C7B86EE33505E36026AFAAB62DA6364, 903BB1A355AC746BF09C2A7C87B068168648DB79DEF39AB1DC710B6A7A5F6556 ] RasMan          C:\WINDOWS\System32\rasmans.dll
23:05:15.0120 0x126c  RasMan - ok
23:05:15.0126 0x126c  [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:05:15.0132 0x126c  RasPppoe - ok
23:05:15.0145 0x126c  [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:05:15.0158 0x126c  rdbss - ok
23:05:15.0165 0x126c  [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
23:05:15.0167 0x126c  rdpbus - ok
23:05:15.0174 0x126c  [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
23:05:15.0183 0x126c  RDPDR - ok
23:05:15.0191 0x126c  [ 9F08A6608F98B5407E7DDBCF306573EF, 92812F97CFDB2EC128BC48143DE215B7D012B15D3FB4D2199222AD8C31DA5016 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
23:05:15.0193 0x126c  RdpVideoMiniport - ok
23:05:15.0202 0x126c  [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
23:05:15.0208 0x126c  rdyboost - ok
23:05:15.0232 0x126c  [ E515A287C8FAE901EB8FB42F168E14F2, 9AE8D608587713FD18BB728BADD402C86FFF06A67359B22ED9431705522BC310 ] ReFS            C:\WINDOWS\system32\drivers\ReFS.sys
23:05:15.0252 0x126c  ReFS - ok
23:05:15.0263 0x126c  [ BFFB40FBE6D2C3469F8D06EE5E4934AB, 5B6763F973A740DCD53CEA75156926457BED8B075965033C484877DDA8B97F39 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
23:05:15.0271 0x126c  RemoteAccess - ok
23:05:15.0280 0x126c  [ 4DCCABE03D06955ED61BABBD8EF9F30F, 531CD60315AAF283B73E0F6CF77D4DE093B809E73C44D2AC43B7247500B3485E ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
23:05:15.0290 0x126c  RemoteRegistry - ok
23:05:15.0296 0x126c  [ D894CBD7DA753C881EE8D5E33B583225, DA4472A85F10A3DF8CE969F731E67FE7C75EE6095908AB8AC2C44851DC5A3F8B ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
23:05:15.0308 0x126c  RpcEptMapper - ok
23:05:15.0312 0x126c  [ 5CAE8F47B31D5CFC322B5B898C19E0FE, FDB5F0B6EA36403E031D9147AB0519011FAAD3AC8190DE5B1F17FB5472D79D47 ] RpcLocator      C:\WINDOWS\system32\locator.exe
23:05:15.0318 0x126c  RpcLocator - ok
23:05:15.0337 0x126c  [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
23:05:15.0360 0x126c  RpcSs - ok
23:05:15.0366 0x126c  [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
23:05:15.0373 0x126c  rspndr - ok
23:05:15.0390 0x126c  [ 19764658C1468C2C0CEF133D28414A6B, 87AD4056F6C67052433A366B200B75613148B69B9B9D502AD926A7F7F037B8DE ] RTL8168         C:\WINDOWS\system32\DRIVERS\Rt630x64.sys
23:05:15.0405 0x126c  RTL8168 - ok
23:05:15.0412 0x126c  [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
23:05:15.0414 0x126c  s3cap - ok
23:05:15.0419 0x126c  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] SamSs           C:\WINDOWS\system32\lsass.exe
23:05:15.0422 0x126c  SamSs - ok
23:05:15.0429 0x126c  [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
23:05:15.0439 0x126c  sbp2port - ok
23:05:15.0447 0x126c  [ 47C497FA4DDEA908633CAA60CEBE6805, 4DF5742D4C99D3F7B6A5671AEDB1E5E47D3399D36B28BA19C105FA604D8D5A1C ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
23:05:15.0456 0x126c  SCardSvr - ok
23:05:15.0464 0x126c  [ E76C4E98302AE39CC6FA5D20FC8B5438, B6B6B59CF427515087689285797F4A5763103440EBE5D87A61FA74F80F895BD0 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
23:05:15.0476 0x126c  ScDeviceEnum - ok
23:05:15.0481 0x126c  [ ABD0237B15DBD2B4695F4B7D734A58F7, D6831921F0CD3E03CBF1CA3ED5824EE0C75127842D12D4E897E74EC72B0792EB ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
23:05:15.0483 0x126c  scfilter - ok
23:05:15.0513 0x126c  [ D3AE5DB16EAF913860EC28654CE00E6B, AD76B6044F7247C6E86F6DCB7CFD6B25BCA2B9F09A97A419F043A999E66726A2 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
23:05:15.0550 0x126c  Schedule - ok
23:05:15.0559 0x126c  [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
23:05:15.0567 0x126c  SCPolicySvc - ok
23:05:15.0576 0x126c  [ 7B7C482CF48E6EE33664340D1A78E6FE, CE5077C4B0372F4F9F02B0B37AE58C0DAEFCA9D242065731A23F072506430575 ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
23:05:15.0583 0x126c  sdbus - ok
23:05:15.0589 0x126c  [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
23:05:15.0596 0x126c  sdstor - ok
23:05:15.0600 0x126c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\WINDOWS\system32\drivers\secdrv.sys
23:05:15.0602 0x126c  secdrv - ok
23:05:15.0607 0x126c  [ C49009F897BA4F2F4F31043663AA1485, 48C8BE1E3A4F150662AD012AF4E0357ABA792AD1147AB90EFF6CB2630E2501B6 ] seclogon        C:\WINDOWS\system32\seclogon.dll
23:05:15.0615 0x126c  seclogon - ok
23:05:15.0620 0x126c  [ A88882E64BDC1D8E8D6E727B71CCCC53, 12D2235F54D0CEEED8AA268C17CDE44020269F4FEFC70CE957DBBF99AF7F553D ] SENS            C:\WINDOWS\System32\sens.dll
23:05:15.0631 0x126c  SENS - ok
23:05:15.0640 0x126c  [ E66A7C8CE7ED22DED6DF1CA479FB4790, ADEB076F131E7A8C3AD96022B09BB33EB9AB26C9C831503B8C6960AA763B8975 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
23:05:15.0651 0x126c  SensrSvc - ok
23:05:15.0657 0x126c  [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
23:05:15.0660 0x126c  SerCx - ok
23:05:15.0667 0x126c  [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
23:05:15.0672 0x126c  SerCx2 - ok
23:05:15.0676 0x126c  [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
23:05:15.0684 0x126c  Serenum - ok
23:05:15.0690 0x126c  [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
23:05:15.0695 0x126c  Serial - ok
23:05:15.0699 0x126c  [ 0BD2B65DCE756FDE95A2E5CCCBF7705D, F13FAFEC8FCF3E796196562717C433CE359A74A3E5876AB070647C717AF74028 ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
23:05:15.0701 0x126c  sermouse - ok
23:05:15.0716 0x126c  [ D5C3776CBD8BC307DCCA3FD4CE667A37, 98E4253B770C25914C91A6148E2EA15ED0EF37ADCB042A47252DBA135972BF74 ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
23:05:15.0731 0x126c  SessionEnv - ok
23:05:15.0739 0x126c  [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
23:05:15.0747 0x126c  sfloppy - ok
23:05:15.0759 0x126c  [ F4414F57DF2CECB8FC969AA43A6B0D50, AD09A6E1294721507DD6BE82B91F2EEB0FF0151B9BC14A75840CD657DBFDECEC ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
23:05:15.0772 0x126c  SharedAccess - ok
23:05:15.0790 0x126c  [ 0D190D8B4B20446BE6299AC734DFADF1, 6551095971F99820BBFC5FED8FAB9591A3F8ABFA0F027887F3B71B79325FF6D9 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
23:05:15.0808 0x126c  ShellHWDetection - ok
23:05:15.0848 0x126c  [ D6827A98C45299D9857860E519EEB428, 183A8663C974467CE53D6D178798A9816F8D3DDBD06F5E6FFF18A46244A0E03C ] Simraceway Update Service C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe
23:05:15.0883 0x126c  Simraceway Update Service - ok
23:05:15.0890 0x126c  [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
23:05:15.0892 0x126c  SiSRaid2 - ok
23:05:15.0898 0x126c  [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
23:05:15.0905 0x126c  SiSRaid4 - ok
23:05:15.0914 0x126c  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
23:05:15.0919 0x126c  SkypeUpdate - ok
23:05:15.0924 0x126c  [ 587ACA15210D1B01FBF272E07A08F91A, 1F3C13C218C5EA329C6E33E4AE7CFE88DAD59DA40F59FDE09D733AFD2E489000 ] smphost         C:\WINDOWS\System32\smphost.dll
23:05:15.0941 0x126c  smphost - ok
23:05:15.0949 0x126c  [ 49EEB92DE930B8566EF615D600781DB4, 0B7C929D24FAFC34F95BB4AA77DCBA29DDD8F1977EB42713B64228677D1FBFD3 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
23:05:15.0955 0x126c  SNMPTRAP - ok
23:05:15.0969 0x126c  [ 240C5C3793206725AA05665851E8C214, 96ADFB85EB1623EB00C251C1C6A1F441A1795F0EBFD10B17DD1CA58E3AE8A90D ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
23:05:15.0979 0x126c  spaceport - ok
23:05:15.0985 0x126c  [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
23:05:15.0991 0x126c  SpbCx - ok
23:05:16.0023 0x126c  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\WINDOWS\SysWOW64\speedfan.sys
23:05:16.0038 0x126c  speedfan - ok
23:05:16.0060 0x126c  [ 42FEA9E0BA9761D9E65A4F167D91515B, 9A34CE83F3ACD50608671BDABE5E475F8E0C8335D3B8B7B3D7E84B2A319FA29F ] Spooler         C:\WINDOWS\System32\spoolsv.exe
23:05:16.0085 0x126c  Spooler - ok
23:05:16.0224 0x126c  [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
23:05:16.0355 0x126c  sppsvc - ok
23:05:16.0375 0x126c  [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
23:05:16.0394 0x126c  srv - ok
23:05:16.0412 0x126c  [ 5BED3AB69797C8786EF70AEA8C33748B, 0474EE6C43D437CBA9848BCF25D1341B122D7E9F371A0FF3C62C83D14B2CB095 ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
23:05:16.0427 0x126c  srv2 - ok
23:05:16.0437 0x126c  [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
23:05:16.0446 0x126c  srvnet - ok
23:05:16.0455 0x126c  [ BB9ED3EDD8E85008215A7250D325A72E, D3404E31B7706B25CDEA7CB4260C343B5F090E8CCB9A5FA203B0F94A9112F1B3 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
23:05:16.0475 0x126c  SSDPSRV - ok
23:05:16.0482 0x126c  [ 3911418AFDE10EA6823B7799E4815524, A73517C4C1271E666B2B3A747756070098E923742B41572AA16573170440AA07 ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
23:05:16.0495 0x126c  SstpSvc - ok
23:05:16.0503 0x126c  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
23:05:16.0509 0x126c  ssudmdm - ok
23:05:16.0524 0x126c  [ 9E1380328C39D661E085B24D6A6E044E, 7D8B57DD70DE420E412890FA57F6D15DF872AE27F7320DC567421E8161FB65B9 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
23:05:16.0541 0x126c  Steam Client Service - ok
23:05:16.0555 0x126c  [ 49D9C17FDDFAC66F27FA735E94923216, 18C8FE5B794927989CDD3BB7A5500C73CCC23559470EEB37D42FD9AD04098C0D ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
23:05:16.0569 0x126c  Stereo Service - ok
23:05:16.0574 0x126c  [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
23:05:16.0576 0x126c  stexstor - ok
23:05:16.0593 0x126c  [ D638904FE86A5FE542A1BA13A9D68E5C, 89A956F932316BC50DD99B54BAF4E2809DCAA084DBB04CB84D11E5470BEAF251 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
23:05:16.0615 0x126c  stisvc - ok
23:05:16.0622 0x126c  [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
23:05:16.0629 0x126c  storahci - ok
23:05:16.0634 0x126c  [ 7A08CEE1535F5A448215634C5EA74E50, 41529CDC08A3956F8FE9D5759B147E2E56E3305149EA415EB200249F7CD32094 ] storflt         C:\WINDOWS\system32\DRIVERS\vmstorfl.sys
23:05:16.0636 0x126c  storflt - ok
23:05:16.0642 0x126c  [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
23:05:16.0648 0x126c  stornvme - ok
23:05:16.0653 0x126c  [ 3118058E3D07021A55324A943C6D722B, 0B255DF1977DADD2B9766EEEA814B464F0ABFA34D6439F3C453083850C121F16 ] StorSvc         C:\WINDOWS\system32\storsvc.dll
23:05:16.0663 0x126c  StorSvc - ok
23:05:16.0668 0x126c  [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
23:05:16.0670 0x126c  storvsc - ok
23:05:16.0676 0x126c  [ 03618F935379614837F915D04C45FC0E, 9CC0CBA7AFC58E7F921C13FA3F5269714F1F827535A311E11EA48689C4D539DE ] storvsp         C:\WINDOWS\System32\drivers\storvsp.sys
23:05:16.0683 0x126c  storvsp - ok
23:05:16.0687 0x126c  [ D8E1AE075AB3E8AD56F69C44AA978596, CAFF5116DE7F0EEFFEBE38724BCEE7D11B44153AD35EE43E314C56D5E210758A ] svsvc           C:\WINDOWS\system32\svsvc.dll
23:05:16.0695 0x126c  svsvc - ok
23:05:16.0699 0x126c  [ 84E0F5D41C138C5CC975137A2A98F6D3, 1E36CED05E4F4365C2AB020CAF920E3959995D7F89F3FABD7B2FB05985F85F38 ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
23:05:16.0701 0x126c  swenum - ok
23:05:16.0720 0x126c  [ 850EBB87584484DC16F917E7B6F4A304, C253D1DFFCDFB018432063602FB01DBCBDDD6E03458E5C366AABD4670F114B0C ] swprv           C:\WINDOWS\System32\swprv.dll
23:05:16.0741 0x126c  swprv - ok
23:05:16.0773 0x126c  [ 3DA26652B12E9AB43FD04976AC6DFD33, DEFE220D86197949E97342FE3487CD6A07DD2FFAF6D17A7C65419C2C1B9D1AB5 ] SysMain         C:\WINDOWS\system32\sysmain.dll
23:05:16.0810 0x126c  SysMain - ok
23:05:16.0821 0x126c  [ FD4EA8E9232ADD51DC31C295DDEF2768, 3EA40D7376AB5AA5DA2BCF4745C79F7BF819363466967ECC3CD15ADECBFD7244 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
23:05:16.0831 0x126c  SystemEventsBroker - ok
23:05:16.0838 0x126c  [ BA6DD39266A5E15515C8C14DA2DA3E5C, 5BC917BA4E7281A67CC6CEF2F4D1972DF04DECBEFB6DED0B08FFBD06E15D4B4F ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
23:05:16.0851 0x126c  TabletInputService - ok
23:05:16.0856 0x126c  [ F0B9D3ED88E56D3CD713DFF21E42AAF0, D914422032A6EC6B161F20CD040B631F8AF18D4B942F6CBE7E32069EBF551B6A ] tap0901         C:\WINDOWS\system32\DRIVERS\tap0901.sys
23:05:16.0858 0x126c  tap0901 - ok
23:05:16.0868 0x126c  [ B517410F157693043DACA21B19B258A6, 2224EECEB575CEA811036C43BB5B0A408DE5F59BC97235AB948968E4C3E438F2 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
23:05:16.0886 0x126c  TapiSrv - ok
23:05:16.0944 0x126c  [ CCB3A2BB60FE5073F2DEA63FE83CF8FE, 02982136236DD595D8974E6645A008D663B4DD3BC3824721E4DE4377B97887C7 ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
23:05:17.0002 0x126c  Tcpip - ok
23:05:17.0064 0x126c  [ CCB3A2BB60FE5073F2DEA63FE83CF8FE, 02982136236DD595D8974E6645A008D663B4DD3BC3824721E4DE4377B97887C7 ] TCPIP6          C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:05:17.0106 0x126c  TCPIP6 - ok
23:05:17.0117 0x126c  [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
23:05:17.0123 0x126c  tcpipreg - ok
23:05:17.0130 0x126c  [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
23:05:17.0134 0x126c  tdx - ok
23:05:17.0139 0x126c  [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
23:05:17.0141 0x126c  terminpt - ok
23:05:17.0167 0x126c  [ 3D748E5558FD9A9F03182CB2330698DC, 70B2069AB7912EB49AB3ABD18D4B42CB94AC99CA6DE3F63F4888B8EAAC78AAA2 ] TermService     C:\WINDOWS\System32\termsrv.dll
23:05:17.0193 0x126c  TermService - ok
23:05:17.0199 0x126c  [ 05FBE1F7C13E87AF7A414CDF288B1F62, 24079E1A6B2E33A1A8E76A77F73473B93DD6B379E44C982CE50D6CEED9747838 ] Themes          C:\WINDOWS\system32\themeservice.dll
23:05:17.0205 0x126c  Themes - ok
23:05:17.0210 0x126c  [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] THREADORDER     C:\WINDOWS\system32\mmcss.dll
23:05:17.0217 0x126c  THREADORDER - ok
23:05:17.0226 0x126c  [ 347A3E49CE18402305B8119A6EC7CFEB, 6768B20EE577880B0353FE84B980D4A18D323929A63FAE41F7A55123BBFC8DBA ] TimeBroker      C:\WINDOWS\System32\TimeBrokerServer.dll
23:05:17.0236 0x126c  TimeBroker - ok
23:05:17.0246 0x126c  [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM             C:\WINDOWS\system32\drivers\tpm.sys
23:05:17.0254 0x126c  TPM - ok
23:05:17.0261 0x126c  [ C97E14BB6A196B0554D6EB67D8818175, C00588C94988F10507F84584DFA4C0A43B8648AD1AD35E9BAE14CDD21FCF7B90 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
23:05:17.0268 0x126c  TrkWks - ok
23:05:17.0274 0x126c  [ 887CC44830D3F367CAD17A0CA7CCA5C8, D4022A76433A11FD66D0F41A1EB4D6893BC5B22317E7E9E021739109EB493B44 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
23:05:17.0279 0x126c  TrustedInstaller - ok
23:05:17.0286 0x126c  [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
23:05:17.0288 0x126c  TsUsbFlt - ok
23:05:17.0293 0x126c  [ E0088068DCE2EE82897027DDB8E05254, FA9C201D3C885DAD2ABE6A23343EDCC83CFB342EFF9E3005FA50B1D88B21D203 ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
23:05:17.0295 0x126c  TsUsbGD - ok
23:05:17.0302 0x126c  [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel          C:\WINDOWS\system32\DRIVERS\tunnel.sys
23:05:17.0314 0x126c  tunnel - ok
23:05:17.0320 0x126c  [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35          C:\WINDOWS\system32\drivers\uagp35.sys
23:05:17.0323 0x126c  uagp35 - ok
23:05:17.0329 0x126c  [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
23:05:17.0332 0x126c  UASPStor - ok
23:05:17.0341 0x126c  [ B034A41891A36457B994307DFA772293, CA5E6500764A9777AE0E15B2AFB6F05982C90F01374E3F6DDC6DF3852282C66B ] UCX01000        C:\WINDOWS\System32\drivers\ucx01000.sys
23:05:17.0350 0x126c  UCX01000 - ok
23:05:17.0361 0x126c  [ 1EC649F112896FAE33250F0B97AC5D0B, 0C0A1C2C7615DEB298AD3073340FD1BF91FEBE611F133E3B48D994A6EAA8369F ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
23:05:17.0374 0x126c  udfs - ok
23:05:17.0381 0x126c  [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
23:05:17.0383 0x126c  UEFI - ok
23:05:17.0391 0x126c  [ 320878AFECDBBD61BBE98624A6CAAC08, 15C090EA32A24D976B5FCB1373B1281DCC2295C075299C814345D694AEB47CB9 ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
23:05:17.0408 0x126c  UI0Detect - ok
23:05:17.0413 0x126c  [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx        C:\WINDOWS\system32\drivers\uliagpkx.sys
23:05:17.0416 0x126c  uliagpkx - ok
23:05:17.0421 0x126c  [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
23:05:17.0423 0x126c  umbus - ok
23:05:17.0428 0x126c  [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
23:05:17.0434 0x126c  UmPass - ok
23:05:17.0444 0x126c  [ E3DDF7D43E05784FAA5E042605EEE528, 8E20E880FAB09AF4FF5C438BF9EAE9970D46C05167870110869B744E498FD761 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
23:05:17.0455 0x126c  UmRdpService - ok
23:05:17.0469 0x126c  [ 4A2FFDAC45F317E17DF642C7160EB633, F1AB762912FAA5F469F322407DA37C91556086C42D1643AD27516C12A84F74D0 ] upnphost        C:\WINDOWS\System32\upnphost.dll
23:05:17.0484 0x126c  upnphost - ok
23:05:17.0495 0x126c  [ DF355EB0199198728027962DCFCDE5FB, 9E158BD07389B4CFF99674716647FA3AABEECBD1A98EDF20E544E099A99A8768 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
23:05:17.0502 0x126c  usbaudio - ok
23:05:17.0509 0x126c  [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
23:05:17.0513 0x126c  usbccgp - ok
23:05:17.0520 0x126c  [ B3D6457D841A0CAEF4C52D88621715F2, CBDD76A8A28379B107B1FB530757B477B8AB74CD01F9F3CEDC7B1BA0C6E5A990 ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
23:05:17.0528 0x126c  usbcir - ok
23:05:17.0534 0x126c  [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
23:05:17.0537 0x126c  usbehci - ok
23:05:17.0550 0x126c  [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
23:05:17.0589 0x126c  usbhub - ok
23:05:17.0605 0x126c  [ 65392F3F3F65E4C6CC82A0F4F8A0B051, C11B662A28D95820717DFFC6B76DBB755E4876009A2342E5E3992DE32D6BFF61 ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
23:05:17.0616 0x126c  USBHUB3 - ok
23:05:17.0627 0x126c  [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
23:05:17.0632 0x126c  usbohci - ok
23:05:17.0637 0x126c  [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
23:05:17.0639 0x126c  usbprint - ok
23:05:17.0644 0x126c  [ F04D164C4168701A4E7835607722E5F1, 6F743CF2CF73945B4A4B1C4402744BC2FE1624F1346C194493AD2F7110F9EB35 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:05:17.0650 0x126c  usbscan - ok
23:05:17.0658 0x126c  [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
23:05:17.0663 0x126c  USBSTOR - ok
23:05:17.0668 0x126c  [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
23:05:17.0671 0x126c  usbuhci - ok
23:05:17.0681 0x126c  [ 18F744E8CCEB2670040EBAF7AD77B8C6, C5E2DF4EA0D946B4DA67DE29FA9D0F079DED35EC59B98E532C4C2D5F8E86DA0A ] usbvideo        C:\WINDOWS\System32\Drivers\usbvideo.sys
23:05:17.0691 0x126c  usbvideo - ok
23:05:17.0703 0x126c  [ 48430B0313FC1CFE3D2400553F1A93CD, 92994DE6B131E904AFF2C9C4FBB4E6B0D58525A1539763327373DA18C9F08193 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
23:05:17.0716 0x126c  USBXHCI - ok
23:05:17.0723 0x126c  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
23:05:17.0727 0x126c  VaultSvc - ok
23:05:17.0732 0x126c  [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
23:05:17.0734 0x126c  vdrvroot - ok
23:05:17.0766 0x126c  [ E3EF58D4123B5AA29C8E19825AF84A5E, FB1046722BC643E955DBC3B1459DBF2A6D575EBA2BCF7B20A0FA51E3993835E2 ] vds             C:\WINDOWS\System32\vds.exe
23:05:17.0811 0x126c  vds - ok
23:05:17.0823 0x126c  [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
23:05:17.0828 0x126c  VerifierExt - ok
23:05:17.0847 0x126c  [ 52E483A3701A5A61A75A06993720347D, 689E812755E485DF6960D1E049740FBAFB812467D23B673DCAA40C03FEBB544F ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
23:05:17.0862 0x126c  vhdmp - ok
23:05:17.0869 0x126c  [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide          C:\WINDOWS\system32\drivers\viaide.sys
23:05:17.0876 0x126c  viaide - ok
