| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet …Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
10.08.2015, 17:09
| #1 |
| |  Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … Hallo, ich habe gestern eine Fake-Paypal-Mail erhalten und glorreicher Weise die dort angehängte PDF-Datei aus Unachtsamkeit geöffnet. Danach habe ich vorsichtshalber sämtliche Passwörter geändert (Paypal, email-Konto, etc.) und auch dies unternommen: 1.) Ad-aware hat beim 1. Suchlauf diese 7 Dateien gefunden und gelöscht:  2.) Ad-aware hat beim 2. Suchlauf (nach dem Neustart des PCs) diese Windows-System-Datei in Quarantäne verschoben:  3.) Malwarebytes hat nichts gefunden 4.) Junkware hat diese Datei erfolgreich gelöscht: Anhang 75461 5.) ESET hat nichts gefunden 6.) Security-Check hat dies ausgespuckt: Anhang 75462 Hier dann noch die Addition-, defogger- und gmer-Dateien: Anhang 75463 Anhang 75464 Anhang 75465 Leider ist die FRST-Datei zu groß, um sie hier zu posten.. Kann mir jemand weiterhelfen? Ganz herzlichen Dank! Ste49 |
|
10.08.2015, 18:18
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
10.08.2015, 18:34
| #3 |
| | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … Ah, danke für die Info! Hier also die Logs:
__________________1.) Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-08-2015
durchgeführt von ***** (2015-08-10 16:03:40)
Gestartet von C:\Users\*****\Downloads
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2085589762-2516902079-1211625513-500 - Administrator - Disabled)
***** (S-1-5-21-2085589762-2516902079-1211625513-1001 - Administrator - Enabled) => C:\Users\*****
DefaultAccount (S-1-5-21-2085589762-2516902079-1211625513-503 - Limited - Disabled)
Gast (S-1-5-21-2085589762-2516902079-1211625513-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Ad-Aware Antivirus (Enabled - Up to date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Ad-Aware Antivirus (Enabled - Up to date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Ad-Aware Antivirus (HKLM\...\{A041066D-37EF-46FC-9DF7-465A07F1C5CF}_AdAwareUpdater) (Version: 11.7.485.8398 - Lavasoft)
AdAwareInstaller (Version: 11.7.485.8398 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.7.485.8398 - Lavasoft) Hidden
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
AntimalwareEngine (Version: 3.0.98.0 - Lavasoft) Hidden
AntispamEngine (Version: 2.4.3171.0 - Lavasoft) Hidden
AvcEngine (Version: 3.10.7820.0 - Lavasoft) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.2.24.20150630 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
FirewallEngine (Version: 1.6.0.0 - Lavasoft) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.82.0 - International GeoGebra Institute)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10269 - Realtek Semiconductor Corp.)
Lenovo EasyCamera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11105 - Realtek Semiconductor Corp.)
LibreOffice 4.3.7.2 (HKLM-x32\...\{8ED4A1FC-56CF-414C-A9AB-A37714AA9EA7}) (Version: 4.3.7.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MasterTool - Basissystem (HKLM-x32\...\MasterTool - Basissystem_is1) (Version: - Thomas Gottfried EDV)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Office Home and Student 2013 (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}]) (Version: - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.6.0 - Mozilla)
Mozilla Thunderbird 38.1.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.1.0 (x86 de)) (Version: 38.1.0 - Mozilla)
NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.12.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.12.11 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
OnlineThreatsEngine (Version: 2.2.3.0 - Lavasoft) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.12.11 - NVIDIA Corporation) Hidden
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Zarb 5 (HKLM\...\{CB49AE77-9D9D-4B79-AAC4-416F68EE66FF}) (Version: 5 - Hans Zybura Software)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2085589762-2516902079-1211625513-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
03-08-2015 10:16:13 Windows Update
03-08-2015 10:16:19 Windows Update
06-08-2015 12:52:45 Windows Update
09-08-2015 12:23:40 Windows Modules Installer
10-08-2015 15:24:23 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00EEBA9C-F9EF-4272-B793-C830FBADD359} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {0CCA7916-2916-4F12-BD32-1E3BE31E1269} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {1641F54C-1E57-4902-AB65-EE2B65E5629D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {19865544-CE08-40BE-8B8C-87C47681433D} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {1D3D099E-EE1E-4907-8BA2-BA8F12D11AA6} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe [2015-07-10] (Microsoft Corporation)
Task: {27499A66-224D-4607-B091-25C23FE860C4} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {2C97A00A-1C5C-4318-B5CC-8A1A126B77F9} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
Task: {2F0E6BC5-E2B6-4DCC-BD71-07FB553EFD80} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {31961F5D-9E05-498E-BD54-06259522BCB4} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {41160EA0-208B-4C3E-B4DB-805BBABC6B93} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {4454A8D0-2E4E-4A02-BF67-48DF6A7BFAB4} - System32\Tasks\Microsoft\Windows\Maps\MapsUpdateTask
Task: {45893BF7-786C-4BEB-A4B7-BB5F78A189D7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {5000FA71-13D7-43E6-9A3D-20C3AF5C20CD} - System32\Tasks\AVAST Software\Avast Integrity Check => C:\WINDOWS\AswCheck.exe
Task: {582E6D8D-98BC-449B-AE71-48EA7F12AF05} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {58442BA3-91DC-4C0F-831D-19E41B0DBFC4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {5E5515C1-7D87-4904-B9CE-FD29EB2ADB72} - System32\Tasks\Microsoft\Windows\Sysmain\ResPriStaticDbSync
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {630254B4-C2BC-47ED-AC8F-A961CA3EEF7D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {63ADA52B-D186-4E1D-8B62-EAA2FD5610D6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {711EE2F9-A611-4773-AF8E-D4B278A6718D} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
Task: {73551810-E5F4-433E-9494-0D00B55C855E} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {744C9FEA-08B7-43E1-A729-0F94647D655C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {78B77FA3-9D97-441D-97B6-68CEA40B4F74} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {7A003965-A297-4DC6-B15B-852D798391E0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe [2015-08-02] (Microsoft Corporation)
Task: {7AE7A498-8CCF-4D79-98C0-EC1167E32190} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\windows\system32\MusNotification.exe [2015-08-02] (Microsoft Corporation)
Task: {8DF84CB3-D8E0-4307-A35B-CA74E21786DB} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2015-08-02] (Microsoft Corporation)
Task: {90C51101-F8EF-4A7E-A543-460555DE555E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {99194BCC-D040-4028-A202-568D39A2F83E} - System32\Tasks\Microsoft Office 15 Sync Maintenance for MightyMannz-***** MightyMannz => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)
Task: {A364E297-00AD-490D-900E-22AC34598C71} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {A5B6CD85-1B57-49B9-BA80-5D5D65F02826} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {AC29E64E-3271-47BA-B8F1-914523CF379B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Automatic App Update
Task: {B9B36D41-C776-424E-9A13-5387E17A2CEB} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\Windows\System32\WiFiTask.exe [2015-07-10] (Microsoft Corporation)
Task: {C2162702-FFEB-48C0-AA5F-2DA3A8887D61} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Installation
Task: {C56AFFD3-06B8-4A16-AF7E-F7A6EB3FAE9E} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {C5EE2EA2-5312-4D1F-B9D0-41B18DF31B78} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {C7A236B2-12E1-46DC-9501-3B1B0209CC09} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {D2401052-A382-42DE-9C79-D1CF3563F654} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