23:05:17.0884 0x126c  [ 3CE922E34DB12D9F3C0EA856BC09687C, E50A1885FBC775E49614989ECFEA4ACBBDDA16AF459CC5361EED9E23CC7CD42C ] Vid             C:\WINDOWS\System32\drivers\Vid.sys
23:05:17.0890 0x126c  Vid - ok
23:05:17.0897 0x126c  [ C69A784BEC737CD7460EBF3C3834D65E, 3D4CEC9E677FD6B08BE43DC19B3E422D403137E26A3B72443A513CD4AE5F41A2 ] vidsflt53       C:\WINDOWS\system32\DRIVERS\vsflt53.sys
23:05:17.0919 0x126c  vidsflt53 - ok
23:05:17.0925 0x126c  [ FF7C6E015AA32FC6BE0AEF582B802332, D59A4AC8A0B0F1B036E2A0BAE8F4DF302AAB1D62C7888224536A1622A912A7B0 ] VirtDiskBus     C:\WINDOWS\System32\drivers\VirtDiskBus64.sys
23:05:17.0934 0x126c  VirtDiskBus - ok
23:05:17.0938 0x126c  [ 3B59BB6D10CF969DBE4DB93D9EAD7FB4, 8BD4648AAD460F276C79AF81D1479E781E62D292F3318D39B53703403E57E52F ] VKbms           C:\WINDOWS\system32\DRIVERS\VKbms.sys
23:05:17.0942 0x126c  VKbms - ok
23:05:17.0948 0x126c  [ C6305BDFC4F7CE51F72BB072C03D4ACE, 73E62869CA3104F48CC3B0C45E69CE9BF4F8D7D06E29C2F049B9347ABB50554D ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
23:05:17.0951 0x126c  vmbus - ok
23:05:17.0955 0x126c  [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
23:05:17.0965 0x126c  VMBusHID - ok
23:05:17.0976 0x126c  [ 68F8C26DEA2D42E8DEC0778943433C80, 81E8F9D62815F94952CEEABD0689473CC330F7890F66872DCD35A43C06ED33CD ] vmbusr          C:\WINDOWS\System32\drivers\vmbusr.sys
23:05:17.0981 0x126c  vmbusr - ok
23:05:17.0996 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
23:05:18.0014 0x126c  vmicguestinterface - ok
23:05:18.0028 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicheartbeat   C:\WINDOWS\System32\ICSvc.dll
23:05:18.0043 0x126c  vmicheartbeat - ok
23:05:18.0056 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
23:05:18.0074 0x126c  vmickvpexchange - ok
23:05:18.0088 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicrdv         C:\WINDOWS\System32\ICSvc.dll
23:05:18.0104 0x126c  vmicrdv - ok
23:05:18.0119 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicshutdown    C:\WINDOWS\System32\ICSvc.dll
23:05:18.0136 0x126c  vmicshutdown - ok
23:05:18.0150 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmictimesync    C:\WINDOWS\System32\ICSvc.dll
23:05:18.0167 0x126c  vmictimesync - ok
23:05:18.0181 0x126c  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicvss         C:\WINDOWS\System32\ICSvc.dll
23:05:18.0198 0x126c  vmicvss - ok
23:05:18.0204 0x126c  [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
23:05:18.0212 0x126c  volmgr - ok
23:05:18.0224 0x126c  [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
23:05:18.0233 0x126c  volmgrx - ok
23:05:18.0244 0x126c  [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
23:05:18.0254 0x126c  volsnap - ok
23:05:18.0260 0x126c  [ 01355C98B5C3ED1EC446743CDA848FCE, B9FCF558C20E05DD0F53FFB70BBEF873EA57801E13A16701E636128D625C4B67 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
23:05:18.0263 0x126c  vpci - ok
23:05:18.0268 0x126c  [ ADBE96C33D1A5BB1BBAF90B4BC84F523, 6E9C9ED3D51E4B6E494D42ECA6F824AD86D676C12C39BBE6B8BD96366BCB02DA ] vpcivsp         C:\WINDOWS\System32\drivers\vpcivsp.sys
23:05:18.0281 0x126c  vpcivsp - ok
23:05:18.0290 0x126c  [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
23:05:18.0295 0x126c  vsmraid - ok
23:05:18.0330 0x126c  [ E369C59F2C0852DDD090C07E0DDE0051, 4FAC94458EAAEED4F84A86FBAB8FBB332D0AF85BD528E63C0C058A2DA8E3011D ] VSS             C:\WINDOWS\system32\vssvc.exe
23:05:18.0375 0x126c  VSS - ok
23:05:18.0390 0x126c  [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
23:05:18.0398 0x126c  VSTXRAID - ok
23:05:18.0405 0x126c  [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
23:05:18.0410 0x126c  vwifibus - ok
23:05:18.0423 0x126c  [ 7599E582CA3A6AAA95A18FFE1172D339, A0410778FBBC4302EA91CF24B944427410B4706535F1192504D4F34C3ED4503E ] W32Time         C:\WINDOWS\system32\w32time.dll
23:05:18.0446 0x126c  W32Time - ok
23:05:18.0452 0x126c  [ 8E553C859C83784DEC08B10AFC3EAC92, 41D8DBA1500DBD3AC9783169ACF545805EF05069F12866238992A30794369254 ] w3logsvc        C:\WINDOWS\system32\inetsrv\w3logsvc.dll
23:05:18.0455 0x126c  w3logsvc - ok
23:05:18.0471 0x126c  [ 9BAE40BD31E3EE0B0C70BEF167E0A2BC, 2419AC815C95F2629E1832973501983D06F788728755605D42D6C8565C3CBBF1 ] W3SVC           C:\WINDOWS\system32\inetsrv\iisw3adm.dll
23:05:18.0484 0x126c  W3SVC - ok
23:05:18.0494 0x126c  [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
23:05:18.0504 0x126c  WacomPen - ok
23:05:18.0520 0x126c  [ 9BAE40BD31E3EE0B0C70BEF167E0A2BC, 2419AC815C95F2629E1832973501983D06F788728755605D42D6C8565C3CBBF1 ] WAS             C:\WINDOWS\system32\inetsrv\iisw3adm.dll
23:05:18.0533 0x126c  WAS - ok
23:05:18.0571 0x126c  [ 61692DB39AD3DF2F29392D68EAA7BB93, 854D4B9C7DD1676968598ED973500650ECEC02C420E44C0B3957C24F073AA5FB ] wbengine        C:\WINDOWS\system32\wbengine.exe
23:05:18.0607 0x126c  wbengine - ok
23:05:18.0623 0x126c  [ 3BC1D1D56637A32CD91C8AE08E2484AA, 9EE1BD3FB0D289E25F3DDD0D8F67DC1C701A6B1D5418FADF348D0E642B1DEBEB ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
23:05:18.0641 0x126c  WbioSrvc - ok
23:05:18.0656 0x126c  [ A07CFC4B593D15B6BF06813C3B5B33BF, B57BD918E2AFF9943B51A24B95E0C4D3482B4DF73C0E2421E8CC67C2BC7A4C70 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
23:05:18.0670 0x126c  Wcmsvc - ok
23:05:18.0684 0x126c  [ D2726823DF7E19F213F4805A9D6D145F, A7F582C99918D204264D3B374F70D75984BDA5805203041E3DECB8153D16E102 ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
23:05:18.0703 0x126c  wcncsvc - ok
23:05:18.0709 0x126c  [ 846C02A8B48CBD921A3D6AB521AA0DC4, B07573A774A6C65D24E5718DC25DF378270EB5B40221CA5A53B21D47838381D3 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
23:05:18.0724 0x126c  WcsPlugInService - ok
23:05:18.0728 0x126c  [ 0359607177E5E9F6041136CC0A5CB0B6, 16687BE2639648CF46E8768BA1798030472C525612C629BF134D053240E2195B ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
23:05:18.0731 0x126c  WdBoot - ok
23:05:18.0752 0x126c  [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
23:05:18.0775 0x126c  Wdf01000 - ok
23:05:18.0787 0x126c  [ DE8D12B4C3F55FA2C5E9774314F6C58A, C3E835DC066A94E1431BCDC90D7EA27AAC6F82826F4A5527B37D865241D7A366 ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
23:05:18.0794 0x126c  WdFilter - ok
23:05:18.0800 0x126c  [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
23:05:18.0818 0x126c  WdiServiceHost - ok
23:05:18.0823 0x126c  [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
23:05:18.0829 0x126c  WdiSystemHost - ok
23:05:18.0835 0x126c  [ 4AD874CDC812EC156265E451B6B09DAB, 6E3E05B8301841425E9BB0D54B35EF386B78EEB307B5A6153FD1F366D30F23FA ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
23:05:18.0844 0x126c  WdNisDrv - ok
23:05:18.0846 0x126c  WdNisSvc - ok
23:05:18.0856 0x126c  [ 91B18D7A1702ED589E67C6C81052B955, 5D1DA8B86106A28E50BBCCB36527CC130D41201F5BE1D3DC5F1D6F7ECCF807BA ] WebClient       C:\WINDOWS\System32\webclnt.dll
23:05:18.0865 0x126c  WebClient - ok
23:05:18.0874 0x126c  [ 3274312F263882B51B964329FAF49734, 99A020377ACF0762BE5ECD2D68EB5E1497B9D59963247E725F7F96FB5DF41FAD ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
23:05:18.0887 0x126c  Wecsvc - ok
23:05:18.0891 0x126c  [ 7CDD84E0023A0C5C230B06A7965EC65E, 6EC7DC18C76D66CF9A893C3DD20F9BE3ADD76546F9A9BA42CE4F24854709F9D9 ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
23:05:18.0902 0x126c  WEPHOSTSVC - ok
23:05:18.0907 0x126c  [ 959534ACF085C137D2D094384EF89C45, D029F440789FE170A1C46217C6DE6D78DC0188A5CF33FCCC17FA65D3BC80C2B7 ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
23:05:18.0917 0x126c  wercplsupport - ok
23:05:18.0923 0x126c  [ 82BCCF5FBE47AC9E8CBA2020994DFB3F, EA96C6BD98A701B465D0780EC10BDA92E45FE636D60C1385813AA3B456D8B931 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
23:05:18.0934 0x126c  WerSvc - ok
23:05:18.0941 0x126c  [ BFBE1C5F57FE7A885673A1962D5532B7, F0BD05B257108699FE6AB32EF11F927C31932F27062A705B3FEFA4F5B4C0D8C3 ] WFPLWFS         C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
23:05:18.0946 0x126c  WFPLWFS - ok
23:05:18.0951 0x126c  [ E06AFE2F94BA7CFA2FE4FD2A449E60E2, 99A81E16366E9E77905D873B0246E4C11B383FE1E99E0E1D9A07FAD4E52EA9E4 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
23:05:18.0961 0x126c  WiaRpc - ok
23:05:18.0965 0x126c  [ 867BCC69ED9C31C501465EB0E8BA9DFA, 678B7FF4D4E8624514301956CDA7FB451159BBFC83FF2E4E5E7DADAE3C7AB2EC ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
23:05:18.0972 0x126c  WIMMount - ok
23:05:18.0974 0x126c  WinDefend - ok
23:05:18.0998 0x126c  [ DD079EC8F44DCA3A176B345C6ADEFB66, 6CD9371B83EA23D2181891FAE1DB285BC111A78C35F374E57666ED09860C91A9 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
23:05:19.0023 0x126c  WinHttpAutoProxySvc - ok
23:05:19.0035 0x126c  [ 9DB490F3E823C5C3C070644B96CB9D59, 81937D0B331E43C7C61514E60B3AD51370C5201F7B4D12F8534840D91EDC32DD ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
23:05:19.0052 0x126c  Winmgmt - ok
23:05:19.0109 0x126c  [ 9CE162EB9057CF079736F4DD00FC0D6C, 412C34557866D2A3B3CDAFA5A03B87C01AACF75E349802E511098B20137028D9 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
23:05:19.0177 0x126c  WinRM - ok
23:05:19.0191 0x126c  [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb          C:\WINDOWS\system32\DRIVERS\WinUsb.sys
23:05:19.0242 0x126c  WinUsb - ok
23:05:19.0282 0x126c  [ 3F5EF31C6AA204B099EE76497DF80A26, CBE648A4E7E1D98A3D8C72582C1CB3C2FD2329EAA24EE4DCAD271AAA6F4D82CE ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
23:05:19.0320 0x126c  WlanSvc - ok
23:05:19.0328 0x126c  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:05:19.0384 0x126c  wlcrasvc - ok
23:05:19.0421 0x126c  [ 5F56C0DE776C7AE43AF749845BFAA1EF, 837993C5853B7E682C7FB8401B7F5D951FFD15E5659EBB1B01DC3F5719ACEE19 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
23:05:19.0465 0x126c  wlidsvc - ok
23:05:19.0474 0x126c  [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
23:05:19.0477 0x126c  WmiAcpi - ok
23:05:19.0486 0x126c  [ 7AFAC828F52D62F304A911EC32F42EEE, 4EDCF4149069413A166169F2E23F7505F47B39B7EC319E1EF6D2C46CD140AA24 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
23:05:19.0494 0x126c  wmiApSrv - ok
23:05:19.0497 0x126c  WMPNetworkSvc - ok
23:05:19.0505 0x126c  [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
23:05:19.0510 0x126c  Wof - ok
23:05:19.0550 0x126c  [ 61BF52E9FFAB27A0B6D621BE26088373, 81291D52C381360E69D51E7DEB05CFAC651A7E9EF781CA23062C0583D0C94708 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
23:05:19.0598 0x126c  workfolderssvc - ok
23:05:19.0605 0x126c  [ 182561A14F2E93E81E66FE3700D17A5A, FB9A06058A8BCCEDCDC5BF8899D9B2FBA5752C262C5FC6D2B8338884F3303D12 ] wpcfltr         C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
23:05:19.0608 0x126c  wpcfltr - ok
23:05:19.0612 0x126c  [ 4E6A0F60DA7EF050D3D26417CD4D24E9, E6B3BFB007B641D41F8532ED086F92CB3D86E210023DBFAA9AD8152A9FD33CCA ] WPCSvc          C:\WINDOWS\System32\wpcsvc.dll
23:05:19.0629 0x126c  WPCSvc - ok
23:05:19.0635 0x126c  [ 618A19EB31ECA7B7F2AA0207BAF598A5, CB18CF9B781EAB3D775F8201F294A7135E058D6C963D2CC759DCA14D95EED538 ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
23:05:19.0642 0x126c  WPDBusEnum - ok
23:05:19.0646 0x126c  [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
23:05:19.0657 0x126c  WpdUpFltr - ok
23:05:19.0661 0x126c  [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
23:05:19.0663 0x126c  ws2ifsl - ok
23:05:19.0670 0x126c  [ 9654DE19551093CD73874281E1573C94, 5E3513EC0CB180D90904BE8970AB64A4434279E8C467AE2CF693254E47B1D11E ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
23:05:19.0683 0x126c  wscsvc - ok
23:05:19.0686 0x126c  WSearch - ok
23:05:19.0764 0x126c  [ 95B6670E6933E1DEE19686C55BE709A0, 4B9EB8F1712B7959A71F6DA445D29BD09B25EEFC6B30D736EFE30163D79B233E ] WSService       C:\WINDOWS\System32\WSService.dll
23:05:19.0845 0x126c  WSService - ok
23:05:19.0931 0x126c  [ DCD090318EC800CF6275C6835900B0C6, 9E72762EEE46CC0606B909850E6D22E9C8E5C88E82F7C974B2B7C1E5160BEBA7 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
23:05:20.0014 0x126c  wuauserv - ok
23:05:20.0027 0x126c  [ D537815E450A149752C15868392AD1F3, 8788CE493349299DB36E409C8CC3C6EA08301FA492C95D9D556E00BC13A05F13 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
23:05:20.0034 0x126c  WudfPf - ok
23:05:20.0043 0x126c  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
23:05:20.0050 0x126c  WUDFRd - ok
23:05:20.0060 0x126c  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFSensorLP    C:\WINDOWS\System32\drivers\WUDFRd.sys
23:05:20.0067 0x126c  WUDFSensorLP - ok
23:05:20.0072 0x126c  [ 9CDC2059A23E3C9B57696178508777E7, B680A2E2EDA5C8C6A547E7D9B2F2F8E6407C3EA0A01B82A4B88D48A27913A597 ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
23:05:20.0080 0x126c  wudfsvc - ok
23:05:20.0088 0x126c  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
23:05:20.0098 0x126c  WUDFWpdFs - ok
23:05:20.0105 0x126c  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
23:05:20.0110 0x126c  WUDFWpdMtp - ok
23:05:20.0125 0x126c  [ 2FA9794CA36147756F3FDFD6CA29B46F, 4B86DC38C2411C281686E9A4E64DA6FB2992E39391371F78E012D6D8BB85123F ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
23:05:20.0143 0x126c  WwanSvc - ok
23:05:20.0150 0x126c  [ A0F661902AFCAAD77CC2ED3894927A10, 0DCD860F7F4029EBFE1F409BA23CC8BAA55BC22084C81940FF170B665E4804BD ] xusb22          C:\WINDOWS\System32\drivers\xusb22.sys
23:05:20.0159 0x126c  xusb22 - ok
23:05:20.0164 0x126c  ================ Scan global ===============================
23:05:20.0169 0x126c  [ C89780A6F58D113C28A96D85D1261DC5, 185114F33A60916C7904E4A0F278CA43258454343E614F01F0DAFA98BAC981B1 ] C:\WINDOWS\system32\basesrv.dll
23:05:20.0179 0x126c  [ 00DD4D2ACC2E72155A8AAA82018BEC0D, 9D7CA68B4A81240477FCC85A3CC11EF986093F9D6228A6C5AC608EDAD664068C ] C:\WINDOWS\system32\winsrv.dll
23:05:20.0199 0x126c  [ 9C1833ABD62876856836C5AE55C7CE86, 0A21E2C8B2FF3B0438C86DA7151A548F9C6F5C62CD402CBBEDB435994C8508F1 ] C:\WINDOWS\system32\sxssrv.dll
23:05:20.0215 0x126c  [ 067CB90C277DB4A737D5DEABA3055972, C681BF013170F2D92A3FC4D783FC3F200CDC0C8173373B7ECC27FCF32A03CCBD ] C:\WINDOWS\system32\services.exe
23:05:20.0232 0x126c  [ Global ] - ok
23:05:20.0233 0x126c  ================ Scan MBR ==================================
23:05:20.0235 0x126c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:05:20.0357 0x126c  \Device\Harddisk0\DR0 - ok
23:05:20.0397 0x126c  [ 5F8B5082F3482CC06B72EC5806598AE9 ] \Device\Harddisk1\DR1
23:05:20.0793 0x126c  \Device\Harddisk1\DR1 - ok
23:05:20.0794 0x126c  ================ Scan VBR ==================================
23:05:20.0796 0x126c  [ 66F8C4E1296D4EFF9ECECC431665A810 ] \Device\Harddisk0\DR0\Partition1
23:05:20.0798 0x126c  \Device\Harddisk0\DR0\Partition1 - ok
23:05:20.0800 0x126c  [ B98A16C65E400690017AE166C007A46A ] \Device\Harddisk0\DR0\Partition2
23:05:20.0801 0x126c  \Device\Harddisk0\DR0\Partition2 - ok
23:05:20.0839 0x126c  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1
23:05:20.0868 0x126c  \Device\Harddisk1\DR1\Partition1 - ok
23:05:20.0893 0x126c  [ 2E080336112E0715E40AF42E90ED0D6B ] \Device\Harddisk1\DR1\Partition2
23:05:21.0099 0x126c  \Device\Harddisk1\DR1\Partition2 - ok
23:05:21.0099 0x126c  ================ Scan generic autorun ======================
23:05:21.0149 0x126c  [ B28AD85B8C199CB573621FCE54D7E19C, 42FFD67529592C5F349936C175E0C40E4E116E20B041042AB1E05FF164AEDD17 ] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
23:05:21.0189 0x126c  CanonMyPrinter - ok
23:05:21.0210 0x126c  [ FEDB6110D3E0A7EFE6996F93CD8C48E7, 719F6B648AE9841B03C8FB9FC9D0CB1233FDD3030FBD3C420C3E8CEB59A12214 ] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe
23:05:21.0228 0x126c  CanonSolutionMenu - ok
23:05:21.0249 0x126c  [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
23:05:21.0269 0x126c  XboxStat - ok
23:05:21.0295 0x126c  [ 1E7FF436A5395FE57AB5FC662FC3767F, 3C2A961BD05DB1C3398753644E1E8C483BE2E3FC2758312D628E05FF17E97E8C ] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
23:05:21.0357 0x126c  Nvtmru - ok
23:05:21.0363 0x126c  [ 6E0BDFBEEED65B017F2E4C2C910B0520, 54D798C2E2804DCDB84E9650EA4A032C669B10C586B396D5505F16235D83882C ] C:\WINDOWS\system32\rundll32.exe
23:05:21.0379 0x126c  ShadowPlay - ok
23:05:21.0431 0x126c  [ B644A9A9A8ADDEC20E7956373130AC2D, 890F75F912BE29A62B4AF35680E12CA8F13800025EDCF8B1D9DF7662BBF28DBA ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
23:05:21.0482 0x126c  NvBackend - ok
23:05:21.0511 0x126c  [ 03C217B77BCA3F50A8B8A300C2E5BC4A, 32E36F9AF661E4CC5B6CD299F8915FEA67BFBFE60F5E54F7E8C8C63EE06D9546 ] C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
23:05:21.0516 0x126c  BtTray - ok
23:05:21.0518 0x126c  MChk - ok
23:05:21.0519 0x126c  NBKeyScan - ok
23:05:21.0538 0x126c  [ A1DB5F62A7C7457C1C1B191ADEC7F52A, 3902B3A36E6B041481C15F1E5A31F8FE47CA707AA91AB982625919FF45E86B29 ] C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe
23:05:21.0554 0x126c  Razer Lachesis Driver - ok
23:05:21.0565 0x126c  [ DD707F2B859929C7429070DF88971E40, 976DA1810640D91073DFD915C844E23C32C92A86C8DEEF20E66144DA65FEEFF8 ] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
23:05:21.0572 0x126c  KiesTrayAgent - ok
23:05:21.0623 0x126c  [ B53B22F4BEDDF8D7AAC5DFC50097BC9B, 0C5DAD3845C4430FAAC8AB6665C26A9DBD4ADD602F8ACC848D69CB6B840E0F5B ] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
23:05:21.0671 0x126c  BingDesktop - ok
23:05:21.0680 0x126c  [ B899B4608BB72DB2FCC11D350A36D2C6, 7804CA2F8C72936B47D2490A5D36DA45C706ABD2FF247ED7ABC6544EE1BDF09D ] C:\Program Files (x86)\PDF24\pdf24.exe
23:05:21.0687 0x126c  PDFPrint - ok
23:05:21.0711 0x126c  [ 3E04F1E482357B1FC8B088197C3D9FF8, 85524ADDC27ADC831EBBD24E079B412CFDC69E5F594BD153319087665A28D546 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
23:05:21.0734 0x126c  Adobe ARM - ok
23:05:21.0762 0x126c  [ 17255084067EA8E696DCFD1C1EA2A744, E83EF0CE3AB0DDF2B5A78E3BDECB39726DD403E36D16CC9F6251EC630EE8ED1F ] C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
23:05:21.0787 0x126c  Hobbyist Software VLC Streamer - ok
23:05:21.0839 0x126c  [ C06F76EC21B1CD5D8EB8A95243371A67, 7F10DA2C66484E1C4E3E0CAD5CCC2B961E004909BC14F11E2FABB0E3826E8BF9 ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
23:05:21.0889 0x126c  LightScribe Control Panel - ok
23:05:21.0934 0x126c  [ 08DFA176E4FC0E63ACD8EC854449D2B0, B8CA204C3F318CD9D12F61CDDA5C66184A48D6206F019AD11DB2605FDBEB288D ] C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
23:05:21.0970 0x126c  Spotify Web Helper - ok
23:05:21.0974 0x126c  [ 6D9E1356A9C1B5F36698FAFF9205E34A, A7E37C2C0F1F35F5434144D5F1D282858D6B3CE995BE6612BA22FB7E83793F77 ] C:\Program Files (x86)\Xvid\CheckUpdate.exe
23:05:21.0976 0x126c  Xvid - ok
23:05:22.0010 0x126c  [ 65B8106CB122142FD0A4A26783D7963F, DB29815362D4A4BBB10BF2CFCB9E60602612349FD63BA995500C2C35D1AED987 ] C:\Program Files (x86)\Samsung\Kies\Kies.exe
23:05:22.0040 0x126c  KiesPreload - ok
23:05:22.0057 0x126c  [ 36318C725C216E1D810C546163F859C0, 974947B8ED590E6B4D734772B22004C60327DB15D6D413FD704F18C8E3216CF2 ] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
23:05:22.0073 0x126c  KiesAirMessage - ok
23:05:22.0088 0x126c  [ 2A65AE735E0C439762072787AD61FA07, 19E4A96924BBD51F45DD5D34D18B16D614779F508B3DF5895DF2218043BEF0E0 ] C:\Program Files (x86)\Windows Mail\wab.exe
23:05:22.0103 0x126c  WAB Migrate - ok
23:05:22.0104 0x126c  Waiting for KSN requests completion. In queue: 68
23:05:23.0105 0x126c  Waiting for KSN requests completion. In queue: 68
23:05:24.0106 0x126c  Waiting for KSN requests completion. In queue: 68
23:05:25.0911 0x126c  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.6.305.0 ), 0x61100 ( enabled : updated )
23:05:26.0003 0x126c  Win FW state via NFP2: enabled
23:05:28.0395 0x126c  ============================================================
23:05:28.0395 0x126c  Scan finished
23:05:28.0395 0x126c  ============================================================
23:05:28.0407 0x1188  Detected object count: 0
23:05:28.0407 0x1188  Actual detected object count: 0
23:07:19.0154 0x09fc  Deinitialize success
         

mbar

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.03.03.06
  rootkit: v2015.02.25.01

Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.17631
Ben :: BEN-DESKTOP [administrator]

03.03.2015 23:10:16
mbar-log-2015-03-03 (23-10-16).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 436626
Time elapsed: 25 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 21
HKLM\SOFTWARE\CLASSES\APPID\{38061EDC-40BB-4618-A8DA-E56353347E6D} (Adware.EZlife) -> Delete on reboot. [7ba7122f18722214cc07c271798a06fa]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{38061EDC-40BB-4618-A8DA-E56353347E6D} (Adware.EZlife) -> Delete on reboot. [7ba7122f18722214cc07c271798a06fa]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{38061EDC-40BB-4618-A8DA-E56353347E6D} (Adware.EZlife) -> Delete on reboot. [7ba7122f18722214cc07c271798a06fa]
HKLM\SOFTWARE\CLASSES\APPID\{7B6A2552-E65B-4a9e-ADD4-C45577FFD8FD} (Adware.EZLife) -> Delete on reboot. [3be7271a7b0f1b1bf3e183b009fa0ff1]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{7B6A2552-E65B-4A9E-ADD4-C45577FFD8FD} (Adware.EZLife) -> Delete on reboot. [3be7271a7b0f1b1bf3e183b009fa0ff1]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{7B6A2552-E65B-4A9E-ADD4-C45577FFD8FD} (Adware.EZLife) -> Delete on reboot. [3be7271a7b0f1b1bf3e183b009fa0ff1]
HKLM\SOFTWARE\CLASSES\APPID\{84C3C236-F588-4c93-84F4-147B2ABBE67B} (Adware.Adrotator) -> Delete on reboot. [b66c073ab2d8ac8aa509062c8e75df21]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{84C3C236-F588-4C93-84F4-147B2ABBE67B} (Adware.Adrotator) -> Delete on reboot. [b66c073ab2d8ac8aa509062c8e75df21]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{84C3C236-F588-4C93-84F4-147B2ABBE67B} (Adware.Adrotator) -> Delete on reboot. [b66c073ab2d8ac8aa509062c8e75df21]
HKLM\SOFTWARE\CLASSES\CscrptXt.CscrptXt (Adware.EZlife) -> Delete on reboot. [8e94f64b4a40fb3be5f11221ba496b95]
HKLM\SOFTWARE\CLASSES\CscrptXt.CscrptXt.1.0 (Adware.EZlife) -> Delete on reboot. [998972cfa1e95adccf074de625de9f61]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\CscrptXt.CscrptXt (Adware.EZlife) -> Delete on reboot. [998972cfa1e95adccf074de625de9f61]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\CscrptXt.CscrptXt.1.0 (Adware.EZlife) -> Delete on reboot. [998972cfa1e95adccf074de625de9f61]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\CscrptXt.CscrptXt (Adware.EZlife) -> Delete on reboot. [998972cfa1e95adccf074de625de9f61]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\CscrptXt.CscrptXt.1.0 (Adware.EZlife) -> Delete on reboot. [998972cfa1e95adccf074de625de9f61]
HKLM\SOFTWARE\CLASSES\adShotHlpr.adShotHlpr (Adware.Adrotator) -> Delete on reboot. [3ce658e9bad0112548462f27ad579967]
HKLM\SOFTWARE\CLASSES\adShotHlpr.adShotHlpr.1.0 (Adware.Adrotator) -> Delete on reboot. [a57d51f01674a294f49adf7723e1da26]
HKLM\SOFTWARE\WOW6432NODE\Sky-Banners (Adware.Adrotator) -> Delete on reboot. [74ae77ca3e4c8bab025dc4bcc44033cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\adShotHlpr.adShotHlpr (Adware.Adrotator) -> Delete on reboot. [c0623a07e0aa0630e5a983d30df78a76]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\adShotHlpr.adShotHlpr.1.0 (Adware.Adrotator) -> Delete on reboot. [e93919285634cc6ae3ab4a0c51b3ef11]
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\SOFTWARE\Sky-Banners (Adware.Adrotator) -> Delete on reboot. [7fa349f80e7c989ee56f6304ff05d62a]

Registry Values Detected: 2
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MChk (Trojan.Agent.Gen) -> Data: C:\Windows\system32\r.exe -> Delete on reboot. [64be31104d3d0234e7429cdb25df1be5]
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|msdbd948108.exe (Trojan.Agent.QAZ) -> Data: "C:\Users\Ben\AppData\Roaming\Microsoft\msdbd948108.exe" -> Delete on reboot. [1d0569d8f9917fb795a3702e5da6ff01]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\Program Files (x86)\$NtUninstallWTF1012$ (Adware.EZLife) -> Delete on reboot. [929060e15c2e61d5b0c771e5748f956b]

Files Detected: 4
C:\ProgramData\Windows\ccdxmmde.dat (Malware.Trace) -> Delete on reboot. [76ac8fb2890144f2793c6169d62e08f8]
C:\ProgramData\Windows\drss.dat (Malware.Trace) -> Delete on reboot. [1e045ee3a4e69c9a9f17dded848044bc]
C:\ProgramData\Windows\xessmsxe.dat (Malware.Trace) -> Delete on reboot. [d54d82bf82089e983f79d9f1040013ed]
C:\Users\Ben\AppData\Roaming\Microsoft\msdbd948108.exe (Trojan.Agent.QAZ) -> Delete on reboot. [1d0569d8f9917fb795a3702e5da6ff01]

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

hi,

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <====== ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

MBAR nochmal scannen lassen bitte.

Hallo schrauber,

vielen Dank für Deine Hilfe!

Hier der Inhalt der Fixlog.txt (bevor ich mbar nochmal scannen lassen habe):

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2015
Ran by Ben at 2015-03-07 14:56:11 Run:1
Running from C:\Users\Ben\Desktop
Loaded Profiles: Ben (Available profiles: Ben & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <====== ATTENTION
*****************

HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.

==== End of Fixlog 14:56:12 ====
         

Schaut das gut aus?

Gruß,
frooser

Jup, dann nochmal MBAR bitte

Der mbar Scan ist durch mit folgender Rückmeldung:

"Scan finished: No Malware found!"

Hier der log:

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.03.08.04
  rootkit: v2015.02.25.01

Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.17631
Ben :: BEN-DESKTOP [administrator]

08.03.2015 14:56:40
mbar-log-2015-03-08 (14-56-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 437861
Time elapsed: 22 minute(s), 33 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Klingt das gut?

Vielen Dank noch einmal für die Hilfestellung!

schon viel besser


Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hier die 3 Logs:

Adw:

# AdwCleaner v4.111 - Bericht erstellt 08/03/2015 um 21:32:23
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-03-05.1 [Server]
# Betriebssystem : Windows 8.1 Pro with Media Center  (x64)
# Benutzername : Ben - BEN-DESKTOP
# Gestarted von : C:\Users\Ben\Desktop\adwcleaner_4.111.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Ben\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Datei Gelöscht : C:\Users\Ben\daemonprocess.txt
Datei Gelöscht : C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\foxydeal.sqlite
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\sweet-page.xml
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKCU\Software\eSupport.com
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Smart PC Solutions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:5555

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v36.0.1 (x86 de)

[cvnu3wic.default\prefs.js] - Zeile Gelöscht : user_pref("browser.startup.homepage", "hxxp://www.sweet-page.com/?type=hp&ts=1390044303&from=cor&uid=M4-CT128M4SSD1_00000000115203307FDF");