Task: {D31B96A1-6641-4D4B-8C11-F71A5DD718AE} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {D72471DB-E3C0-4398-8EE6-59FC5EAD87FE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {D895D7EE-41A0-454F-A467-079223BBD578} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {DAF2BAE3-1C5B-4CB5-9F62-0911C031A15A} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\Windows\system32\disksnapshot.exe [2015-07-10] (Microsoft Corporation)
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\windows\system32\MusNotification.exe [2015-08-02] (Microsoft Corporation)
Task: {F0AD36FA-31F4-4F15-8D99-C65CD083FEE3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F65C7C75-66FF-4918-9B3C-336A73345422} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {FEE7966C-9B57-4B3D-8963-EE55690416DD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\WINDOWS\system32\MusNotification.exe [2015-08-02] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2012-12-24 06:53 - 2012-12-24 06:53 - 00129024 _____ () C:\WINDOWS\System32\HPCP1020LM.DLL
2015-08-02 13:13 - 2015-08-02 13:13 - 00403968 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-06-01 21:50 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-08-06 11:13 - 2015-08-02 03:37 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-06 11:13 - 2015-08-02 03:34 - 01806848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-06 11:13 - 2015-08-02 03:35 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-08-01 22:19 - 2015-08-01 22:19 - 00153712 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-08-01 22:19 - 2015-08-01 22:19 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\Pictures\11 Bilder 2011\14 U S A\IMG_2564.JPG
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{404A5B4F-E684-4DC4-B981-8FEBBE239FB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F6F92CC8-31A4-40E9-BA93-5ACCF15F2231}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6252CE6C-9FBB-418D-916A-7FF8C3B25187}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6460191E-F3E1-43DA-8B57-FF15308B4E51}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E2179532-97BC-4168-9430-13F9A48F9AE4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7AABF9AF-C94A-4F7E-BF96-8725D9CFA446}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{21F1C4FE-36C1-4942-9372-BD9A9B31089A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{17B7ECDF-34EE-4136-9CEF-F4B32DCA90A5}] => (Allow) LPort=1900
FirewallRules: [{404874D8-AD0B-400F-8A8D-D52382DC01DB}] => (Allow) LPort=2869
FirewallRules: [{F10C235E-775E-46A8-94BB-66652F1462CB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{400BD8D8-A02C-4F17-A26C-BAFF7FD9E50A}] => (Allow) C:\Users\*****\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [UDP Query User{39FC2FF6-5535-43A1-92F0-00CAA7082879}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [TCP Query User{C819EC7E-99CC-4BC2-9E34-79C62590B0CC}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{114E750F-D722-4051-96B9-2AF0CE00B463}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{479457DD-39E9-4C07-988C-2441FD15ED18}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{237AF618-415F-467A-AFBB-ED8B40092A70}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{8C76E494-B34B-4F5B-B4FD-C1E5EF18C74D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{EE4DA4C9-E735-4447-9BAD-2448EBE209EB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{1C6C130F-0AFA-4E81-8A9C-3F607B636ACE}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{3C6EA4F9-FB6D-4B01-ACFD-D879DA90DC8E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{41CB232F-6EB9-47EA-B673-23E1EBB2B3F1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{BE714622-09C1-49E5-9511-BA20401EDCE1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{020ECBE5-96FE-40E2-B938-81328A6DFF35}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{197D93B3-A7D6-41B1-BCD2-2FFF95E7C687}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4040C69D-2CA9-4162-96F5-065A93958B7D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
StandardProfile\GloballyOpenPorts: [1688:TCP] => 1337:TCP:*:Enabled:MKS
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/10/2015 03:28:41 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (08/10/2015 03:28:39 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (08/10/2015 03:28:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (08/10/2015 03:24:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (08/09/2015 12:23:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (08/09/2015 11:08:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea1
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10240.16384, Zeitstempel: 0x559f3aac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000081c5a
ID des fehlerhaften Prozesses: 0x1328
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5
Error: (08/09/2015 11:04:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1977.6980, Zeitstempel: 0x55a97f26
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16392, Zeitstempel: 0x55a864a2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000034ecd
ID des fehlerhaften Prozesses: 0x890