-\\ Google Chrome v40.0.2214.115


*************************

AdwCleaner[R0].txt - [19200 Bytes] - [18/01/2014 15:32:12]
AdwCleaner[R1].txt - [3411 Bytes] - [03/03/2015 22:43:26]
AdwCleaner[R2].txt - [3470 Bytes] - [03/03/2015 22:52:31]
AdwCleaner[R3].txt - [3529 Bytes] - [08/03/2015 19:56:35]
AdwCleaner[R4].txt - [3588 Bytes] - [08/03/2015 20:40:43]
AdwCleaner[S0].txt - [16736 Bytes] - [18/01/2014 15:35:55]
AdwCleaner[S1].txt - [3345 Bytes] - [08/03/2015 21:32:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3404  Bytes] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.3 (03.01.2015:1)
OS: Windows 8.1 Pro with Media Center x64
Ran by Ben on 08.03.2015 at 21:52:25,81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free registry cleaner"
Successfully deleted: [Empty Folder] C:\Users\Ben\appdata\local\{17B593DE-22B2-4E45-9F48-72442C153186}
Successfully deleted: [Empty Folder] C:\Users\Ben\appdata\local\{542FC2CB-0AC1-4D2C-9575-0BFC19AA2E36}
Successfully deleted: [Empty Folder] C:\Users\Ben\appdata\local\{5861B051-B854-4CD2-9F6F-559BF3DFAF88}
Successfully deleted: [Empty Folder] C:\Users\Ben\appdata\local\{920D5411-45F3-434D-8CEE-535E95EE9C78}
Successfully deleted: [Empty Folder] C:\Users\Ben\appdata\local\{BFEE2483-B615-48BC-8009-FF2FE7CC9976}



~~~ FireFox

Emptied folder: C:\Users\Ben\AppData\Roaming\mozilla\firefox\profiles\cvnu3wic.default\minidumps [169 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.03.2015 at 21:59:15,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2015 03
Ran by Ben (administrator) on BEN-DESKTOP on 08-03-2015 22:06:42
Running from C:\Users\Ben\Desktop
Loaded Profiles: Ben (Available profiles: Ben & DefaultAppPool)
Platform: Windows 8.1 Pro with Media Center (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Apple Inc.) C:\Program Files (x86)\AirPrint\airprint.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Hobbyist Software) C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
(IgniteGT) C:\IgniteGT\Simraceway\SRWAgent.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1840720 2007-04-03] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [319574 2010-10-25] (IVT Corporation)
HKLM-x32\...\Run: [NBKeyScan] => "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM-x32\...\Run: [Razer Lachesis Driver] => C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe [760720 2010-12-02] (Razer USA Ltd)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Hobbyist Software VLC Streamer] => C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe [1194824 2014-09-11] (Hobbyist Software)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2010-02-22] (Hewlett-Packard Company)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-17] (Spotify Ltd)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-02-06] (Samsung Electronics)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Amazon Cloud Player] => C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [GoogleChromeAutoLaunch_8B4B86C2A5661DC92D9A84E265233F91] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-17] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inhaltsmanager-Assistent für PlayStation(R).lnk
ShortcutTarget: Inhaltsmanager-Assistent für PlayStation(R).lnk -> C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRW Download Manager.lnk
ShortcutTarget: SRW Download Manager.lnk -> C:\IgniteGT\Simraceway\SRWAgent.exe (IgniteGT)
Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2014-12-02] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-21] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-01-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-21] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2014-10-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-21] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-21] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-08-07] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2014-09-08] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default
FF DefaultSearchEngine: dict.cc DE<>EN
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2013-07-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [2013-05-30] (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-11-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-11-11] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nppl3260.dll [2009-09-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll [2009-09-04] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll [2013-03-28] (OnLive)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-29] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2012-11-14] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013-10-17] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-06-12] (Apple Inc.)
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\alle-preise---guenstigerde.xml [2013-01-25]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\beemp3.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\dictcc-deen.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\filestube.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\geizhalsat-deutschland.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-autotranslate.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-images-1920x1080.xml [2015-01-25]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\guenstiger.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\idealode.xml [2011-10-08]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\imdb.xml [2014-12-13]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\mycroft-project.xml [2013-02-20]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\urban-dictionary.xml [2010-01-10]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\wiktionary-de.xml [2013-07-15]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\xrel.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\youtube-videosuche.xml [2010-01-10]
FF Extension: Fast Dial - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\fastdial@telega.phpnet.us [2014-09-24]
FF Extension: ProxTube - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\ich@maltegoetz.de.xpi [2014-09-15]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2012-05-11]
FF Extension: Personas Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\personas@christopher.beard.xpi [2013-03-01]
FF Extension: Tab Counter - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\tabcounter@morac.xpi [2012-01-24]
FF Extension: Download Status Bar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2013-12-27]
FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-06-19]
FF Extension: Download Statusbar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-11-02]

Chrome: 
=======
CHR HomePage: Default -> 
CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-13]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-15]
CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-13]
CHR Extension: (Google Search) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-13]
CHR Extension: (Session Buddy) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2014-01-18]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2012-12-13]
CHR Extension: (AdBlock) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-12-13]
CHR Extension: (Tabs Counter) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibokmmioadhomkeikgbfenloopldkcoi [2012-12-13]
CHR Extension: (Search Box) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknehpjhljpfaghmicofickbkdagooni [2012-12-13]
CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AirPrint; C:\Program Files (x86)\AirPrint\Airprint.exe [234784 2010-12-23] (Apple Inc.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.)
R2 BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [1765484 2010-10-26] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [192000 2010-10-25] (IVT Corporation) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2711736 2015-01-13] (Microsoft Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2013-11-09] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 Simraceway Update Service; C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe [1630720 2013-07-11] () [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-09] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2013-11-09] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Abyssus; C:\Windows\System32\drivers\Abyssus.sys [10880 2009-10-30] (Razer (Asia-Pacific) Pte Ltd)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2010-06-24] (IVT Corporation.)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2013-09-30] (CSR plc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2013-11-09] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-08-31] (Acronis)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
U3 idsvc; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-08 22:06 - 2015-03-08 22:06 - 00000000 ____D () C:\Users\Ben\Desktop\FRST-OlderVersion
2015-03-08 21:59 - 2015-03-08 21:59 - 00001396 _____ () C:\Users\Ben\Desktop\JRT.txt
2015-03-08 21:49 - 2015-03-08 21:32 - 00003496 _____ () C:\Users\Ben\Desktop\AdwCleaner[S1].txt
2015-03-08 20:40 - 2015-03-08 20:40 - 01388333 _____ (Thisisu) C:\Users\Ben\Desktop\JRT.exe
2015-03-07 17:42 - 2015-03-07 17:42 - 00000794 _____ () C:\Users\Ben\Desktop\mbar Anleitung.txt
2015-03-07 15:20 - 2015-03-07 15:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-04 00:40 - 2015-03-04 00:40 - 00000179 _____ () C:\Users\Ben\Desktop\Mein System.txt
2015-03-03 23:30 - 2015-03-04 00:36 - 00210647 _____ () C:\Users\Ben\Desktop\trojaner-board fertiger Post.txt
2015-03-03 23:10 - 2015-03-03 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-03 23:09 - 2015-03-08 15:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-03-03 23:09 - 2015-03-08 14:56 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-03-03 23:08 - 2015-03-08 15:34 - 00000000 ____D () C:\Users\Ben\Desktop\mbar
2015-03-03 23:08 - 2015-03-08 14:52 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-03-03 23:03 - 2015-03-03 23:03 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Ben\Desktop\tdsskiller.exe
2015-03-03 22:55 - 2015-03-08 22:06 - 00026686 _____ () C:\Users\Ben\Desktop\FRST.txt
2015-03-03 22:55 - 2015-03-03 22:56 - 00044324 _____ () C:\Users\Ben\Desktop\Addition.txt
2015-03-03 22:53 - 2015-03-08 22:06 - 00000000 ____D () C:\FRST
2015-03-03 22:52 - 2015-03-08 22:06 - 02095104 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe
2015-03-03 22:42 - 2015-03-03 22:43 - 02126848 _____ () C:\Users\Ben\Desktop\adwcleaner_4.111.exe
2015-02-24 23:48 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-02-24 23:48 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-02-24 23:48 - 2014-10-29 02:27 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-02-24 23:48 - 2014-10-29 02:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-02-24 23:48 - 2014-10-29 02:04 - 00868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-02-24 23:48 - 2014-10-29 02:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-02-21 16:58 - 2015-03-08 19:55 - 00000000 ____D () C:\Users\Ben\Desktop\Bewerbungsunterlagen
2015-02-21 14:10 - 2015-02-24 23:48 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-13 18:29 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-13 18:29 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 00:56 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 00:56 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 00:56 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 00:56 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 00:56 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 00:56 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 00:56 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 00:56 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 00:56 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 00:56 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 00:56 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 00:56 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 00:56 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 00:56 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 00:56 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 00:56 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 00:56 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 00:56 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 00:56 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 00:56 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 00:56 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 00:56 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 00:56 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 00:56 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 00:56 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 00:56 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 00:55 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 00:55 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 00:55 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 00:55 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 00:55 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 00:55 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 00:55 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 00:55 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 00:55 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 00:55 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 00:55 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 00:55 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 00:55 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 00:55 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 00:55 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 00:55 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 00:55 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 00:55 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 00:55 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 00:55 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 00:55 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 00:55 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 00:55 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 00:55 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 00:55 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 00:55 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 00:55 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 00:55 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 00:55 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 00:55 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 00:55 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 00:55 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 00:55 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 00:55 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 00:55 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 00:55 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 00:55 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 00:55 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 00:55 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 00:55 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-11 00:55 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 00:55 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 00:55 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-10 23:23 - 2015-02-10 23:28 - 00000000 ____D () C:\Users\Ben\Desktop\GateWay
2015-02-10 23:17 - 2015-02-10 23:17 - 00337056 _____ () C:\WINDOWS\Minidump\021015-16125-01.dmp
2015-02-09 22:12 - 2015-02-09 22:12 - 00337112 _____ () C:\WINDOWS\Minidump\020915-9015-01.dmp
2015-02-09 21:52 - 2015-02-09 21:52 - 00001025 _____ () C:\Users\Public\Desktop\UE BOOM Update-Assistent 1.4.50.lnk
2015-02-09 21:52 - 2015-02-09 21:52 - 00000000 ____D () C:\Program Files (x86)\UE BOOM Update-Assistent 1.4.50
2015-02-07 16:27 - 2015-02-07 16:27 - 00000012 _____ () C:\Users\Ben\Desktop\3monkey.me VPN 2 Tage Test Code.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-08 22:03 - 2013-03-18 12:40 - 01974680 _____ () C:\Simraceway.log
2015-03-08 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-08 21:58 - 2013-11-09 14:01 - 01739449 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-08 21:52 - 2013-09-30 05:14 - 02071876 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-08 21:52 - 2013-09-30 04:58 - 00879736 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-08 21:52 - 2013-09-30 04:58 - 00201766 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-08 21:48 - 2013-11-23 15:02 - 00000000 ___DO () C:\Users\Ben\SkyDrive
2015-03-08 21:48 - 2012-12-13 04:18 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-08 21:48 - 2012-05-28 15:58 - 00005063 _____ () C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
2015-03-08 21:48 - 2012-05-28 15:58 - 00000092 _____ () C:\WINDOWS\SysWOW64\LOCALDEVICE.INI
2015-03-08 21:48 - 2010-10-26 10:04 - 00001089 _____ () C:\WINDOWS\SysWOW64\bscs.ini
2015-03-08 21:47 - 2013-11-09 14:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-08 21:47 - 2013-08-22 15:46 - 00043193 _____ () C:\WINDOWS\setupact.log
2015-03-08 21:47 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-08 21:47 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-08 21:47 - 2012-05-11 13:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-08 21:32 - 2014-01-18 15:32 - 00000000 ____D () C:\AdwCleaner
2015-03-08 21:32 - 2013-11-09 14:03 - 00000000 ____D () C:\Users\Ben
2015-03-08 21:29 - 2012-12-13 04:18 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-08 21:12 - 2012-09-14 13:21 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-08 15:42 - 2013-11-10 21:32 - 02501120 ___SH () C:\Users\Ben\Desktop\Thumbs.db
2015-03-08 14:13 - 2012-12-04 23:26 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3405083392-531059733-2769391109-1001
2015-03-07 18:19 - 2014-01-18 15:52 - 00000000 ____D () C:\Users\Ben\AppData\Local\JDownloader v2.0
2015-03-07 13:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-07 12:50 - 2013-09-29 20:05 - 00084848 _____ () C:\WINDOWS\PFRO.log
2015-03-03 23:38 - 2011-03-02 16:37 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2015-03-03 23:37 - 2012-05-01 03:19 - 00000000 ____D () C:\ProgramData\Windows
2015-03-03 14:17 - 2009-10-14 06:13 - 00295552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-02-28 19:10 - 2011-01-10 23:50 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\vlc
2015-02-28 16:56 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-28 16:43 - 2013-03-18 12:40 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\Simraceway
2015-02-24 23:58 - 2014-08-07 22:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-02-21 16:21 - 2012-06-18 23:33 - 00000000 ____D () C:\Users\Ben\AppData\Roaming\Spotify
2015-02-21 15:19 - 2014-06-20 14:29 - 00000000 ____D () C:\Users\Ben\Desktop\Neue Musik
2015-02-21 14:35 - 2012-06-18 23:33 - 00000000 ____D () C:\Users\Ben\AppData\Local\Spotify
2015-02-21 14:34 - 2013-11-16 12:18 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-21 14:21 - 2013-07-02 00:38 - 00000000 ____D () C:\Program Files\Java
2015-02-21 14:20 - 2014-02-15 11:04 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-02-21 14:20 - 2013-11-16 12:18 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-02-21 14:20 - 2013-11-16 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-21 14:20 - 2013-07-02 00:38 - 00319912 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00191400 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00190888 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-02-21 14:20 - 2013-07-02 00:38 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-02-21 14:20 - 2013-07-02 00:35 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-21 14:10 - 2011-06-21 16:25 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-21 14:10 - 2010-01-13 00:29 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-17 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-13 18:24 - 2013-08-22 15:44 - 00493632 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-12 00:41 - 2014-12-13 17:30 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-12 00:41 - 2014-07-13 19:13 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-11 22:26 - 2013-08-14 09:49 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-11 22:21 - 2009-10-14 06:12 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-10 23:22 - 2014-08-14 20:52 - 00000000 ____D () C:\Users\Ben\Desktop\Neuer Desktop Ordner nach 27 Zoll
2015-02-10 23:17 - 2013-11-10 21:02 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-09 22:24 - 2012-12-13 04:18 - 00004114 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 22:24 - 2012-12-13 04:18 - 00003878 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-09 21:52 - 2013-11-23 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Ears
2015-02-07 17:12 - 2012-09-14 13:21 - 00003796 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2010-02-07 11:04 - 2013-03-22 14:07 - 0000600 _____ () C:\Users\Ben\AppData\Roaming\winscp.rnd
2010-04-18 23:36 - 2013-02-04 18:50 - 0010240 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-09-22 00:22 - 2010-09-22 00:22 - 0000337 _____ () C:\Users\Ben\AppData\Local\Perfmon.PerfmonCfg
2010-01-24 17:30 - 2010-01-24 17:30 - 0000017 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\Ben\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcpowob.dll
C:\Users\Ben\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Ben\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ben\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Ben\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Ben\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Ben\AppData\Local\Temp\nvStInst.exe
C:\Users\Ben\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Ben\AppData\Local\Temp\proxy_vole8330295526030781903.dll
C:\Users\Ben\AppData\Local\Temp\Quarantine.exe
C:\Users\Ben\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Ben\AppData\Local\Temp\sfextra.dll
C:\Users\Ben\AppData\Local\Temp\sqlite3.dll
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Ben\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Ben\AppData\Local\Temp\VLCStreamerSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-08 14:13

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---



Danke nochmals!

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo schrauber,

also mit dem Eset Scanner habe ich Probleme. Die log Datei wird anscheinend nicht erstellt. Habe den Scan über Nacht durchlaufen lassen. Er hat über vier Stunden gedauert. In dem Fenster wurde danach in roter Schrift angezeigt, dass 22 Bedrohungen gefunden wurden. Habe dann auf fertig stellen geklickt und unter C:\Programme\Eset\EsetOnlineScanner die log.txt geöffnet. Zu meinem Erstaunen steht im log aber nur Folgendes:

ESETSmartInstaller@High as downloader log: all ok

Scheinbar wurde nichts in den log übernommen.

Was nun?

Vielen Dank.

Lass ESET weg und mach dafür das:

Lade Dir bitte von hier Emsisoft Emergency Kit herunter.

• Bitte installiere das Programm in den vorgegebenen Pfad.
• Starte das Programm durch Doppelklick der Desktopverknüpfung.
• Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
• Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.
  

Ok. hier ist der Emsisoft Scan:

Emsisoft Emergency Kit - Version 9.0
Letztes Update: 12.03.2015 22:06:15
Benutzerkonto: BEN-DESKTOP\Ben

Scan-Einstellungen:

Scan Methode: Detail-Scan
Objekte: Rootkits, Speicher, Traces, C:\, E:\

PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	12.03.2015 22:13:49
Value: HKEY_USERS\S-1-5-21-3405083392-531059733-2769391109-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR 	gefunden: 

Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-3405083392-531059733-2769391109-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	gefunden: 

Setting.DisableRegistryTools (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\W3I 	gefunden: Application.InstallAd (A)
C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Local\genienext\nengine.dll.vir 	gefunden: Gen:Variant.Adware.NewNextMe.1 (B)
C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\newnext.me\nengine.dll.vir 	gefunden: Gen:Variant.Adware.NewNextMe.1 (B)
C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 	gefunden: Gen:Variant.Application.Bundler.InstallRex.2 (B)
C:\Users\Ben\AppData\Local\Temp\fullpackage_temp1390044298\QQBrowserFrame.dll 	gefunden: Application.Win32.InstallTech (A)
C:\Users\Ben\AppData\Local\Temp\fullpackage_temp1390044298\tmp\wpm.exe 	gefunden: Adware.WProtManager.A (B)
C:\Users\Ben\AppData\Local\Temp\is1070216317\183146_stp\wajam_validate.exe 	gefunden: Application.InstallAd (A)
C:\Users\Ben\AppData\Local\Temp\is1070216317\900508_stp\wajam_validate.exe 	gefunden: Application.InstallAd (A)
C:\Users\Ben\AppData\Local\Temp\is961225091\886494_stp\wajam_validate.exe 	gefunden: Application.InstallAd (A)
C:\Users\Ben\AppData\Roaming\Thunderbird\Profiles\h2vam2nz.default\ImapMail\imap.googlemail.com\[Google Mail].sbd\Papierkorb -> (message 11) -> [Subject: Ihre  

Rechnung/122008657][Date: Mon, 21 Jan 2013 05:38:36 -0500] -> (MIME part) -> RE90284628.pdf -> (INFECTED_JS) 	gefunden: PDF:Exploit.PDF-JS.UK (B)
C:\Users\Ben\AppData\Roaming\Thunderbird\Profiles\h2vam2nz.default\ImapMail\imap.googlemail.com\[Google Mail].sbd\Papierkorb -> (message 11) -> [Subject: Ihre  

Rechnung/122008657][Date: Mon, 21 Jan 2013 05:38:36 -0500] -> (MIME part) -> RE90284628.pdf -> (TIFF) 	gefunden: Exploit.TIFF.Gen (B)
C:\Users\Ben\AppData\Roaming\Thunderbird\Profiles\h2vam2nz.default\ImapMail\imap.googlemail.com\[Google Mail].sbd\Spam -> (message 416) -> [Subject: Ihre  

Rechnung/122008657][Date: Mon, 21 Jan 2013 05:38:36 -0500] -> (MIME part) -> RE90284628.pdf -> (INFECTED_JS) 	gefunden: PDF:Exploit.PDF-JS.UK (B)
C:\Users\Ben\AppData\Roaming\Thunderbird\Profiles\h2vam2nz.default\ImapMail\imap.googlemail.com\[Google Mail].sbd\Spam -> (message 416) -> [Subject: Ihre  

Rechnung/122008657][Date: Mon, 21 Jan 2013 05:38:36 -0500] -> (MIME part) -> RE90284628.pdf -> (TIFF) 	gefunden: Exploit.TIFF.Gen (B)


Gescannt	423195
Gefunden	15

Scan-Ende:	13.03.2015 01:00:37
Scan-Zeit:	2:46:48
         

Die gefundenen Objekte habe ich dann sicherheitshalber erstmal nur in die Quarantäne verschoben und noch nicht gelöscht. Kann ich diese bedenkenlos löschen?


Danach habe ich nochmal Eset laufen lassen und diesmal wurde auch ein ausführlicher log ausgegeben. Beim letzten Scan (zeitlich kurz vor dem Emsisoft Scan) hat Eset noch 22 Objekte gefunden. Jetzt nur noch 10.

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=3ad235fb280b474085c67423de05caf0
# engine=22884
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-13 05:21:44
# local_time=2015-03-13 06:21:44 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 36232 3705236 0 0
# scanned=326779
# found=10
# cleaned=0
# scan_time=17117
sh=31CE21FE36C11E107A6E315EFE1875743809B4CC ft=1 fh=48abcfa6ce4a4014 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=4E95E7FF7D4C068BD4E84B2DE1E5F0D247C049DB ft=0 fh=0000000000000000 vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Dokumente und Einstellungen\All Users\Win7codecs\{1FDFDF6A-AFBD-41F6-82E6-266AF57F12AB}\Win7codecs.msi"
sh=46E8E786B841C08CC27F9F91A75B80BF25E943B6 ft=1 fh=214bfcf03573da11 vn="Win32/ELEX.Z evtl. unerwünschte Anwendung" ac=I fn="C:\Dokumente und Einstellungen\Ben\AppData\Local\Temp\is1070216317\900749_stp\cor_sweet-page.exe"
sh=8C7D3311B74C44B2232EA251E97E492E24B76F4F ft=1 fh=39118eedd89478df vn="Win32/Mobogenie.B evtl. unerwünschte Anwendung" ac=I fn="C:\Dokumente und Einstellungen\Ben\AppData\Local\Temp\is1070216317\900770_stp\Mobogenie_Setup_UN.exe"
sh=58187EA1C5681986C923B184929C0625D915DDC0 ft=1 fh=2a5f82fd736b356c vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Win7codecs\Tools\Settings32.exe"
sh=4E95E7FF7D4C068BD4E84B2DE1E5F0D247C049DB ft=0 fh=0000000000000000 vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\Win7codecs\{1FDFDF6A-AFBD-41F6-82E6-266AF57F12AB}\Win7codecs.msi"
sh=4E95E7FF7D4C068BD4E84B2DE1E5F0D247C049DB ft=0 fh=0000000000000000 vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\Win7codecs\{1FDFDF6A-AFBD-41F6-82E6-266AF57F12AB}\Win7codecs.msi"
sh=46E8E786B841C08CC27F9F91A75B80BF25E943B6 ft=1 fh=214bfcf03573da11 vn="Win32/ELEX.Z evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Ben\AppData\Local\Temp\is1070216317\900749_stp\cor_sweet-page.exe"
sh=8C7D3311B74C44B2232EA251E97E492E24B76F4F ft=1 fh=39118eedd89478df vn="Win32/Mobogenie.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Ben\AppData\Local\Temp\is1070216317\900770_stp\Mobogenie_Setup_UN.exe"
sh=4E95E7FF7D4C068BD4E84B2DE1E5F0D247C049DB ft=0 fh=0000000000000000 vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\5be7a5.msi"
         

Vielen Dank!

Ja Quarantäne kannste löschen.

Securitycheck und der Rest von oben fehlt noch

Ok, habe die Quarantäne in Emsi gelöscht und den Security Check ausgeführt. Hier der checkup.txt log:

 Results of screen317's Security Check version 0.99.97  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 JavaFX 2.1.0    
 Java 8 Update 31  
 Java version 32-bit out of Date! 
  Java 64-bit 8 Update 31  
 Adobe Flash Player 	16.0.0.305  
 Adobe Reader XI  
 Mozilla Firefox (36.0.1) 
 Mozilla Thunderbird (5.0). Thunderbird out of Date!  
 Google Chrome (40.0.2214.115) 
 Google Chrome (41.0.2272.89) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSMpEng.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Ben (administrator) on BEN-DESKTOP on 14-03-2015 17:19:55
Running from C:\Users\Ben\Desktop
Loaded Profiles: Ben (Available profiles: Ben & DefaultAppPool)
Platform: Windows 8.1 Pro with Media Center (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\AirPrint\airprint.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Hobbyist Software) C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
(IgniteGT) C:\IgniteGT\Simraceway\SRWAgent.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(AppWork GmbH) C:\Users\Ben\AppData\Local\JDownloader v2.0\JDownloader2.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1840720 2007-04-03] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [319574 2010-10-25] (IVT Corporation)
HKLM-x32\...\Run: [NBKeyScan] => "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM-x32\...\Run: [Razer Lachesis Driver] => C:\Program Files (x86)\Razer\Lachesis 5600\LachesisSysTray.exe [760720 2010-12-02] (Razer USA Ltd)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Hobbyist Software VLC Streamer] => C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe [1194824 2014-09-11] (Hobbyist Software)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2010-02-22] (Hewlett-Packard Company)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-17] (Spotify Ltd)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-02-06] (Samsung Electronics)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [Amazon Cloud Player] => C:\Users\Ben\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\...\Run: [GoogleChromeAutoLaunch_8B4B86C2A5661DC92D9A84E265233F91] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inhaltsmanager-Assistent für PlayStation(R).lnk
ShortcutTarget: Inhaltsmanager-Assistent für PlayStation(R).lnk -> C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRW Download Manager.lnk
ShortcutTarget: SRW Download Manager.lnk -> C:\IgniteGT\Simraceway\SRWAgent.exe (IgniteGT)
Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3405083392-531059733-2769391109-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2014-12-02] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-21] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-01-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-21] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2014-10-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-21] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-21] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-08-07] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2014-09-08] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default
FF Homepage: hxxp://www.sweet-page.com/?type=hp&ts=1390044303&from=cor&uid=M4-CT128M4SSD1_00000000115203307FDF
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2013-07-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [2013-05-30] (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-08-07] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-11-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-11-11] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nppl3260.dll [2009-09-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll [2009-09-04] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll [2013-03-28] (OnLive)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-29] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-3405083392-531059733-2769391109-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2012-11-14] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013-10-17] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-06-12] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-06-12] (Apple Inc.)
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\alle-preise---guenstigerde.xml [2013-01-25]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\beemp3.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\dictcc-deen.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\filestube.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\geizhalsat-deutschland.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-autotranslate.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\google-images-1920x1080.xml [2015-01-25]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\guenstiger.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\idealode.xml [2011-10-08]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\imdb.xml [2014-12-13]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\mycroft-project.xml [2013-02-20]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\urban-dictionary.xml [2010-01-10]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\wiktionary-de.xml [2013-07-15]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\xrel.xml [2013-12-21]
FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\searchplugins\youtube-videosuche.xml [2010-01-10]
FF Extension: Fast Dial - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\fastdial@telega.phpnet.us [2014-09-24]
FF Extension: ProxTube - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\ich@maltegoetz.de.xpi [2014-09-15]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2012-05-11]
FF Extension: Personas Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\personas@christopher.beard.xpi [2013-03-01]
FF Extension: Tab Counter - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\tabcounter@morac.xpi [2012-01-24]
FF Extension: Download Status Bar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2013-12-27]
FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-06-19]
FF Extension: Download Statusbar - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\cvnu3wic.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-11-02]

Chrome: 
=======
CHR HomePage: Default -> 
CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-13]
CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-13]
CHR Extension: (Google Search) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-13]
CHR Extension: (Session Buddy) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2014-01-18]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2012-12-13]
CHR Extension: (AdBlock) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-12-13]
CHR Extension: (Tabs Counter) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibokmmioadhomkeikgbfenloopldkcoi [2012-12-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Search Box) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknehpjhljpfaghmicofickbkdagooni [2012-12-13]
CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AirPrint; C:\Program Files (x86)\AirPrint\Airprint.exe [234784 2010-12-23] (Apple Inc.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.)
R2 BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [1765484 2010-10-26] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [192000 2010-10-25] (IVT Corporation) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2711736 2015-01-13] (Microsoft Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2013-11-09] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 Simraceway Update Service; C:\Program Files (x86)\SimracewayUpdater\SRWUpdate.exe [1630720 2013-07-11] () [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-09] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2013-11-09] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Abyssus; C:\Windows\System32\drivers\Abyssus.sys [10880 2009-10-30] (Razer (Asia-Pacific) Pte Ltd)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2010-06-24] (IVT Corporation.)
R3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2015-03-12] (Emsisoft GmbH)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2013-09-30] (CSR plc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2013-11-09] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-08-31] (Acronis)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
U3 idsvc; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-14 17:19 - 2015-03-14 17:20 - 00027968 _____ () C:\Users\Ben\Desktop\FRST.txt
2015-03-14 17:19 - 2015-03-14 17:19 - 02095616 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe
2015-03-14 17:03 - 2015-03-14 17:03 - 00001026 _____ () C:\Users\Ben\Desktop\checkup.txt
2015-03-14 16:52 - 2015-03-14 16:52 - 00003750 _____ () C:\Users\Ben\Desktop\emsi quarantine list vor löschen.txt
2015-03-14 14:32 - 2015-03-14 14:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2015-03-14 14:32 - 2015-03-14 14:32 - 00000000 ____D () C:\Program Files (x86)\PDF24
2015-03-14 14:14 - 2015-03-14 14:14 - 00000000 ____D () C:\Users\Ben\.pdfsam
2015-03-14 14:11 - 2015-03-14 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic
2015-03-14 14:11 - 2015-03-14 14:11 - 00000000 ____D () C:\Program Files\PDF Split And Merge Basic
2015-03-13 20:14 - 2015-03-13 20:15 - 00006180 _____ () C:\Users\Ben\Desktop\Emsisoft ohne Cracks.txt
2015-03-13 01:34 - 2015-03-13 01:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-03-12 22:04 - 2015-03-14 16:49 - 00000000 ____D () C:\EEK
2015-03-11 22:52 - 2014-10-29 04:59 - 03460472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2015-03-11 22:52 - 2014-10-29 03:08 - 18822656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-03-11 22:52 - 2014-10-29 02:33 - 15157760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-03-11 22:52 - 2014-10-29 02:02 - 14354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-03-11 22:52 - 2014-10-29 01:52 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-03-11 22:52 - 2014-10-29 01:50 - 12749824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-03-11 22:52 - 2014-10-29 01:46 - 09530368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-03-11 22:52 - 2014-10-29 01:45 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-03-11 22:51 - 2014-10-29 05:10 - 01816008 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2015-03-11 22:51 - 2014-10-29 05:00 - 02314952 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-03-11 22:51 - 2014-10-29 05:00 - 02229168 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-03-11 22:51 - 2014-10-29 04:59 - 02529856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-03-11 22:51 - 2014-10-29 04:59 - 00014144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swenum.sys
2015-03-11 22:51 - 2014-10-29 04:58 - 00014528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2015-03-11 22:51 - 2014-10-29 04:57 - 03138720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2015-03-11 22:51 - 2014-10-29 04:57 - 03118096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2015-03-11 22:51 - 2014-10-29 04:57 - 02745160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2015-03-11 22:51 - 2014-10-29 04:57 - 02450216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL
2015-03-11 22:51 - 2014-10-29 04:57 - 01286048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2015-03-11 22:51 - 2014-10-29 04:55 - 02174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2015-03-11 22:51 - 2014-10-29 04:55 - 01660528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-03-11 22:51 - 2014-10-29 04:55 - 01543768 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2015-03-11 22:51 - 2014-10-29 04:52 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-03-11 22:51 - 2014-10-29 04:52 - 02334080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-03-11 22:51 - 2014-10-29 04:52 - 01518504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-03-11 22:51 - 2014-10-29 04:52 - 01509688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-03-11 22:51 - 2014-10-29 04:52 - 01288096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-03-11 22:51 - 2014-10-29 04:52 - 01165744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-03-11 22:51 - 2014-10-29 04:51 - 01310912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-03-11 22:51 - 2014-10-29 04:13 - 01901240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-03-11 22:51 - 2014-10-29 04:12 - 01946144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-03-11 22:51 - 2014-10-29 04:12 - 01907384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-03-11 22:51 - 2014-10-29 04:11 - 02689392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2015-03-11 22:51 - 2014-10-29 04:11 - 02528760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2015-03-11 22:51 - 2014-10-29 04:11 - 02447104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL
2015-03-11 22:51 - 2014-10-29 04:11 - 01024200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2015-03-11 22:51 - 2014-10-29 04:10 - 01564464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2015-03-11 22:51 - 2014-10-29 04:10 - 01209624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-03-11 22:51 - 2014-10-29 04:07 - 02324208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-03-11 22:51 - 2014-10-29 04:07 - 01321192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-03-11 22:51 - 2014-10-29 03:59 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-03-11 22:51 - 2014-10-29 03:29 - 04483072 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-03-11 22:51 - 2014-10-29 03:25 - 00785920 _____ (Microsoft Corporation) C:\WINDOWS\system32\blackbox.dll
2015-03-11 22:51 - 2014-10-29 03:24 - 04418560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2015-03-11 22:51 - 2014-10-29 03:19 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-03-11 22:51 - 2014-10-29 03:17 - 02003456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2015-03-11 22:51 - 2014-10-29 03:10 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-03-11 22:51 - 2014-10-29 03:00 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-03-11 22:51 - 2014-10-29 02:57 - 02924032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2015-03-11 22:51 - 2014-10-29 02:56 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2015-03-11 22:51 - 2014-10-29 02:55 - 01697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2015-03-11 22:51 - 2014-10-29 02:51 - 00941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2015-03-11 22:51 - 2014-10-29 02:47 - 02072064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2015-03-11 22:51 - 2014-10-29 02:45 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-03-11 22:51 - 2014-10-29 02:45 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe
2015-03-11 22:51 - 2014-10-29 02:44 - 02984448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2015-03-11 22:51 - 2014-10-29 02:43 - 07075328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2015-03-11 22:51 - 2014-10-29 02:42 - 01999872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-03-11 22:51 - 2014-10-29 02:40 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2015-03-11 22:51 - 2014-10-29 02:39 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-03-11 22:51 - 2014-10-29 02:38 - 04690432 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2015-03-11 22:51 - 2014-10-29 02:35 - 04709888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-03-11 22:51 - 2014-10-29 02:35 - 03256320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2015-03-11 22:51 - 2014-10-29 02:31 - 02941952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2015-03-11 22:51 - 2014-10-29 02:28 - 03820544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2015-03-11 22:51 - 2014-10-29 02:26 - 03561984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-03-11 22:51 - 2014-10-29 02:24 - 02464768 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2015-03-11 22:51 - 2014-10-29 02:24 - 02364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2015-03-11 22:51 - 2014-10-29 02:23 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2015-03-11 22:51 - 2014-10-29 02:22 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-03-11 22:51 - 2014-10-29 02:22 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2015-03-11 22:51 - 2014-10-29 02:22 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-03-11 22:51 - 2014-10-29 02:22 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll
2015-03-11 22:51 - 2014-10-29 02:21 - 01250816 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-03-11 22:51 - 2014-10-29 02:18 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-03-11 22:51 - 2014-10-29 02:17 - 01360896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2015-03-11 22:51 - 2014-10-29 02:16 - 05267968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2015-03-11 22:51 - 2014-10-29 02:14 - 03553280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2015-03-11 22:51 - 2014-10-29 02:12 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-03-11 22:51 - 2014-10-29 02:11 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-03-11 22:51 - 2014-10-29 02:10 - 02469888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2015-03-11 22:51 - 2014-10-29 02:10 - 02344960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-03-11 22:51 - 2014-10-29 02:09 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-03-11 22:51 - 2014-10-29 02:08 - 02608640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2015-03-11 22:51 - 2014-10-29 02:08 - 02542080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-03-11 22:51 - 2014-10-29 02:08 - 02174976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2015-03-11 22:51 - 2014-10-29 02:08 - 01822720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2015-03-11 22:51 - 2014-10-29 02:08 - 01560576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-03-11 22:51 - 2014-10-29 02:05 - 03273216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2015-03-11 22:51 - 2014-10-29 02:03 - 04067840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-03-11 22:51 - 2014-10-29 02:03 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2015-03-11 22:51 - 2014-10-29 01:59 - 02252800 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2015-03-11 22:51 - 2014-10-29 01:59 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-03-11 22:51 - 2014-10-29 01:54 - 07784960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-03-11 22:51 - 2014-10-29 01:52 - 02554880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-03-11 22:51 - 2014-10-29 01:52 - 02170368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2015-03-11 22:51 - 2014-10-29 01:52 - 01461248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2015-03-11 22:51 - 2014-10-29 01:52 - 01275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-03-11 22:51 - 2014-10-29 01:51 - 01554432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-03-11 22:51 - 2014-10-29 01:50 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2015-03-11 22:51 - 2014-10-29 01:48 - 03056128 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2015-03-11 22:51 - 2014-10-29 01:46 - 01919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2015-03-11 22:51 - 2014-10-29 01:46 - 01348096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-03-11 22:51 - 2014-10-29 01:45 - 01725952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-03-11 22:51 - 2014-10-29 01:43 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-03-11 22:51 - 2014-10-29 01:42 - 01922560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-03-11 22:51 - 2014-10-29 01:42 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-03-11 22:51 - 2014-10-29 01:39 - 02814464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-03-11 22:51 - 2014-10-29 01:39 - 01000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-03-11 22:51 - 2014-10-29 01:38 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-03-11 22:51 - 2014-10-29 01:37 - 06386176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-03-11 22:51 - 2014-10-29 01:35 - 01668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-03-11 22:51 - 2014-10-29 01:34 - 01544192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-03-11 22:51 - 2014-10-29 01:33 - 06213632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-03-11 22:51 - 2014-10-15 09:32 - 02025792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-03-11 22:51 - 2014-10-07 07:45 - 03307112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-03-11 22:51 - 2014-10-07 04:44 - 02890296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-03-11 22:51 - 2014-09-25 04:42 - 00373568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2015-03-11 22:50 - 2014-10-29 05:09 - 01950280 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2015-03-11 22:50 - 2014-10-29 05:09 - 01239576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2015-03-11 22:50 - 2014-10-29 05:00 - 01540696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-03-11 22:50 - 2014-10-29 05:00 - 01385216 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-03-11 22:50 - 2014-10-29 05:00 - 00740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2015-03-11 22:50 - 2014-10-29 05:00 - 00544408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-03-11 22:50 - 2014-10-29 05:00 - 00379568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-03-11 22:50 - 2014-10-29 04:57 - 01576312 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2015-03-11 22:50 - 2014-10-29 04:57 - 01552704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-03-11 22:50 - 2014-10-29 04:57 - 01210176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2015-03-11 22:50 - 2014-10-29 04:57 - 00643064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-03-11 22:50 - 2014-10-29 04:57 - 00557832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL
2015-03-11 22:50 - 2014-10-29 04:55 - 01133200 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-03-11 22:50 - 2014-10-29 04:55 - 01063432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2015-03-11 22:50 - 2014-10-29 04:55 - 00730824 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 01064720 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmv2clt.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00988544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00952384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00850656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00821696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00734448 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00634768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00580024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00497936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00444728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2015-03-11 22:50 - 2014-10-29 04:52 - 00405456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-03-11 22:50 - 2014-10-29 04:18 - 01782912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2015-03-11 22:50 - 2014-10-29 04:18 - 01103768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2015-03-11 22:50 - 2014-10-29 04:18 - 00848568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2015-03-11 22:50 - 2014-10-29 04:18 - 00016504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psapi.dll
2015-03-11 22:50 - 2014-10-29 04:11 - 01037656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2015-03-11 22:50 - 2014-10-29 04:11 - 00914648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2015-03-11 22:50 - 2014-10-29 04:10 - 01287112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2015-03-11 22:50 - 2014-10-29 04:10 - 01178104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2015-03-11 22:50 - 2014-10-29 04:10 - 00492232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 01115104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00857384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00705008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00700328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00584120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00551064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00482360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmdev.dll
2015-03-11 22:50 - 2014-10-29 04:07 - 00409040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-03-11 22:50 - 2014-10-29 04:05 - 00890128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmv2clt.dll
2015-03-11 22:50 - 2014-10-29 03:56 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-03-11 22:50 - 2014-10-29 03:50 - 01192960 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-03-11 22:50 - 2014-10-29 03:48 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2015-03-11 22:50 - 2014-10-29 03:48 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-03-11 22:50 - 2014-10-29 03:43 - 00685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched20.dll
2015-03-11 22:50 - 2014-10-29 03:36 - 00546304 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcese40.dll
2015-03-11 22:50 - 2014-10-29 03:33 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.dll
2015-03-11 22:50 - 2014-10-29 03:31 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceqp40.dll
2015-03-11 22:50 - 2014-10-29 03:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70804.dll
2015-03-11 22:50 - 2014-10-29 03:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70404.dll
2015-03-11 22:50 - 2014-10-29 03:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7001E.dll
2015-03-11 22:50 - 2014-10-29 03:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll
2015-03-11 22:50 - 2014-10-29 03:29 - 01246720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ogldrv.dll
2015-03-11 22:50 - 2014-10-29 03:28 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2015-03-11 22:50 - 2014-10-29 03:27 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx.dll
2015-03-11 22:50 - 2014-10-29 03:26 - 00771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll
2015-03-11 22:50 - 2014-10-29 03:11 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-03-11 22:50 - 2014-10-29 03:09 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2015-03-11 22:50 - 2014-10-29 03:08 - 01540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2015-03-11 22:50 - 2014-10-29 03:08 - 00858624 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2015-03-11 22:50 - 2014-10-29 03:08 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-03-11 22:50 - 2014-10-29 03:08 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmnet.dll
2015-03-11 22:50 - 2014-10-29 03:07 - 06692352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2015-03-11 22:50 - 2014-10-29 03:06 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2015-03-11 22:50 - 2014-10-29 03:04 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\WavDest.dll
2015-03-11 22:50 - 2014-10-29 03:03 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-03-11 22:50 - 2014-10-29 03:03 - 00832000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2015-03-11 22:50 - 2014-10-29 02:59 - 00670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2015-03-11 22:50 - 2014-10-29 02:59 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched20.dll
2015-03-11 22:50 - 2014-10-29 02:56 - 01526784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll
2015-03-11 22:50 - 2014-10-29 02:56 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-03-11 22:50 - 2014-10-29 02:53 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-03-11 22:50 - 2014-10-29 02:53 - 01065984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2015-03-11 22:50 - 2014-10-29 02:53 - 00881152 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2015-03-11 22:50 - 2014-10-29 02:50 - 01289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2015-03-11 22:50 - 2014-10-29 02:50 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.dll
2015-03-11 22:50 - 2014-10-29 02:49 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2015-03-11 22:50 - 2014-10-29 02:49 - 00742400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceqp40.dll
2015-03-11 22:50 - 2014-10-29 02:48 - 01080832 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2015-03-11 22:50 - 2014-10-29 02:48 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-03-11 22:50 - 2014-10-29 02:47 - 01096192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ogldrv.dll
2015-03-11 22:50 - 2014-10-29 02:47 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpssvcs.dll
2015-03-11 22:50 - 2014-10-29 02:46 - 01497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-03-11 22:50 - 2014-10-29 02:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-03-11 22:50 - 2014-10-29 02:45 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll
2015-03-11 22:50 - 2014-10-29 02:45 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\blackbox.dll
2015-03-11 22:50 - 2014-10-29 02:43 - 01092608 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2015-03-11 22:50 - 2014-10-29 02:43 - 00933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2015-03-11 22:50 - 2014-10-29 02:42 - 03724800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2015-03-11 22:50 - 2014-10-29 02:42 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2015-03-11 22:50 - 2014-10-29 02:40 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2015-03-11 22:50 - 2014-10-29 02:39 - 01571328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2015-03-11 22:50 - 2014-10-29 02:39 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2015-03-11 22:50 - 2014-10-29 02:37 - 01563136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2015-03-11 22:50 - 2014-10-29 02:37 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2015-03-11 22:50 - 2014-10-29 02:36 - 00609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll
2015-03-11 22:50 - 2014-10-29 02:35 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2015-03-11 22:50 - 2014-10-29 02:34 - 01114624 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2015-03-11 22:50 - 2014-10-29 02:34 - 01037824 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2015-03-11 22:50 - 2014-10-29 02:33 - 01056768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2015-03-11 22:50 - 2014-10-29 02:32 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2015-03-11 22:50 - 2014-10-29 02:32 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-03-11 22:50 - 2014-10-29 02:32 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll
2015-03-11 22:50 - 2014-10-29 02:32 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmnet.dll
2015-03-11 22:50 - 2014-10-29 02:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2015-03-11 22:50 - 2014-10-29 02:30 - 06465536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2015-03-11 22:50 - 2014-10-29 02:30 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-03-11 22:50 - 2014-10-29 02:29 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2015-03-11 22:50 - 2014-10-29 02:26 - 00838656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2015-03-11 22:50 - 2014-10-29 02:25 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-03-11 22:50 - 2014-10-29 02:25 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll
2015-03-11 22:50 - 2014-10-29 02:24 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-03-11 22:50 - 2014-10-29 02:24 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-03-11 22:50 - 2014-10-29 02:23 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-03-11 22:50 - 2014-10-29 02:21 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-03-11 22:50 - 2014-10-29 02:20 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2015-03-11 22:50 - 2014-10-29 02:19 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2015-03-11 22:50 - 2014-10-29 02:19 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll
2015-03-11 22:50 - 2014-10-29 02:18 - 01050624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2015-03-11 22:50 - 2014-10-29 02:18 - 00967680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2015-03-11 22:50 - 2014-10-29 02:17 - 01402368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2015-03-11 22:50 - 2014-10-29 02:17 - 00829952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll
2015-03-11 22:50 - 2014-10-29 02:16 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2015-03-11 22:50 - 2014-10-29 02:14 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2015-03-11 22:50 - 2014-10-29 02:14 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-03-11 22:50 - 2014-10-29 02:14 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-03-11 22:50 - 2014-10-29 02:14 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-03-11 22:50 - 2014-10-29 02:12 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2015-03-11 22:50 - 2014-10-29 02:12 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2015-03-11 22:50 - 2014-10-29 02:12 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2015-03-11 22:50 - 2014-10-29 02:12 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2015-03-11 22:50 - 2014-10-29 02:12 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2015-03-11 22:50 - 2014-10-29 02:11 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2015-03-11 22:50 - 2014-10-29 02:10 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-03-11 22:50 - 2014-10-29 02:10 - 00516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll
2015-03-11 22:50 - 2014-10-29 02:09 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2015-03-11 22:50 - 2014-10-29 02:09 - 00873984 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2015-03-11 22:50 - 2014-10-29 02:09 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2015-03-11 22:50 - 2014-10-29 02:09 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-03-11 22:50 - 2014-10-29 02:09 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-03-11 22:50 - 2014-10-29 02:08 - 01478144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2015-03-11 22:50 - 2014-10-29 02:08 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2015-03-11 22:50 - 2014-10-29 02:07 - 01396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2015-03-11 22:50 - 2014-10-29 02:07 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2015-03-11 22:50 - 2014-10-29 02:07 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2015-03-11 22:50 - 2014-10-29 02:07 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-03-11 22:50 - 2014-10-29 02:07 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-03-11 22:50 - 2014-10-29 02:06 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2015-03-11 22:50 - 2014-10-29 02:06 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-03-11 22:50 - 2014-10-29 02:05 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-03-11 22:50 - 2014-10-29 02:04 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2015-03-11 22:50 - 2014-10-29 02:03 - 02487296 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2015-03-11 22:50 - 2014-10-29 02:03 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-03-11 22:50 - 2014-10-29 02:03 - 00740352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2015-03-11 22:50 - 2014-10-29 02:01 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2015-03-11 22:50 - 2014-10-29 02:01 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll
2015-03-11 22:50 - 2014-10-29 02:01 - 00843776 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2015-03-11 22:50 - 2014-10-29 02:00 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-03-11 22:50 - 2014-10-29 02:00 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-03-11 22:50 - 2014-10-29 02:00 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2015-03-11 22:50 - 2014-10-29 01:59 - 01636864 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2015-03-11 22:50 - 2014-10-29 01:59 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-03-11 22:50 - 2014-10-29 01:59 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2015-03-11 22:50 - 2014-10-29 01:59 - 01021440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-03-11 22:50 - 2014-10-29 01:59 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2015-03-11 22:50 - 2014-10-29 01:59 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll
2015-03-11 22:50 - 2014-10-29 01:58 - 00926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 01337344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 01248256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 01001984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-03-11 22:50 - 2014-10-29 01:56 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-03-11 22:50 - 2014-10-29 01:56 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-03-11 22:50 - 2014-10-29 01:55 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll
2015-03-11 22:50 - 2014-10-29 01:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-03-11 22:50 - 2014-10-29 01:53 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-03-11 22:50 - 2014-10-29 01:52 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2015-03-11 22:50 - 2014-10-29 01:52 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-03-11 22:50 - 2014-10-29 01:51 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-03-11 22:50 - 2014-10-29 01:51 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2015-03-11 22:50 - 2014-10-29 01:50 - 01482752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2015-03-11 22:50 - 2014-10-29 01:48 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-03-11 22:50 - 2014-10-29 01:48 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-03-11 22:50 - 2014-10-29 01:48 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-03-11 22:50 - 2014-10-29 01:48 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2015-03-11 22:50 - 2014-10-29 01:47 - 02090496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-03-11 22:50 - 2014-10-29 01:47 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2015-03-11 22:50 - 2014-10-29 01:46 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2015-03-11 22:50 - 2014-10-29 01:46 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-03-11 22:50 - 2014-10-29 01:45 - 00918016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2015-03-11 22:50 - 2014-10-29 01:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-03-11 22:50 - 2014-10-29 01:45 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2015-03-11 22:50 - 2014-10-29 01:45 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-03-11 22:50 - 2014-10-29 01:43 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2015-03-11 22:50 - 2014-10-29 01:42 - 01207808 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2015-03-11 22:50 - 2014-10-29 01:42 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2015-03-11 22:50 - 2014-10-29 01:42 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2015-03-11 22:50 - 2014-10-29 01:41 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-03-11 22:50 - 2014-10-29 01:41 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2015-03-11 22:50 - 2014-10-29 01:41 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-03-11 22:50 - 2014-10-29 01:40 - 02104832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2015-03-11 22:50 - 2014-10-29 01:40 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-03-11 22:50 - 2014-10-29 01:38 - 01262080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2015-03-11 22:50 - 2014-10-29 01:37 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-03-11 22:50 - 2014-10-29 01:36 - 00955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-03-11 22:50 - 2014-10-29 01:36 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-03-11 22:50 - 2014-10-29 01:35 - 00772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2015-03-11 22:50 - 2014-10-29 01:35 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2015-03-11 22:50 - 2014-10-29 01:35 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