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Vollständiger Name des fehlerhaften Pakets: NvStreamNetworkService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvStreamNetworkService.exe5
Error: (08/06/2015 12:52:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (08/04/2015 10:07:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DrvInst.exe, Version: 10.0.10240.16384, Zeitstempel: 0x559f389e
Name des fehlerhaften Moduls: hpbcoins64.dll, Version: 1.0.0.1, Zeitstempel: 0x4b5f48d5
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0000000000020fb0
ID des fehlerhaften Prozesses: 0x11a0
Startzeit der fehlerhaften Anwendung: 0xDrvInst.exe0
Pfad der fehlerhaften Anwendung: DrvInst.exe1
Pfad des fehlerhaften Moduls: DrvInst.exe2
Berichtskennung: DrvInst.exe3
Vollständiger Name des fehlerhaften Pakets: DrvInst.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DrvInst.exe5
Error: (08/04/2015 05:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm GFExperience.exe, Version 2.5.12.11 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 155c
Startzeit: 01d0cec979b67eea
Beendigungszeit: 18
Anwendungspfad: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
Berichts-ID: cc842753-3abc-11e5-9bc3-38b1dbe3b1f4
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Systemfehler:
=============
Error: (08/10/2015 03:32:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/10/2015 03:32:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\*****\AppData\Local\Temp\ehdrv.sys
Error: (08/10/2015 03:32:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\*****\AppData\Local\Temp\ehdrv.sys
Error: (08/10/2015 03:32:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/10/2015 03:32:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/10/2015 03:32:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\*****\AppData\Local\Temp\ehdrv.sys
Error: (08/10/2015 03:29:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/10/2015 03:29:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\*****\AppData\Local\Temp\ehdrv.sys
Error: (08/10/2015 03:29:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/10/2015 03:29:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\*****\AppData\Local\Temp\ehdrv.sys
Microsoft Office:
=========================
Error: (08/10/2015 03:28:41 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifestC:\Users\*****\Downloads\esetsmartinstaller_deu.exe
Error: (08/10/2015 03:28:39 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifestc:\users\*****\downloads\esetsmartinstaller_deu.exe
Error: (08/10/2015 03:28:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifestC:\Users\*****\Downloads\esetsmartinstaller_deu.exe
Error: (08/10/2015 03:24:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (08/09/2015 12:23:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (08/09/2015 11:08:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea1combase.dll10.0.10240.16384559f3aacc00000050000000000081c5a132801d0d282e40dff14C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x64__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\system32\combase.dlle4e815de-4bc8-464e-879a-ad9054d3ac00Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x64__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub
Error: (08/09/2015 11:04:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1977.698055a97f26ntdll.dll10.0.10240.1639255a864a2c00000050000000000034ecd89001d0d220011d4853C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\WINDOWS\SYSTEM32\ntdll.dll24cb2198-bf30-42fb-9027-d6e1bd2cdd2f
Error: (08/06/2015 12:52:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (08/04/2015 10:07:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DrvInst.exe10.0.10240.16384559f389ehpbcoins64.dll1.0.0.14b5f48d5c00004170000000000020fb011a001d0cef125eb709bC:\WINDOWS\system32\DrvInst.exeC:\WINDOWS\system32\hpbcoins64.dll387baa42-50ea-44df-b15c-6544b2fd09dd
Error: (08/04/2015 05:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: GFExperience.exe2.5.12.11155c01d0cec979b67eea18C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.execc842753-3abc-11e5-9bc3-38b1dbe3b1f4
CodeIntegrity:
===================================
Date: 2015-08-03 19:22:19.081
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:19.072
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:19.061
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:19.052
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:19.043
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:19.034
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:18.920
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:18.912
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:18.903
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-03 19:22:18.894
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 16296.27 MB
Verfügbarer physikalischer RAM: 12134.17 MB
Summe virtueller Speicher: 19240.27 MB
Verfügbarer virtueller Speicher: 15586.65 MB
==================== Laufwerke ================================
Drive c: (Windows8_OS) (Fixed) (Total:195.21 GB) (Free:12.4 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:18.36 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: A1CD68B0)
Partition: GPT.
==================== Ende von log ============================
2.) defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:08 on 10/08/2015 (*****)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-08-10 17:36:02
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000033 LITEONIT_LCS-256M6S rev.DC86201 238.47GB
Running: Gmer-19357.exe; Driver: C:\Users\Andreas\AppData\Local\Temp\kxldapob.sys
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- Threads - GMER 2.1 ----
Thread C:\WINDOWS\system32\csrss.exe [672:4404] fffff9610fbe7300
---- Processes - GMER 2.1 ----
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\mso.dll (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000071510000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\riched20.dll (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000073400000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\MSPTLS.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070f60000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\csi.dll (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070660000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\ACEOLEDB.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070610000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\ACECORE.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070370000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\1031\ACEWSTR.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070290000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\ACEES.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 00000000701f0000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\VBAJET32.DLL (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 00000000701e0000
Library C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\expsrv.dll (*** suspicious ***) @ C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [8672] 0000000070180000
---- EOF - GMER 2.1 ----
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.5 (08.05.2015:1)
OS: Windows 10 Home x64
Ran by Andreas on 10.08.2015 at 15:24:22,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\WINDOWS\SysWOW64\REN3CBA.tmp
~~~ Folders
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.08.2015 at 15:25:49,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Results of screen317's Security Check version 1.006
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Ad-Aware Antivirus
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 8 Update 51
Adobe Flash Player 18.0.0.209
Mozilla Firefox (39.0.3)
Mozilla Thunderbird (38.1.0)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015
durchgeführt von ***** (Administrator) auf MIGHTYMANNZ (10-08-2015 16:03:18)
Gestartet von C:\Users\*****\Downloads
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\ApplicationFrameHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [5060864 2015-06-16] (Realtek semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808 2015-06-24] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-06-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{69181ea1-6200-4310-a2d3-ed2f16f87cb3}: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ggbtl797.default
FF NewTab: about:blank
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-06-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-07-10] (Microsoft Corporation)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R3 ClipSVC; C:\Windows\System32\ClipSVC.dll [658568 2015-08-02] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-02] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-02] (Microsoft Corporation)
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [196096 2015-07-10] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [33280 2015-07-10] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S2 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [63488 2015-07-10] (Microsoft Corporation)
S2 DoSvc; C:\Windows\system32\dosvc.dll [1169408 2015-08-02] (Microsoft Corporation)
R3 DsSvc; C:\Windows\System32\DsSvc.dll [143872 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-02] (Microsoft Corporation)
S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-18] (Intel Corporation)
S2 LavasoftAdAwareService11; C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe [716664 2015-06-24] ()
S3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-07-10] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [186368 2015-07-10] (Microsoft Corporation)
S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [268800 2015-07-10] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [512000 2015-07-10] (Microsoft Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-07-30] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-02] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [229376 2015-07-30] (Microsoft Corporation)
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [583680 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [503808 2015-07-30] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc_Session2; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation)
S3 UserDataSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 UserManager; C:\Windows\System32\usermgr.dll [717312 2015-07-10] (Microsoft Corporation)
S3 UsoSvc; C:\Windows\system32\usocore.dll [343040 2015-08-02] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2015-01-06] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261496 2015-01-06] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2015-01-06] (BitDefender)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7545008 2014-01-29] (Broadcom Corporation)
R1 BdfNdisf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [97816 2015-01-06] (BitDefender LLC)
R1 bdfwfpf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [107080 2015-01-06] (BitDefender LLC)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [32256 2015-07-10] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [116736 2015-07-10] (Microsoft Corporation)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-07-10] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
S3 fcvsc; C:\Windows\System32\drivers\fcvsc.sys [31232 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
R3 gzflt; C:\Eigene Programme\Ad-Aware\Antimalware Engine\3.0.98.0\gzflt.sys [155912 2015-01-22] (BitDefender LLC)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [48128 2015-07-10] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [94720 2015-07-10] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [934752 2015-08-02] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-16] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-02] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [245088 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [127840 2015-07-10] (Microsoft Corporation)
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-07-10] (Microsoft Corporation)
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [685056 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> Keine Datei
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> Keine Datei
|
|
10.08.2015, 18:35
| #4 |
| | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … 7.) FRST [zweiter Teil]: Code:
ATTFilter ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-10 16:03 - 2015-08-10 16:03 - 00024574 _____ C:\Users\*****\Downloads\FRST.txt 2015-08-10 16:03 - 2015-08-10 16:03 - 00000000 ____D C:\FRST 2015-08-10 16:02 - 2015-08-10 16:02 - 02171392 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe 2015-08-10 16:00 - 2015-08-10 16:00 - 00000685 _____ C:\Users\*****\Desktop\checkup.txt 2015-08-10 15:52 - 2015-08-10 15:52 - 00016148 _____ C:\WINDOWS\system32\MIGHTYMANNZ_*****_HistoryPrediction.bin 2015-08-10 15:30 - 2015-08-10 15:59 - 00852684 _____ C:\Users\*****\Downloads\SecurityCheck.exe 2015-08-10 15:28 - 2015-08-10 15:28 - 02870984 _____ (ESET) C:\Users\*****\Downloads\esetsmartinstaller_deu.exe 2015-08-10 15:28 - 2015-08-10 15:28 - 00000000 ____D C:\Program Files (x86)\ESET 2015-08-10 15:25 - 2015-08-10 15:25 - 00000664 _____ C:\Users\*****\Desktop\JRT.txt 2015-08-10 15:24 - 2015-08-10 15:24 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Downloads\JRT.exe 2015-08-10 15:15 - 2015-08-10 16:01 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-08-10 15:15 - 2015-08-10 15:15 - 00001186 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-10 15:15 - 2015-08-10 15:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-10 15:15 - 2015-08-10 15:15 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-10 15:15 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-08-10 15:15 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-08-10 15:15 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-08-10 15:13 - 2015-08-10 15:14 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-2.1.8.1057.exe 2015-08-09 17:39 - 2015-08-09 17:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\ProgramData\BitDefender 2015-08-09 16:47 - 2015-08-09 21:51 - 00002080 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\LavasoftStatistics 2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\Lavasoft 2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2015-08-09 16:47 - 2015-01-06 13:47 - 01061776 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdsmtpp.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00209984 _____ (BitDefender) C:\WINDOWS\system32\BdFirewallSDK.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00195016 _____ (BitDefender) C:\WINDOWS\system32\httproxy.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00156936 _____ C:\WINDOWS\system32\bdfwcore.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00155912 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdpop3p.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00122928 _____ (BitDefender) C:\WINDOWS\system32\OEMbdpredir.dll 2015-08-09 16:47 - 2015-01-06 13:47 - 00096160 _____ (BitDefender) C:\WINDOWS\system32\bdpredir.dll 2015-08-09 16:47 - 2015-01-06 13:37 - 02084072 _____ (Bitdefender) C:\WINDOWS\system32\bdnc.dll 2015-08-09 16:45 - 2015-08-09 16:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\ProgramData\Lavasoft 2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\Program Files\Common Files\Lavasoft 2015-08-09 16:40 - 2015-08-09 16:41 - 02009904 _____ C:\Users\*****\Downloads\Adaware_Installer.exe 2015-08-08 11:33 - 2015-08-08 11:33 - 00001133 _____ C:\Users\*****\Desktop\Gutscheine.lnk 2015-08-08 11:01 - 2015-08-08 11:01 - 00001851 _____ C:\Users\*****\Desktop\Scanner.lnk 2015-08-07 08:33 - 2015-08-09 20:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-08-06 11:13 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-08-06 11:13 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2015-08-06 11:13 - 2015-07-30 08:22 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-08-06 11:13 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2015-08-06 11:13 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-08-06 11:13 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2015-08-06 11:13 - 2015-07-30 08:17 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-08-06 11:13 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2015-08-06 11:13 - 2015-07-30 08:16 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2015-08-06 11:13 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2015-08-06 11:13 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2015-08-06 11:13 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-08-06 11:13 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2015-08-06 11:13 - 2015-07-30