2015-03-11 22:50 - 2014-10-29 01:33 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2015-03-11 22:50 - 2014-10-29 01:31 - 00626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-03-11 22:50 - 2014-10-29 01:30 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll
2015-03-11 22:50 - 2014-07-04 22:29 - 00478528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-03-11 22:49 - 2014-10-29 05:10 - 00430728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2015-03-11 22:49 - 2014-10-29 05:09 - 01309744 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2015-03-11 22:49 - 2014-10-29 05:04 - 00397192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2015-03-11 22:49 - 2014-10-29 05:04 - 00324864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-03-11 22:49 - 2014-10-29 05:03 - 00435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-03-11 22:49 - 2014-10-29 04:59 - 00520536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-03-11 22:49 - 2014-10-29 04:59 - 00498496 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-03-11 22:49 - 2014-10-29 04:57 - 01150208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2015-03-11 22:49 - 2014-10-29 04:57 - 00725672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2015-03-11 22:49 - 2014-10-29 04:57 - 00662120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.exe
2015-03-11 22:49 - 2014-10-29 04:57 - 00389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-03-11 22:49 - 2014-10-29 04:57 - 00295432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2015-03-11 22:49 - 2014-10-29 04:57 - 00256744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2015-03-11 22:49 - 2014-10-29 04:55 - 00426120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2015-03-11 22:49 - 2014-10-29 04:55 - 00359496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2015-03-11 22:49 - 2014-10-29 04:54 - 00685408 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2015-03-11 22:49 - 2014-10-29 04:53 - 00411128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-03-11 22:49 - 2014-10-29 04:52 - 00356936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-03-11 22:49 - 2014-10-29 04:52 - 00311448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-03-11 22:49 - 2014-10-29 04:52 - 00020160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2015-03-11 22:49 - 2014-10-29 04:51 - 00360992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-03-11 22:49 - 2014-10-29 04:18 - 00320736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2015-03-11 22:49 - 2014-10-29 04:15 - 00340288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-03-11 22:49 - 2014-10-29 04:15 - 00245296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-03-11 22:49 - 2014-10-29 04:12 - 00616704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2015-03-11 22:49 - 2014-10-29 04:12 - 00430176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-03-11 22:49 - 2014-10-29 04:12 - 00403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-03-11 22:49 - 2014-10-29 04:11 - 00492704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL
2015-03-11 22:49 - 2014-10-29 04:11 - 00488064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2015-03-11 22:49 - 2014-10-29 04:11 - 00463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2015-03-11 22:49 - 2014-10-29 04:10 - 00569128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll
2015-03-11 22:49 - 2014-10-29 04:10 - 00547992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2015-03-11 22:49 - 2014-10-29 04:10 - 00367248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2015-03-11 22:49 - 2014-10-29 04:07 - 00399752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-03-11 22:49 - 2014-10-29 04:07 - 00331048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2015-03-11 22:49 - 2014-10-29 04:07 - 00320256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-03-11 22:49 - 2014-10-29 04:06 - 00800008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2015-03-11 22:49 - 2014-10-29 04:06 - 00507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2015-03-11 22:49 - 2014-10-29 03:45 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\glmf32.dll
2015-03-11 22:49 - 2014-10-29 03:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msls31.dll
2015-03-11 22:49 - 2014-10-29 03:44 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-03-11 22:49 - 2014-10-29 03:42 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2015-03-11 22:49 - 2014-10-29 03:40 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2015-03-11 22:49 - 2014-10-29 03:37 - 02329088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0404.dll
2015-03-11 22:49 - 2014-10-29 03:34 - 03438592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0804.dll
2015-03-11 22:49 - 2014-10-29 03:33 - 07558144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll
2015-03-11 22:49 - 2014-10-29 03:31 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2015-03-11 22:49 - 2014-10-29 03:31 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2015-03-11 22:49 - 2014-10-29 03:29 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2015-03-11 22:49 - 2014-10-29 03:28 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2015-03-11 22:49 - 2014-10-29 03:27 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2015-03-11 22:49 - 2014-10-29 03:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartCardSimulator.dll
2015-03-11 22:49 - 2014-10-29 03:25 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2015-03-11 22:49 - 2014-10-29 03:25 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdohlp.dll
2015-03-11 22:49 - 2014-10-29 03:25 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2015-03-11 22:49 - 2014-10-29 03:24 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\WmpDui.dll
2015-03-11 22:49 - 2014-10-29 03:24 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax
2015-03-11 22:49 - 2014-10-29 03:23 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offfilt.dll
2015-03-11 22:49 - 2014-10-29 03:22 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2015-03-11 22:49 - 2014-10-29 03:21 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2015-03-11 22:49 - 2014-10-29 03:20 - 00802304 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2015-03-11 22:49 - 2014-10-29 03:20 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnp.dll
2015-03-11 22:49 - 2014-10-29 03:19 - 09732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll
2015-03-11 22:49 - 2014-10-29 03:18 - 06259712 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-03-11 22:49 - 2014-10-29 03:18 - 04616704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001d.dll
2015-03-11 22:49 - 2014-10-29 03:18 - 02403328 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000c.dll
2015-03-11 22:49 - 2014-10-29 03:18 - 02140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0007.dll
2015-03-11 22:49 - 2014-10-29 03:18 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2015-03-11 22:49 - 2014-10-29 03:17 - 04621312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0414.dll
2015-03-11 22:49 - 2014-10-29 03:17 - 04620288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0816.dll
2015-03-11 22:49 - 2014-10-29 03:17 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000d.dll
2015-03-11 22:49 - 2014-10-29 03:16 - 04621312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0010.dll
2015-03-11 22:49 - 2014-10-29 03:16 - 04616704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0416.dll
2015-03-11 22:49 - 2014-10-29 03:16 - 00546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2015-03-11 22:49 - 2014-10-29 03:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0026.dll
2015-03-11 22:49 - 2014-10-29 03:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0024.dll
2015-03-11 22:49 - 2014-10-29 03:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001b.dll
2015-03-11 22:49 - 2014-10-29 03:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0002.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02075136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0027.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData081a.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001a.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0018.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000f.dll
2015-03-11 22:49 - 2014-10-29 03:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0003.dll
2015-03-11 22:49 - 2014-10-29 03:12 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-03-11 22:49 - 2014-10-29 03:11 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2015-03-11 22:49 - 2014-10-29 03:11 - 00478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2015-03-11 22:49 - 2014-10-29 03:11 - 00435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2015-03-11 22:49 - 2014-10-29 03:08 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2015-03-11 22:49 - 2014-10-29 03:08 - 00390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\difxapi.dll
2015-03-11 22:49 - 2014-10-29 03:07 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2015-03-11 22:49 - 2014-10-29 03:06 - 02902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2015-03-11 22:49 - 2014-10-29 03:06 - 01313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2015-03-11 22:49 - 2014-10-29 03:06 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2015-03-11 22:49 - 2014-10-29 03:05 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2015-03-11 22:49 - 2014-10-29 03:04 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\filemgmt.dll
2015-03-11 22:49 - 2014-10-29 03:04 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2015-03-11 22:49 - 2014-10-29 03:03 - 02334720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2015-03-11 22:49 - 2014-10-29 03:01 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2015-03-11 22:49 - 2014-10-29 03:01 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroleui.dll
2015-03-11 22:49 - 2014-10-29 03:01 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-03-11 22:49 - 2014-10-29 03:00 - 01861632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2015-03-11 22:49 - 2014-10-29 03:00 - 00652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2015-03-11 22:49 - 2014-10-29 03:00 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2015-03-11 22:49 - 2014-10-29 02:59 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2015-03-11 22:49 - 2014-10-29 02:59 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructure.dll
2015-03-11 22:49 - 2014-10-29 02:59 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2015-03-11 22:49 - 2014-10-29 02:58 - 01040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2015-03-11 22:49 - 2014-10-29 02:57 - 02592256 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2015-03-11 22:49 - 2014-10-29 02:57 - 01479168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2015-03-11 22:49 - 2014-10-29 02:57 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2015-03-11 22:49 - 2014-10-29 02:57 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2015-03-11 22:49 - 2014-10-29 02:56 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2015-03-11 22:49 - 2014-10-29 02:56 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2015-03-11 22:49 - 2014-10-29 02:56 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDSp.dll
2015-03-11 22:49 - 2014-10-29 02:55 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2015-03-11 22:49 - 2014-10-29 02:54 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscp.dll
2015-03-11 22:49 - 2014-10-29 02:54 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2015-03-11 22:49 - 2014-10-29 02:54 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-03-11 22:49 - 2014-10-29 02:54 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2015-03-11 22:49 - 2014-10-29 02:53 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-03-11 22:49 - 2014-10-29 02:53 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcese40.dll
2015-03-11 22:49 - 2014-10-29 02:52 - 02829312 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2015-03-11 22:49 - 2014-10-29 02:52 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2015-03-11 22:49 - 2014-10-29 02:52 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2015-03-11 22:49 - 2014-10-29 02:52 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-03-11 22:49 - 2014-10-29 02:52 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2015-03-11 22:49 - 2014-10-29 02:51 - 07331840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll
2015-03-11 22:49 - 2014-10-29 02:50 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdri.dll
2015-03-11 22:49 - 2014-10-29 02:49 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll
2015-03-11 22:49 - 2014-10-29 02:49 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe
2015-03-11 22:49 - 2014-10-29 02:49 - 00478720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2015-03-11 22:49 - 2014-10-29 02:48 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsmsnap.dll
2015-03-11 22:49 - 2014-10-29 02:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70804.dll
2015-03-11 22:49 - 2014-10-29 02:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70404.dll
2015-03-11 22:49 - 2014-10-29 02:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7001E.dll
2015-03-11 22:49 - 2014-10-29 02:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll
2015-03-11 22:49 - 2014-10-29 02:47 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2015-03-11 22:49 - 2014-10-29 02:47 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2015-03-11 22:49 - 2014-10-29 02:46 - 01001472 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2015-03-11 22:49 - 2014-10-29 02:46 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2015-03-11 22:49 - 2014-10-29 02:45 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-03-11 22:49 - 2014-10-29 02:44 - 00872960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2015-03-11 22:49 - 2014-10-29 02:44 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2015-03-11 22:49 - 2014-10-29 02:43 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-03-11 22:49 - 2014-10-29 02:43 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax
2015-03-11 22:49 - 2014-10-29 02:42 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2015-03-11 22:49 - 2014-10-29 02:42 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2015-03-11 22:49 - 2014-10-29 02:41 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2015-03-11 22:49 - 2014-10-29 02:41 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2015-03-11 22:49 - 2014-10-29 02:41 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnp.dll
2015-03-11 22:49 - 2014-10-29 02:38 - 04945920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-03-11 22:49 - 2014-10-29 02:38 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSE.dll
2015-03-11 22:49 - 2014-10-29 02:36 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2015-03-11 22:49 - 2014-10-29 02:36 - 01252864 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2015-03-11 22:49 - 2014-10-29 02:36 - 01008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-03-11 22:49 - 2014-10-29 02:36 - 00943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe
2015-03-11 22:49 - 2014-10-29 02:36 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2015-03-11 22:49 - 2014-10-29 02:36 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2015-03-11 22:49 - 2014-10-29 02:34 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2015-03-11 22:49 - 2014-10-29 02:34 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2015-03-11 22:49 - 2014-10-29 02:34 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2015-03-11 22:49 - 2014-10-29 02:33 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2015-03-11 22:49 - 2014-10-29 02:33 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2015-03-11 22:49 - 2014-10-29 02:33 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2015-03-11 22:49 - 2014-10-29 02:33 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2015-03-11 22:49 - 2014-10-29 02:32 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2015-03-11 22:49 - 2014-10-29 02:32 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2015-03-11 22:49 - 2014-10-29 02:31 - 01278464 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2015-03-11 22:49 - 2014-10-29 02:31 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2015-03-11 22:49 - 2014-10-29 02:31 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2015-03-11 22:49 - 2014-10-29 02:30 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2015-03-11 22:49 - 2014-10-29 02:30 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-03-11 22:49 - 2014-10-29 02:30 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2015-03-11 22:49 - 2014-10-29 02:30 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2015-03-11 22:49 - 2014-10-29 02:30 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-03-11 22:49 - 2014-10-29 02:30 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2015-03-11 22:49 - 2014-10-29 02:29 - 02848768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2015-03-11 22:49 - 2014-10-29 02:29 - 00464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2015-03-11 22:49 - 2014-10-29 02:29 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2015-03-11 22:49 - 2014-10-29 02:29 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-03-11 22:49 - 2014-10-29 02:29 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2015-03-11 22:49 - 2014-10-29 02:28 - 02213888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2015-03-11 22:49 - 2014-10-29 02:27 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-03-11 22:49 - 2014-10-29 02:27 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2015-03-11 22:49 - 2014-10-29 02:26 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2015-03-11 22:49 - 2014-10-29 02:26 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-03-11 22:49 - 2014-10-29 02:25 - 01058816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2015-03-11 22:49 - 2014-10-29 02:24 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2015-03-11 22:49 - 2014-10-29 02:24 - 00902144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2015-03-11 22:49 - 2014-10-29 02:24 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2015-03-11 22:49 - 2014-10-29 02:23 - 01826304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2015-03-11 22:49 - 2014-10-29 02:23 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2015-03-11 22:49 - 2014-10-29 02:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\livessp.dll
2015-03-11 22:49 - 2014-10-29 02:23 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2015-03-11 22:49 - 2014-10-29 02:22 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2015-03-11 22:49 - 2014-10-29 02:22 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2015-03-11 22:49 - 2014-10-29 02:22 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdelta.dll
2015-03-11 22:49 - 2014-10-29 02:22 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2015-03-11 22:49 - 2014-10-29 02:22 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2015-03-11 22:49 - 2014-10-29 02:21 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
2015-03-11 22:49 - 2014-10-29 02:21 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-03-11 22:49 - 2014-10-29 02:21 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscp.dll
2015-03-11 22:49 - 2014-10-29 02:21 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2015-03-11 22:49 - 2014-10-29 02:21 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2015-03-11 22:49 - 2014-10-29 02:20 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2015-03-11 22:49 - 2014-10-29 02:20 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll
2015-03-11 22:49 - 2014-10-29 02:20 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2015-03-11 22:49 - 2014-10-29 02:19 - 02714624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2015-03-11 22:49 - 2014-10-29 02:19 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2015-03-11 22:49 - 2014-10-29 02:19 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2015-03-11 22:49 - 2014-10-29 02:19 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2015-03-11 22:49 - 2014-10-29 02:18 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll
2015-03-11 22:49 - 2014-10-29 02:18 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2015-03-11 22:49 - 2014-10-29 02:18 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
2015-03-11 22:49 - 2014-10-29 02:17 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2015-03-11 22:49 - 2014-10-29 02:17 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-03-11 22:49 - 2014-10-29 02:17 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsmsnap.dll
2015-03-11 22:49 - 2014-10-29 02:17 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 01242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 00795136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_isv.exe
2015-03-11 22:49 - 2014-10-29 02:16 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_isv.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-03-11 22:49 - 2014-10-29 02:16 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2015-03-11 22:49 - 2014-10-29 02:15 - 00809472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-03-11 22:49 - 2014-10-29 02:15 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate.exe
2015-03-11 22:49 - 2014-10-29 02:15 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2015-03-11 22:49 - 2014-10-29 02:14 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-03-11 22:49 - 2014-10-29 02:13 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-03-11 22:49 - 2014-10-29 02:12 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2015-03-11 22:49 - 2014-10-29 02:12 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2015-03-11 22:49 - 2014-10-29 02:11 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2015-03-11 22:49 - 2014-10-29 02:11 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2015-03-11 22:49 - 2014-10-29 02:10 - 00442880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2015-03-11 22:49 - 2014-10-29 02:09 - 00633344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2015-03-11 22:49 - 2014-10-29 02:09 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-03-11 22:49 - 2014-10-29 02:09 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll
2015-03-11 22:49 - 2014-10-29 02:09 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2015-03-11 22:49 - 2014-10-29 02:08 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2015-03-11 22:49 - 2014-10-29 02:07 - 01197056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2015-03-11 22:49 - 2014-10-29 02:07 - 00594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
         

FRST Fortsetzung:

2015-03-11 22:49 - 2014-10-29 02:07 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2015-03-11 22:49 - 2014-10-29 02:07 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-03-11 22:49 - 2014-10-29 02:06 - 01086976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2015-03-11 22:49 - 2014-10-29 02:06 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-03-11 22:49 - 2014-10-29 02:06 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2015-03-11 22:49 - 2014-10-29 02:06 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2015-03-11 22:49 - 2014-10-29 02:06 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2015-03-11 22:49 - 2014-10-29 02:05 - 00534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-03-11 22:49 - 2014-10-29 02:05 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2015-03-11 22:49 - 2014-10-29 02:04 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-03-11 22:49 - 2014-10-29 02:04 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2015-03-11 22:49 - 2014-10-29 02:04 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-03-11 22:49 - 2014-10-29 02:04 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2015-03-11 22:49 - 2014-10-29 02:04 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2015-03-11 22:49 - 2014-10-29 02:03 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2015-03-11 22:49 - 2014-10-29 02:03 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2015-03-11 22:49 - 2014-10-29 02:03 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-03-11 22:49 - 2014-10-29 02:02 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-03-11 22:49 - 2014-10-29 02:02 - 00695296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 01241600 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 00706048 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 00657408 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2015-03-11 22:49 - 2014-10-29 02:01 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2015-03-11 22:49 - 2014-10-29 02:00 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll
2015-03-11 22:49 - 2014-10-29 02:00 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-03-11 22:49 - 2014-10-29 01:59 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2015-03-11 22:49 - 2014-10-29 01:59 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2015-03-11 22:49 - 2014-10-29 01:59 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxApplicabilityEngine.dll
2015-03-11 22:49 - 2014-10-29 01:59 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2015-03-11 22:49 - 2014-10-29 01:58 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-03-11 22:49 - 2014-10-29 01:58 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-03-11 22:49 - 2014-10-29 01:58 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2015-03-11 22:49 - 2014-10-29 01:58 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2015-03-11 22:49 - 2014-10-29 01:58 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2015-03-11 22:49 - 2014-10-29 01:57 - 01065472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10.dll
2015-03-11 22:49 - 2014-10-29 01:57 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_isv.exe
2015-03-11 22:49 - 2014-10-29 01:57 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate.exe
2015-03-11 22:49 - 2014-10-29 01:57 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2015-03-11 22:49 - 2014-10-29 01:57 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_isv.dll
2015-03-11 22:49 - 2014-10-29 01:57 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2015-03-11 22:49 - 2014-10-29 01:56 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-03-11 22:49 - 2014-10-29 01:56 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2015-03-11 22:49 - 2014-10-29 01:55 - 00887808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim700.dll
2015-03-11 22:49 - 2014-10-29 01:55 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2015-03-11 22:49 - 2014-10-29 01:55 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2015-03-11 22:49 - 2014-10-29 01:55 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2015-03-11 22:49 - 2014-10-29 01:55 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2015-03-11 22:49 - 2014-10-29 01:54 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2015-03-11 22:49 - 2014-10-29 01:54 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-03-11 22:49 - 2014-10-29 01:53 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2015-03-11 22:49 - 2014-10-29 01:53 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-03-11 22:49 - 2014-10-29 01:53 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-03-11 22:49 - 2014-10-29 01:52 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2015-03-11 22:49 - 2014-10-29 01:52 - 00544256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2015-03-11 22:49 - 2014-10-29 01:51 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2015-03-11 22:49 - 2014-10-29 01:51 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2015-03-11 22:49 - 2014-10-29 01:51 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll
2015-03-11 22:49 - 2014-10-29 01:51 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-03-11 22:49 - 2014-10-29 01:50 - 00624128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2015-03-11 22:49 - 2014-10-29 01:50 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2015-03-11 22:49 - 2014-10-29 01:50 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-03-11 22:49 - 2014-10-29 01:50 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-03-11 22:49 - 2014-10-29 01:50 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2015-03-11 22:49 - 2014-10-29 01:48 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2015-03-11 22:49 - 2014-10-29 01:48 - 00454144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00527872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2015-03-11 22:49 - 2014-10-29 01:47 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2015-03-11 22:49 - 2014-10-29 01:45 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll
2015-03-11 22:49 - 2014-10-29 01:45 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-03-11 22:49 - 2014-10-29 01:44 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-03-11 22:49 - 2014-10-29 01:44 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-03-11 22:49 - 2014-10-29 01:43 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-03-11 22:49 - 2014-10-29 01:43 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-03-11 22:49 - 2014-10-29 01:42 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-03-11 22:49 - 2014-10-29 01:42 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2015-03-11 22:49 - 2014-10-29 01:42 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2015-03-11 22:49 - 2014-10-29 01:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provsvc.dll
2015-03-11 22:49 - 2014-10-29 01:42 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2015-03-11 22:49 - 2014-10-29 01:40 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2015-03-11 22:49 - 2014-10-29 01:39 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2015-03-11 22:49 - 2014-10-29 01:39 - 00454144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2015-03-11 22:49 - 2014-10-29 01:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll
2015-03-11 22:49 - 2014-10-29 01:37 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-03-11 22:49 - 2014-10-29 01:35 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll
2015-03-11 22:49 - 2014-10-29 01:35 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-03-11 22:49 - 2014-10-29 01:32 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-03-11 22:49 - 2014-10-15 09:32 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-03-11 22:49 - 2014-10-08 08:33 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2015-03-11 22:49 - 2014-10-08 08:32 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-03-11 22:49 - 2014-10-07 07:44 - 00533824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-03-11 22:48 - 2014-10-29 05:09 - 00315576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2015-03-11 22:48 - 2014-10-29 05:09 - 00294880 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2015-03-11 22:48 - 2014-10-29 05:09 - 00233448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe
2015-03-11 22:48 - 2014-10-29 05:09 - 00214360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2015-03-11 22:48 - 2014-10-29 05:04 - 00217912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2015-03-11 22:48 - 2014-10-29 04:59 - 00415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2015-03-11 22:48 - 2014-10-29 04:59 - 00230816 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2015-03-11 22:48 - 2014-10-29 04:58 - 01797944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2015-03-11 22:48 - 2014-10-29 04:57 - 01913128 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplaySwitch.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2015-03-11 22:48 - 2014-10-29 04:57 - 00629576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2015-03-11 22:48 - 2014-10-29 04:57 - 00339312 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2015-03-11 22:48 - 2014-10-29 04:57 - 00271152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00217432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2015-03-11 22:48 - 2014-10-29 04:57 - 00034568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraSettingsUIHost.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00029408 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerHost.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00027360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsRemoveDevice.exe
2015-03-11 22:48 - 2014-10-29 04:57 - 00018584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SlideToShutDown.exe
2015-03-11 22:48 - 2014-10-29 04:55 - 00305192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll
2015-03-11 22:48 - 2014-10-29 04:53 - 00687496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2015-03-11 22:48 - 2014-10-29 04:52 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2015-03-11 22:48 - 2014-10-29 04:52 - 00225696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2015-03-11 22:48 - 2014-10-29 04:51 - 00363080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2015-03-11 22:48 - 2014-10-29 04:51 - 00179736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2015-03-11 22:48 - 2014-10-29 04:18 - 00241168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2015-03-11 22:48 - 2014-10-29 04:15 - 00340848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2015-03-11 22:48 - 2014-10-29 04:15 - 00192096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2015-03-11 22:48 - 2014-10-29 04:13 - 00185880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2015-03-11 22:48 - 2014-10-29 04:12 - 00416760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-03-11 22:48 - 2014-10-29 04:11 - 00245296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2015-03-11 22:48 - 2014-10-29 04:11 - 00191104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2015-03-11 22:48 - 2014-10-29 04:11 - 00187488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2015-03-11 22:48 - 2014-10-29 04:10 - 01906872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplaySwitch.exe
2015-03-11 22:48 - 2014-10-29 04:10 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2015-03-11 22:48 - 2014-10-29 04:10 - 00276816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2015-03-11 22:48 - 2014-10-29 04:10 - 00272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll
2015-03-11 22:48 - 2014-10-29 04:07 - 00336680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2015-03-11 22:48 - 2014-10-29 04:07 - 00260800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-03-11 22:48 - 2014-10-29 04:07 - 00202440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2015-03-11 22:48 - 2014-10-29 04:07 - 00019096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksuser.dll
2015-03-11 22:48 - 2014-10-29 04:05 - 00321248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2015-03-11 22:48 - 2014-10-29 04:05 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-03-11 22:48 - 2014-10-29 03:56 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2015-03-11 22:48 - 2014-10-29 03:49 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp60.dll
2015-03-11 22:48 - 2014-10-29 03:46 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2015-03-11 22:48 - 2014-10-29 03:45 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-03-11 22:48 - 2014-10-29 03:45 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2015-03-11 22:48 - 2014-10-29 03:42 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2015-03-11 22:48 - 2014-10-29 03:41 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-03-11 22:48 - 2014-10-29 03:41 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2015-03-11 22:48 - 2014-10-29 03:41 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-03-11 22:48 - 2014-10-29 03:40 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
2015-03-11 22:48 - 2014-10-29 03:36 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\prncache.dll
2015-03-11 22:48 - 2014-10-29 03:35 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldp.dll
2015-03-11 22:48 - 2014-10-29 03:33 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data001E.dll
2015-03-11 22:48 - 2014-10-29 03:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\migflt.dll
2015-03-11 22:48 - 2014-10-29 03:32 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceoledb40.dll
2015-03-11 22:48 - 2014-10-29 03:31 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cewmdm.dll
2015-03-11 22:48 - 2014-10-29 03:30 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsClassExtension.dll
2015-03-11 22:48 - 2014-10-29 03:29 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2015-03-11 22:48 - 2014-10-29 03:28 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscobj.dll
2015-03-11 22:48 - 2014-10-29 03:27 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskraid.exe
2015-03-11 22:48 - 2014-10-29 03:27 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdv.dll
2015-03-11 22:48 - 2014-10-29 03:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssha.dll
2015-03-11 22:48 - 2014-10-29 03:27 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2015-03-11 22:48 - 2014-10-29 03:27 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdspa.dll
2015-03-11 22:48 - 2014-10-29 03:27 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfdvdec.dll
2015-03-11 22:48 - 2014-10-29 03:26 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2015-03-11 22:48 - 2014-10-29 03:26 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-03-11 22:48 - 2014-10-29 03:26 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2015-03-11 22:48 - 2014-10-29 03:26 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpresult.exe
2015-03-11 22:48 - 2014-10-29 03:24 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2015-03-11 22:48 - 2014-10-29 03:22 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2015-03-11 22:48 - 2014-10-29 03:21 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2015-03-11 22:48 - 2014-10-29 03:21 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2015-03-11 22:48 - 2014-10-29 03:20 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\QAGENTRT.DLL
2015-03-11 22:48 - 2014-10-29 03:20 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2015-03-11 22:48 - 2014-10-29 03:19 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2015-03-11 22:48 - 2014-10-29 03:18 - 01609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0000.dll
2015-03-11 22:48 - 2014-10-29 03:18 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscandui.dll
2015-03-11 22:48 - 2014-10-29 03:18 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2015-03-11 22:48 - 2014-10-29 03:17 - 03231232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004b.dll
2015-03-11 22:48 - 2014-10-29 03:17 - 01926144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0022.dll
2015-03-11 22:48 - 2014-10-29 03:16 - 03235840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0039.dll
2015-03-11 22:48 - 2014-10-29 03:16 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004a.dll
2015-03-11 22:48 - 2014-10-29 03:16 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll
2015-03-11 22:48 - 2014-10-29 03:16 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdapi.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004e.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0049.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0047.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0046.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0020.dll
2015-03-11 22:48 - 2014-10-29 03:15 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData002a.dll
2015-03-11 22:48 - 2014-10-29 03:14 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004c.dll
2015-03-11 22:48 - 2014-10-29 03:14 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0045.dll
2015-03-11 22:48 - 2014-10-29 03:14 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData003e.dll
2015-03-11 22:48 - 2014-10-29 03:14 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0021.dll
2015-03-11 22:48 - 2014-10-29 03:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll
2015-03-11 22:48 - 2014-10-29 03:12 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll
2015-03-11 22:48 - 2014-10-29 03:11 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
2015-03-11 22:48 - 2014-10-29 03:11 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgprint.dll
2015-03-11 22:48 - 2014-10-29 03:10 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2015-03-11 22:48 - 2014-10-29 03:09 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppIdPolicyEngineApi.dll
2015-03-11 22:48 - 2014-10-29 03:09 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdsvc.dll
2015-03-11 22:48 - 2014-10-29 03:08 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdprint.dll
2015-03-11 22:48 - 2014-10-29 03:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrptadm.dll
2015-03-11 22:48 - 2014-10-29 03:05 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2015-03-11 22:48 - 2014-10-29 03:04 - 00612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IasMigPlugin.dll
2015-03-11 22:48 - 2014-10-29 03:04 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\devmgr.dll
2015-03-11 22:48 - 2014-10-29 03:04 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2015-03-11 22:48 - 2014-10-29 03:04 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2015-03-11 22:48 - 2014-10-29 03:03 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-03-11 22:48 - 2014-10-29 03:03 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpdui.dll
2015-03-11 22:48 - 2014-10-29 03:02 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\localsec.dll
2015-03-11 22:48 - 2014-10-29 03:02 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizards.dll
2015-03-11 22:48 - 2014-10-29 03:02 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmontr.dll
2015-03-11 22:48 - 2014-10-29 03:02 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmstormod.dll
2015-03-11 22:48 - 2014-10-29 03:01 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2015-03-11 22:48 - 2014-10-29 03:01 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-03-11 22:48 - 2014-10-29 03:01 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2015-03-11 22:48 - 2014-10-29 03:00 - 03814400 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2015-03-11 22:48 - 2014-10-29 03:00 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glmf32.dll
2015-03-11 22:48 - 2014-10-29 03:00 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2015-03-11 22:48 - 2014-10-29 03:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msls31.dll
2015-03-11 22:48 - 2014-10-29 02:58 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-03-11 22:48 - 2014-10-29 02:58 - 00423424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2015-03-11 22:48 - 2014-10-29 02:57 - 01431552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxpTaskSync.dll
2015-03-11 22:48 - 2014-10-29 02:57 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2015-03-11 22:48 - 2014-10-29 02:57 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2015-03-11 22:48 - 2014-10-29 02:56 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mblctr.exe
2015-03-11 22:48 - 2014-10-29 02:56 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-03-11 22:48 - 2014-10-29 02:54 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2015-03-11 22:48 - 2014-10-29 02:54 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim.dll
2015-03-11 22:48 - 2014-10-29 02:53 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0404.dll
2015-03-11 22:48 - 2014-10-29 02:53 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2015-03-11 22:48 - 2014-10-29 02:52 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0804.dll
2015-03-11 22:48 - 2014-10-29 02:52 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsecsnp.dll
2015-03-11 22:48 - 2014-10-29 02:52 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netdiagfx.dll
2015-03-11 22:48 - 2014-10-29 02:52 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-03-11 22:48 - 2014-10-29 02:52 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldp.dll
2015-03-11 22:48 - 2014-10-29 02:50 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceoledb40.dll
2015-03-11 22:48 - 2014-10-29 02:49 - 00771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2015-03-11 22:48 - 2014-10-29 02:49 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2015-03-11 22:48 - 2014-10-29 02:49 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2015-03-11 22:48 - 2014-10-29 02:49 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmime.dll
2015-03-11 22:48 - 2014-10-29 02:48 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\connect.dll
2015-03-11 22:48 - 2014-10-29 02:48 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe
2015-03-11 22:48 - 2014-10-29 02:47 - 01041920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2015-03-11 22:48 - 2014-10-29 02:47 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2015-03-11 22:48 - 2014-10-29 02:47 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscobj.dll
2015-03-11 22:48 - 2014-10-29 02:46 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2015-03-11 22:48 - 2014-10-29 02:46 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdv.dll
2015-03-11 22:48 - 2014-10-29 02:46 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsnt.dll
2015-03-11 22:48 - 2014-10-29 02:46 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskraid.exe
2015-03-11 22:48 - 2014-10-29 02:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
2015-03-11 22:48 - 2014-10-29 02:46 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmvdspa.dll
2015-03-11 22:48 - 2014-10-29 02:46 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfdvdec.dll
2015-03-11 22:48 - 2014-10-29 02:45 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdohlp.dll
2015-03-11 22:48 - 2014-10-29 02:45 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2015-03-11 22:48 - 2014-10-29 02:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmmgrtn.dll
2015-03-11 22:48 - 2014-10-29 02:44 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2015-03-11 22:48 - 2014-10-29 02:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2015-03-11 22:48 - 2014-10-29 02:43 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-03-11 22:48 - 2014-10-29 02:43 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2015-03-11 22:48 - 2014-10-29 02:43 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2015-03-11 22:48 - 2014-10-29 02:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WmpDui.dll
2015-03-11 22:48 - 2014-10-29 02:43 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2015-03-11 22:48 - 2014-10-29 02:43 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offfilt.dll
2015-03-11 22:48 - 2014-10-29 02:42 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2015-03-11 22:48 - 2014-10-29 02:41 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2015-03-11 22:48 - 2014-10-29 02:40 - 02036224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0007.dll
2015-03-11 22:48 - 2014-10-29 02:40 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshipsec.dll
2015-03-11 22:48 - 2014-10-29 02:39 - 09604608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll
2015-03-11 22:48 - 2014-10-29 02:39 - 04531712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0416.dll
2015-03-11 22:48 - 2014-10-29 02:39 - 04530688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001d.dll
2015-03-11 22:48 - 2014-10-29 02:39 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2015-03-11 22:48 - 2014-10-29 02:39 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscandui.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 04530688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0010.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 04530176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0414.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 04529664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0816.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 02387456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000d.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000c.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 02012160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0026.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 02012160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000f.dll
2015-03-11 22:48 - 2014-10-29 02:38 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2015-03-11 22:48 - 2014-10-29 02:37 - 03149824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0039.dll
2015-03-11 22:48 - 2014-10-29 02:37 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData002a.dll
2015-03-11 22:48 - 2014-10-29 02:37 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsnap.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004e.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004c.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004b.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004a.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0049.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0047.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0046.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0045.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0020.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01999360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0027.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData081a.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0024.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001b.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001a.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0018.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0003.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0002.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData003e.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0022.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0021.dll
2015-03-11 22:48 - 2014-10-29 02:36 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2015-03-11 22:48 - 2014-10-29 02:35 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2015-03-11 22:48 - 2014-10-29 02:34 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll
2015-03-11 22:48 - 2014-10-29 02:34 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-03-11 22:48 - 2014-10-29 02:34 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2015-03-11 22:48 - 2014-10-29 02:31 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netjoin.dll
2015-03-11 22:48 - 2014-10-29 02:30 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll
2015-03-11 22:48 - 2014-10-29 02:30 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrptadm.dll
2015-03-11 22:48 - 2014-10-29 02:29 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IasMigPlugin.dll
2015-03-11 22:48 - 2014-10-29 02:29 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll
2015-03-11 22:48 - 2014-10-29 02:29 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devmgr.dll
2015-03-11 22:48 - 2014-10-29 02:29 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-03-11 22:48 - 2014-10-29 02:29 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-03-11 22:48 - 2014-10-29 02:28 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2015-03-11 22:48 - 2014-10-29 02:28 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2015-03-11 22:48 - 2014-10-29 02:28 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2015-03-11 22:48 - 2014-10-29 02:28 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2015-03-11 22:48 - 2014-10-29 02:28 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00763392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2015-03-11 22:48 - 2014-10-29 02:27 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizards.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmontr.dll
2015-03-11 22:48 - 2014-10-29 02:27 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-03-11 22:48 - 2014-10-29 02:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2015-03-11 22:48 - 2014-10-29 02:26 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-03-11 22:48 - 2014-10-29 02:25 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2015-03-11 22:48 - 2014-10-29 02:25 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructure.dll
2015-03-11 22:48 - 2014-10-29 02:25 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2015-03-11 22:48 - 2014-10-29 02:25 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe
2015-03-11 22:48 - 2014-10-29 02:25 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2015-03-11 22:48 - 2014-10-29 02:24 - 01389056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxpTaskSync.dll
2015-03-11 22:48 - 2014-10-29 02:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2015-03-11 22:48 - 2014-10-29 02:24 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Geolocation.dll
2015-03-11 22:48 - 2014-10-29 02:24 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2015-03-11 22:48 - 2014-10-29 02:23 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDSp.dll
2015-03-11 22:48 - 2014-10-29 02:23 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2015-03-11 22:48 - 2014-10-29 02:22 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2015-03-11 22:48 - 2014-10-29 02:22 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-03-11 22:48 - 2014-10-29 02:22 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-03-11 22:48 - 2014-10-29 02:22 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2015-03-11 22:48 - 2014-10-29 02:21 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2015-03-11 22:48 - 2014-10-29 02:21 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2015-03-11 22:48 - 2014-10-29 02:21 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2015-03-11 22:48 - 2014-10-29 02:21 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-03-11 22:48 - 2014-10-29 02:21 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsecsnp.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2015-03-11 22:48 - 2014-10-29 02:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2015-03-11 22:48 - 2014-10-29 02:19 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2015-03-11 22:48 - 2014-10-29 02:19 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1core.dll
2015-03-11 22:48 - 2014-10-29 02:19 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10core.dll
2015-03-11 22:48 - 2014-10-29 02:18 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL
2015-03-11 22:48 - 2014-10-29 02:18 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-03-11 22:48 - 2014-10-29 02:17 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2015-03-11 22:48 - 2014-10-29 02:17 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll
2015-03-11 22:48 - 2014-10-29 02:17 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-03-11 22:48 - 2014-10-29 02:17 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2015-03-11 22:48 - 2014-10-29 02:17 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-03-11 22:48 - 2014-10-29 02:17 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2015-03-11 22:48 - 2014-10-29 02:16 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authfwcfg.dll
2015-03-11 22:48 - 2014-10-29 02:16 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmmgrtn.dll
2015-03-11 22:48 - 2014-10-29 02:16 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-03-11 22:48 - 2014-10-29 02:16 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoeacct.dll
2015-03-11 22:48 - 2014-10-29 02:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-03-11 22:48 - 2014-10-29 02:14 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp_isv.exe
2015-03-11 22:48 - 2014-10-29 02:14 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp.exe
2015-03-11 22:48 - 2014-10-29 02:13 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-03-11 22:48 - 2014-10-29 02:13 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-03-11 22:48 - 2014-10-29 02:12 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2015-03-11 22:48 - 2014-10-29 02:12 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2015-03-11 22:48 - 2014-10-29 02:12 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2015-03-11 22:48 - 2014-10-29 02:12 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2015-03-11 22:48 - 2014-10-29 02:11 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-03-11 22:48 - 2014-10-29 02:11 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtckrm.dll
2015-03-11 22:48 - 2014-10-29 02:10 - 00516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2015-03-11 22:48 - 2014-10-29 02:10 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2015-03-11 22:48 - 2014-10-29 02:10 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2015-03-11 22:48 - 2014-10-29 02:08 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2015-03-11 22:48 - 2014-10-29 02:07 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2015-03-11 22:48 - 2014-10-29 02:06 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-03-11 22:48 - 2014-10-29 02:05 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2015-03-11 22:48 - 2014-10-29 02:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2015-03-11 22:48 - 2014-10-29 02:05 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll
2015-03-11 22:48 - 2014-10-29 02:05 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2015-03-11 22:48 - 2014-10-29 02:05 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netjoin.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2015-03-11 22:48 - 2014-10-29 02:04 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2015-03-11 22:48 - 2014-10-29 02:03 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2015-03-11 22:48 - 2014-10-29 02:03 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2015-03-11 22:48 - 2014-10-29 02:03 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-03-11 22:48 - 2014-10-29 02:03 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2015-03-11 22:48 - 2014-10-29 02:03 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2015-03-11 22:48 - 2014-10-29 02:01 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdelta.dll
2015-03-11 22:48 - 2014-10-29 02:01 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2015-03-11 22:48 - 2014-10-29 02:00 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1core.dll
2015-03-11 22:48 - 2014-10-29 02:00 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2015-03-11 22:48 - 2014-10-29 02:00 - 00200192 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10core.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2015-03-11 22:48 - 2014-10-29 01:59 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2015-03-11 22:48 - 2014-10-29 01:58 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2015-03-11 22:48 - 2014-10-29 01:58 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll
2015-03-11 22:48 - 2014-10-29 01:58 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-03-11 22:48 - 2014-10-29 01:57 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll
2015-03-11 22:48 - 2014-10-29 01:57 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authfwcfg.dll
2015-03-11 22:48 - 2014-10-29 01:57 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2015-03-11 22:48 - 2014-10-29 01:57 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2015-03-11 22:48 - 2014-10-29 01:56 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-03-11 22:48 - 2014-10-29 01:56 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe
2015-03-11 22:48 - 2014-10-29 01:56 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp.exe
2015-03-11 22:48 - 2014-10-29 01:56 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-03-11 22:48 - 2014-10-29 01:56 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll
2015-03-11 22:48 - 2014-10-29 01:56 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2015-03-11 22:48 - 2014-10-29 01:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPMONTR.DLL
2015-03-11 22:48 - 2014-10-29 01:54 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceTypes.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2015-03-11 22:48 - 2014-10-29 01:54 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_8.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2015-03-11 22:48 - 2014-10-29 01:53 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 01024512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2015-03-11 22:48 - 2014-10-29 01:52 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.SpeechSynthesis.dll
2015-03-11 22:48 - 2014-10-29 01:51 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2015-03-11 22:48 - 2014-10-29 01:51 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2015-03-11 22:48 - 2014-10-29 01:50 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallControlPanel.dll
2015-03-11 22:48 - 2014-10-29 01:49 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2015-03-11 22:48 - 2014-10-29 01:49 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2015-03-11 22:48 - 2014-10-29 01:49 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2015-03-11 22:48 - 2014-10-29 01:49 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2015-03-11 22:48 - 2014-10-29 01:49 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-03-11 22:48 - 2014-10-29 01:48 - 01170432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll
2015-03-11 22:48 - 2014-10-29 01:48 - 00481280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2015-03-11 22:48 - 2014-10-29 01:48 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2015-03-11 22:48 - 2014-10-29 01:47 - 00628224 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-03-11 22:48 - 2014-10-29 01:46 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-03-11 22:48 - 2014-10-29 01:46 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-03-11 22:48 - 2014-10-29 01:46 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2015-03-11 22:48 - 2014-10-29 01:45 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.dll
2015-03-11 22:48 - 2014-10-29 01:44 - 00732672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll
2015-03-11 22:48 - 2014-10-29 01:44 - 00561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-03-11 22:48 - 2014-10-29 01:44 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2015-03-11 22:48 - 2014-10-29 01:44 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2015-03-11 22:48 - 2014-10-29 01:43 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll
2015-03-11 22:48 - 2014-10-29 01:42 - 00865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallControlPanel.dll
2015-03-11 22:48 - 2014-10-29 01:41 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-03-11 22:48 - 2014-10-29 01:41 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-03-11 22:48 - 2014-10-29 01:38 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2015-03-11 22:48 - 2014-10-29 01:35 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-03-11 22:48 - 2014-10-29 01:30 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-03-11 22:48 - 2014-10-15 09:32 - 00337728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2015-03-11 22:48 - 2014-10-08 10:24 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-03-11 22:48 - 2014-09-27 05:59 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-03-11 22:48 - 2014-08-26 04:30 - 00354112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2015-03-11 22:47 - 2014-10-29 05:09 - 00371304 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.dll
2015-03-11 22:47 - 2014-10-29 05:09 - 00155456 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2015-03-11 22:47 - 2014-10-29 05:09 - 00145144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll
2015-03-11 22:47 - 2014-10-29 05:09 - 00103744 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedapplauncher.exe
2015-03-11 22:47 - 2014-10-29 05:09 - 00017560 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00196264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00181816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-03-11 22:47 - 2014-10-29 05:04 - 00153336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00136912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00135304 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00120384 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2015-03-11 22:47 - 2014-10-29 05:04 - 00105872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2015-03-11 22:47 - 2014-10-29 05:00 - 00297512 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2015-03-11 22:47 - 2014-10-29 05:00 - 00210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2015-03-11 22:47 - 2014-10-29 05:00 - 00142000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxva2.dll
2015-03-11 22:47 - 2014-10-29 05:00 - 00125504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-03-11 22:47 - 2014-10-29 04:59 - 00105944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2015-03-11 22:47 - 2014-10-29 04:57 - 00447256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2015-03-11 22:47 - 2014-10-29 04:57 - 00299048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL
2015-03-11 22:47 - 2014-10-29 04:57 - 00250488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL
2015-03-11 22:47 - 2014-10-29 04:57 - 00248408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL
2015-03-11 22:47 - 2014-10-29 04:57 - 00246832 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2015-03-11 22:47 - 2014-10-29 04:57 - 00216920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2015-03-11 22:47 - 2014-10-29 04:57 - 00203504 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL
2015-03-11 22:47 - 2014-10-29 04:57 - 00111024 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2015-03-11 22:47 - 2014-10-29 04:57 - 00022208 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.exe
2015-03-11 22:47 - 2014-10-29 04:55 - 00278392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe
2015-03-11 22:47 - 2014-10-29 04:55 - 00019264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2015-03-11 22:47 - 2014-10-29 04:52 - 00244272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-03-11 22:47 - 2014-10-29 04:52 - 00161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2015-03-11 22:47 - 2014-10-29 04:52 - 00132232 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2015-03-11 22:47 - 2014-10-29 04:51 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2015-03-11 22:47 - 2014-10-29 04:51 - 00159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2015-03-11 22:47 - 2014-10-29 04:18 - 00348048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifier.dll
2015-03-11 22:47 - 2014-10-29 04:18 - 00164264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2015-03-11 22:47 - 2014-10-29 04:18 - 00148728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2015-03-11 22:47 - 2014-10-29 04:18 - 00127552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2015-03-11 22:47 - 2014-10-29 04:18 - 00120352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabinet.dll
2015-03-11 22:47 - 2014-10-29 04:15 - 00154392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2015-03-11 22:47 - 2014-10-29 04:15 - 00119800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2015-03-11 22:47 - 2014-10-29 04:15 - 00115672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2015-03-11 22:47 - 2014-10-29 04:15 - 00098152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2015-03-11 22:47 - 2014-10-29 04:12 - 00241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2015-03-11 22:47 - 2014-10-29 04:12 - 00116696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxva2.dll
2015-03-11 22:47 - 2014-10-29 04:12 - 00102728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-03-11 22:47 - 2014-10-29 04:12 - 00087224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2015-03-11 22:47 - 2014-10-29 04:11 - 00275280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL
2015-03-11 22:47 - 2014-10-29 04:11 - 00274256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL
2015-03-11 22:47 - 2014-10-29 04:11 - 00229248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2015-03-11 22:47 - 2014-10-29 04:11 - 00190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe
2015-03-11 22:47 - 2014-10-29 04:11 - 00184888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL
2015-03-11 22:47 - 2014-10-29 04:11 - 00183832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL
2015-03-11 22:47 - 2014-10-29 04:07 - 00136840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2015-03-11 22:47 - 2014-10-29 04:07 - 00134280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2015-03-11 22:47 - 2014-10-29 04:06 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2015-03-11 22:47 - 2014-10-29 04:05 - 00120864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2015-03-11 22:47 - 2014-10-29 03:48 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2015-03-11 22:47 - 2014-10-29 03:46 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2015-03-11 22:47 - 2014-10-29 03:44 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SPInf.dll
2015-03-11 22:47 - 2014-10-29 03:42 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2015-03-11 22:47 - 2014-10-29 03:42 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll
2015-03-11 22:47 - 2014-10-29 03:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnetlib.dll
2015-03-11 22:47 - 2014-10-29 03:41 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\drt.dll
2015-03-11 22:47 - 2014-10-29 03:41 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2015-03-11 22:47 - 2014-10-29 03:37 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
2015-03-11 22:47 - 2014-10-29 03:37 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfui.dll
2015-03-11 22:47 - 2014-10-29 03:36 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2015-03-11 22:47 - 2014-10-29 03:35 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll
2015-03-11 22:47 - 2014-10-29 03:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2015-03-11 22:47 - 2014-10-29 03:34 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsdyn.dll
2015-03-11 22:47 - 2014-10-29 03:34 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rgb9rast.dll
2015-03-11 22:47 - 2014-10-29 03:33 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2015-03-11 22:47 - 2014-10-29 03:33 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2015-03-11 22:47 - 2014-10-29 03:33 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2015-03-11 22:47 - 2014-10-29 03:32 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2015-03-11 22:47 - 2014-10-29 03:32 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcecompact40.dll
2015-03-11 22:47 - 2014-10-29 03:32 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\amstream.dll
2015-03-11 22:47 - 2014-10-29 03:31 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncMetastore.dll
2015-03-11 22:47 - 2014-10-29 03:31 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax
2015-03-11 22:47 - 2014-10-29 03:31 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cca.dll
2015-03-11 22:47 - 2014-10-29 03:29 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
2015-03-11 22:47 - 2014-10-29 03:29 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2015-03-11 22:47 - 2014-10-29 03:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll
2015-03-11 22:47 - 2014-10-29 03:29 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmusic.dll
2015-03-11 22:47 - 2014-10-29 03:28 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2015-03-11 22:47 - 2014-10-29 03:28 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00354816 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsnt.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPSTAT.EXE
2015-03-11 22:47 - 2014-10-29 03:27 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mycomput.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiageng.dll
2015-03-11 22:47 - 2014-10-29 03:27 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgr.exe
2015-03-11 22:47 - 2014-10-29 03:27 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax
2015-03-11 22:47 - 2014-10-29 03:27 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.WorkplaceSettings.dll
2015-03-11 22:47 - 2014-10-29 03:26 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax
2015-03-11 22:47 - 2014-10-29 03:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax
2015-03-11 22:47 - 2014-10-29 03:25 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2015-03-11 22:47 - 2014-10-29 03:25 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2015-03-11 22:47 - 2014-10-29 03:24 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2015-03-11 22:47 - 2014-10-29 03:24 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax
2015-03-11 22:47 - 2014-10-29 03:23 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll
2015-03-11 22:47 - 2014-10-29 03:23 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\elshyph.dll
2015-03-11 22:47 - 2014-10-29 03:23 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2015-03-11 22:47 - 2014-10-29 03:23 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll
2015-03-11 22:47 - 2014-10-29 03:22 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\recimg.exe
2015-03-11 22:47 - 2014-10-29 03:22 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2015-03-11 22:47 - 2014-10-29 03:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2015-03-11 22:47 - 2014-10-29 03:19 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2015-03-11 22:47 - 2014-10-29 03:19 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquoui.dll
2015-03-11 22:47 - 2014-10-29 03:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditcse.dll
2015-03-11 22:47 - 2014-10-29 03:19 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\softkbd.dll
2015-03-11 22:47 - 2014-10-29 03:18 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2015-03-11 22:47 - 2014-10-29 03:18 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll
2015-03-11 22:47 - 2014-10-29 03:18 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsadmin.exe
2015-03-11 22:47 - 2014-10-29 03:17 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\itircl.dll
2015-03-11 22:47 - 2014-10-29 03:17 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2015-03-11 22:47 - 2014-10-29 03:17 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncProviders.dll
2015-03-11 22:47 - 2014-10-29 03:16 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-03-11 22:47 - 2014-10-29 03:16 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-03-11 22:47 - 2014-10-29 03:14 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2015-03-11 22:47 - 2014-10-29 03:13 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\scansetting.dll
2015-03-11 22:47 - 2014-10-29 03:13 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2015-03-11 22:47 - 2014-10-29 03:12 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2015-03-11 22:47 - 2014-10-29 03:12 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2015-03-11 22:47 - 2014-10-29 03:12 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddpchunk.dll
2015-03-11 22:47 - 2014-10-29 03:12 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll
2015-03-11 22:47 - 2014-10-29 03:11 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SnippingTool.exe
2015-03-11 22:47 - 2014-10-29 03:10 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsprop.dll
2015-03-11 22:47 - 2014-10-29 03:09 - 00601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2015-03-11 22:47 - 2014-10-29 03:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceSyncProvider.dll
2015-03-11 22:47 - 2014-10-29 03:09 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2015-03-11 22:47 - 2014-10-29 03:09 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax
2015-03-11 22:47 - 2014-10-29 03:08 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2015-03-11 22:47 - 2014-10-29 03:07 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\els.dll
2015-03-11 22:47 - 2014-10-29 03:06 - 02134528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsCpl.dll
2015-03-11 22:47 - 2014-10-29 03:06 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssadmin.exe
2015-03-11 22:47 - 2014-10-29 03:04 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadefui.dll
2015-03-11 22:47 - 2014-10-29 03:04 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp60.dll
2015-03-11 22:47 - 2014-10-29 03:04 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2015-03-11 22:47 - 2014-10-29 03:03 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2015-03-11 22:47 - 2014-10-29 03:03 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsquery.dll
2015-03-11 22:47 - 2014-10-29 03:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercpl.dll
2015-03-11 22:47 - 2014-10-29 03:02 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2015-03-11 22:47 - 2014-10-29 03:02 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-03-11 22:47 - 2014-10-29 03:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2015-03-11 22:47 - 2014-10-29 03:01 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl
2015-03-11 22:47 - 2014-10-29 03:00 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2015-03-11 22:47 - 2014-10-29 03:00 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlhtml.dll
2015-03-11 22:47 - 2014-10-29 03:00 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2015-03-11 22:47 - 2014-10-29 03:00 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched32.dll
2015-03-11 22:47 - 2014-10-29 02:59 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe
2015-03-11 22:47 - 2014-10-29 02:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\QAGENT.DLL
2015-03-11 22:47 - 2014-10-29 02:59 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2015-03-11 22:47 - 2014-10-29 02:58 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2015-03-11 22:47 - 2014-10-29 02:58 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
2015-03-11 22:47 - 2014-10-29 02:58 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrdc.dll
2015-03-11 22:47 - 2014-10-29 02:58 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 01047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagCpl.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOVER.exe
2015-03-11 22:47 - 2014-10-29 02:57 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2015-03-11 22:47 - 2014-10-29 02:57 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drt.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2015-03-11 22:47 - 2014-10-29 02:57 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-03-11 22:47 - 2014-10-29 02:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcjt32.dll
2015-03-11 22:47 - 2014-10-29 02:56 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2015-03-11 22:47 - 2014-10-29 02:55 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2015-03-11 22:47 - 2014-10-29 02:55 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
2015-03-11 22:47 - 2014-10-29 02:54 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2015-03-11 22:47 - 2014-10-29 02:54 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll
2015-03-11 22:47 - 2014-10-29 02:54 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfui.dll
2015-03-11 22:47 - 2014-10-29 02:53 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\shwebsvc.dll
2015-03-11 22:47 - 2014-10-29 02:53 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2015-03-11 22:47 - 2014-10-29 02:53 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2015-03-11 22:47 - 2014-10-29 02:52 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-03-11 22:47 - 2014-10-29 02:52 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2015-03-11 22:47 - 2014-10-29 02:52 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00782848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data001E.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdListen.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmstyle.dll
2015-03-11 22:47 - 2014-10-29 02:51 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2015-03-11 22:47 - 2014-10-29 02:50 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2015-03-11 22:47 - 2014-10-29 02:50 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2015-03-11 22:47 - 2014-10-29 02:49 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL
2015-03-11 22:47 - 2014-10-29 02:49 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2015-03-11 22:47 - 2014-10-29 02:49 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2015-03-11 22:47 - 2014-10-29 02:49 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cewmdm.dll
2015-03-11 22:47 - 2014-10-29 02:49 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncMetastore.dll
2015-03-11 22:47 - 2014-10-29 02:49 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe
2015-03-11 22:47 - 2014-10-29 02:49 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgrsvr.exe
2015-03-11 22:47 - 2014-10-29 02:49 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmttpmvscmgrsvr.exe
2015-03-11 22:47 - 2014-10-29 02:49 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amstream.dll
2015-03-11 22:47 - 2014-10-29 02:48 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2015-03-11 22:47 - 2014-10-29 02:48 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgmts.dll
2015-03-11 22:47 - 2014-10-29 02:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2015-03-11 22:47 - 2014-10-29 02:48 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmusic.dll
2015-03-11 22:47 - 2014-10-29 02:47 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsec.dll
2015-03-11 22:47 - 2014-10-29 02:47 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2015-03-11 22:47 - 2014-10-29 02:47 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskpart.exe
2015-03-11 22:47 - 2014-10-29 02:46 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskmgr.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssha.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiageng.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msnetobj.dll
2015-03-11 22:47 - 2014-10-29 02:46 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll
2015-03-11 22:47 - 2014-10-29 02:45 - 00879104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2015-03-11 22:47 - 2014-10-29 02:45 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vault.dll
2015-03-11 22:47 - 2014-10-29 02:45 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSSVC.exe
2015-03-11 22:47 - 2014-10-29 02:45 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqad.dll
2015-03-11 22:47 - 2014-10-29 02:45 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpresult.exe
2015-03-11 22:47 - 2014-10-29 02:43 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll
2015-03-11 22:47 - 2014-10-29 02:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssText3d.scr
2015-03-11 22:47 - 2014-10-29 02:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll
2015-03-11 22:47 - 2014-10-29 02:42 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2015-03-11 22:47 - 2014-10-29 02:41 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2015-03-11 22:47 - 2014-10-29 02:41 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2015-03-11 22:47 - 2014-10-29 02:41 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2015-03-11 22:47 - 2014-10-29 02:40 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2015-03-11 22:47 - 2014-10-29 02:40 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2015-03-11 22:47 - 2014-10-29 02:40 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquoui.dll
2015-03-11 22:47 - 2014-10-29 02:40 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softkbd.dll
2015-03-11 22:47 - 2014-10-29 02:39 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2015-03-11 22:47 - 2014-10-29 02:39 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsadmin.exe
2015-03-11 22:47 - 2014-10-29 02:39 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 01548800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0000.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itircl.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2015-03-11 22:47 - 2014-10-29 02:38 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2015-03-11 22:47 - 2014-10-29 02:38 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2015-03-11 22:47 - 2014-10-29 02:38 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncProviders.dll
2015-03-11 22:47 - 2014-10-29 02:37 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-03-11 22:47 - 2014-10-29 02:36 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbeio.dll
2015-03-11 22:47 - 2014-10-29 02:35 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scansetting.dll
2015-03-11 22:47 - 2014-10-29 02:35 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2015-03-11 22:47 - 2014-10-29 02:34 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdlgs.dll
2015-03-11 22:47 - 2014-10-29 02:34 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\difxapi.dll
2015-03-11 22:47 - 2014-10-29 02:34 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eudcedit.exe
2015-03-11 22:47 - 2014-10-29 02:34 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2015-03-11 22:47 - 2014-10-29 02:32 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2015-03-11 22:47 - 2014-10-29 02:32 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppIdPolicyEngineApi.dll
2015-03-11 22:47 - 2014-10-29 02:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsprop.dll
2015-03-11 22:47 - 2014-10-29 02:32 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceSyncProvider.dll
2015-03-11 22:47 - 2014-10-29 02:32 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax
2015-03-11 22:47 - 2014-10-29 02:31 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2015-03-11 22:47 - 2014-10-29 02:31 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdprint.dll
2015-03-11 22:47 - 2014-10-29 02:30 - 02118144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsCpl.dll
2015-03-11 22:47 - 2014-10-29 02:30 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2015-03-11 22:47 - 2014-10-29 02:30 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\els.dll
2015-03-11 22:47 - 2014-10-29 02:29 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
2015-03-11 22:47 - 2014-10-29 02:29 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-03-11 22:47 - 2014-10-29 02:29 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00812032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\localsec.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadefui.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsquery.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\audiodev.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpdui.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmstormod.dll
2015-03-11 22:47 - 2014-10-29 02:28 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-03-11 22:47 - 2014-10-29 02:27 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercpl.dll
2015-03-11 22:47 - 2014-10-29 02:27 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-03-11 22:47 - 2014-10-29 02:27 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2015-03-11 22:47 - 2014-10-29 02:27 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2015-03-11 22:47 - 2014-10-29 02:26 - 03788288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\provthrd.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2015-03-11 22:47 - 2014-10-29 02:26 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll
2015-03-11 22:47 - 2014-10-29 02:26 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2015-03-11 22:47 - 2014-10-29 02:25 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrdc.dll
2015-03-11 22:47 - 2014-10-29 02:25 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-03-11 22:47 - 2014-10-29 02:25 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mibincodec.dll
2015-03-11 22:47 - 2014-10-29 02:25 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-03-11 22:47 - 2014-10-29 02:25 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2015-03-11 22:47 - 2014-10-29 02:24 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2015-03-11 22:47 - 2014-10-29 02:24 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll
2015-03-11 22:47 - 2014-10-29 02:23 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2015-03-11 22:47 - 2014-10-29 02:22 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-03-11 22:47 - 2014-10-29 02:22 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sstpsvc.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dps.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2015-03-11 22:47 - 2014-10-29 02:21 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shwebsvc.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netdiagfx.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2015-03-11 22:47 - 2014-10-29 02:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmitomi.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2015-03-11 22:47 - 2014-10-29 02:19 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\txflog.dll
2015-03-11 22:47 - 2014-10-29 02:18 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2015-03-11 22:47 - 2014-10-29 02:18 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fundisc.dll
2015-03-11 22:47 - 2014-10-29 02:18 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IDStore.dll
2015-03-11 22:47 - 2014-10-29 02:17 - 01296896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\connect.dll
2015-03-11 22:47 - 2014-10-29 02:17 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2015-03-11 22:47 - 2014-10-29 02:17 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsec.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vault.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2015-03-11 22:47 - 2014-10-29 02:16 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtstocom.exe
2015-03-11 22:47 - 2014-10-29 02:16 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msnetobj.dll
2015-03-11 22:47 - 2014-10-29 02:15 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqad.dll
2015-03-11 22:47 - 2014-10-29 02:14 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-03-11 22:47 - 2014-10-29 02:14 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2015-03-11 22:47 - 2014-10-29 02:13 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll
2015-03-11 22:47 - 2014-10-29 02:12 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2015-03-11 22:47 - 2014-10-29 02:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll
2015-03-11 22:47 - 2014-10-29 02:12 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-03-11 22:47 - 2014-10-29 02:12 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll
2015-03-11 22:47 - 2014-10-29 02:12 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2015-03-11 22:47 - 2014-10-29 02:11 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2015-03-11 22:47 - 2014-10-29 02:10 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxclu.dll
2015-03-11 22:47 - 2014-10-29 02:10 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2015-03-11 22:47 - 2014-10-29 02:10 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_8.dll
2015-03-11 22:47 - 2014-10-29 02:10 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
2015-03-11 22:47 - 2014-10-29 02:10 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2015-03-11 22:47 - 2014-10-29 02:10 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbeio.dll
2015-03-11 22:47 - 2014-10-29 02:08 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2015-03-11 22:47 - 2014-10-29 02:08 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecsvc.dll
2015-03-11 22:47 - 2014-10-29 02:08 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2015-03-11 22:47 - 2014-10-29 02:06 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-03-11 22:47 - 2014-10-29 02:06 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2015-03-11 22:47 - 2014-10-29 02:05 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2015-03-11 22:47 - 2014-10-29 02:05 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2015-03-11 22:47 - 2014-10-29 02:05 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-03-11 22:47 - 2014-10-29 02:05 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2015-03-11 22:47 - 2014-10-29 02:04 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2015-03-11 22:47 - 2014-10-29 02:04 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-03-11 22:47 - 2014-10-29 02:04 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provthrd.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringStation.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2015-03-11 22:47 - 2014-10-29 02:03 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2015-03-11 22:47 - 2014-10-29 02:02 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2015-03-11 22:47 - 2014-10-29 02:02 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Geolocation.dll
2015-03-11 22:47 - 2014-10-29 02:02 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-03-11 22:47 - 2014-10-29 02:02 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mibincodec.dll
2015-03-11 22:47 - 2014-10-29 02:01 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2015-03-11 22:47 - 2014-10-29 02:01 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-03-11 22:47 - 2014-10-29 02:00 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdscore.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2015-03-11 22:47 - 2014-10-29 02:00 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2015-03-11 22:47 - 2014-10-29 01:59 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-03-11 22:47 - 2014-10-29 01:59 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2015-03-11 22:47 - 2014-10-29 01:59 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmitomi.dll
2015-03-11 22:47 - 2014-10-29 01:59 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmshell.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fundisc.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IDStore.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-03-11 22:47 - 2014-10-29 01:58 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txflog.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfapi.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2015-03-11 22:47 - 2014-10-29 01:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-03-11 22:47 - 2014-10-29 01:57 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2015-03-11 22:47 - 2014-10-29 01:55 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2015-03-11 22:47 - 2014-10-29 01:55 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2015-03-11 22:47 - 2014-10-29 01:55 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2015-03-11 22:47 - 2014-10-29 01:55 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2015-03-11 22:47 - 2014-10-29 01:54 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2015-03-11 22:47 - 2014-10-29 01:54 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2015-03-11 22:47 - 2014-10-29 01:54 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2015-03-11 22:47 - 2014-10-29 01:53 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
2015-03-11 22:47 - 2014-10-29 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AltTab.dll
2015-03-11 22:47 - 2014-10-29 01:52 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2015-03-11 22:47 - 2014-10-29 01:52 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2015-03-11 22:47 - 2014-10-29 01:51 - 03317248 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2015-03-11 22:47 - 2014-10-29 01:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2015-03-11 22:47 - 2014-10-29 01:51 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsCfg.dll
2015-03-11 22:47 - 2014-10-29 01:51 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2015-03-11 22:47 - 2014-10-29 01:50 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-03-11 22:47 - 2014-10-29 01:49 - 00831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
2015-03-11 22:47 - 2014-10-29 01:47 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2015-03-11 22:47 - 2014-10-29 01:47 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-03-11 22:47 - 2014-10-29 01:45 - 01197568 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-03-11 22:47 - 2014-10-29 01:45 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2015-03-11 22:47 - 2014-10-29 01:45 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-03-11 22:47 - 2014-10-29 01:44 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2015-03-11 22:47 - 2014-10-29 01:44 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2015-03-11 22:47 - 2014-10-29 01:44 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2015-03-11 22:47 - 2014-10-29 01:43 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPMONTR.DLL
2015-03-11 22:47 - 2014-10-29 01:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceTypes.dll
2015-03-11 22:47 - 2014-10-29 01:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2015-03-11 22:47 - 2014-10-29 01:43 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-03-11 22:47 - 2014-10-29 01:42 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.SpeechSynthesis.dll
2015-03-11 22:47 - 2014-10-29 01:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2015-03-11 22:47 - 2014-10-29 01:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2015-03-11 22:47 - 2014-10-29 01:39 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2015-03-11 22:47 - 2014-10-29 01:39 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll
2015-03-11 22:47 - 2014-10-29 01:38 - 01232896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-03-11 22:47 - 2014-10-29 01:37 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-03-11 22:47 - 2014-10-29 01:37 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2015-03-11 22:47 - 2014-10-29 01:35 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2015-03-11 22:47 - 2014-10-29 01:35 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2015-03-11 22:47 - 2014-10-29 01:31 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2015-03-11 22:46 - 2014-10-29 05:10 - 00177688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2015-03-11 22:46 - 2014-10-29 05:10 - 00089344 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2015-03-11 22:46 - 2014-10-29 05:10 - 00084184 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2015-03-11 22:46 - 2014-10-29 05:09 - 00191032 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2015-03-11 22:46 - 2014-10-29 05:09 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeyboardFilterSvc.dll
2015-03-11 22:46 - 2014-10-29 05:04 - 00224600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll
2015-03-11 22:46 - 2014-10-29 05:04 - 00197832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssenh.dll
2015-03-11 22:46 - 2014-10-29 05:04 - 00097608 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2015-03-11 22:46 - 2014-10-29 05:04 - 00093000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2015-03-11 22:46 - 2014-10-29 05:04 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll
2015-03-11 22:46 - 2014-10-29 05:03 - 00196928 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2015-03-11 22:46 - 2014-10-29 04:59 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-03-11 22:46 - 2014-10-29 04:57 - 00116696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2015-03-11 22:46 - 2014-10-29 04:57 - 00098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2015-03-11 22:46 - 2014-10-29 04:57 - 00089816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll
2015-03-11 22:46 - 2014-10-29 04:53 - 00080528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2015-03-11 22:46 - 2014-10-29 04:52 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-03-11 22:46 - 2014-10-29 04:52 - 00126056 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2015-03-11 22:46 - 2014-10-29 04:52 - 00101736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfAACEnc.dll
2015-03-11 22:46 - 2014-10-29 04:52 - 00100672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2015-03-11 22:46 - 2014-10-29 04:52 - 00090880 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2015-03-11 22:46 - 2014-10-29 04:18 - 00255136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00168256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00165728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00156992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptxml.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00089856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00073840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2015-03-11 22:46 - 2014-10-29 04:15 - 00051608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
2015-03-11 22:46 - 2014-10-29 04:11 - 00099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2015-03-11 22:46 - 2014-10-29 04:11 - 00076912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll
2015-03-11 22:46 - 2014-10-29 04:10 - 00094464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe
2015-03-11 22:46 - 2014-10-29 04:09 - 00017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
2015-03-11 22:46 - 2014-10-29 04:07 - 00110512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-03-11 22:46 - 2014-10-29 04:07 - 00089816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2015-03-11 22:46 - 2014-10-29 04:07 - 00081008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2015-03-11 22:46 - 2014-10-29 04:07 - 00018040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2015-03-11 22:46 - 2014-10-29 04:06 - 00090368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfAACEnc.dll
2015-03-11 22:46 - 2014-10-29 04:06 - 00074824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2015-03-11 22:46 - 2014-10-29 03:46 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-03-11 22:46 - 2014-10-29 03:46 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2015-03-11 22:46 - 2014-10-29 03:45 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2015-03-11 22:46 - 2014-10-29 03:45 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2015-03-11 22:46 - 2014-10-29 03:45 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-03-11 22:46 - 2014-10-29 03:44 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2015-03-11 22:46 - 2014-10-29 03:44 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolss.dll
2015-03-11 22:46 - 2014-10-29 03:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmapi.dll
2015-03-11 22:46 - 2014-10-29 03:42 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll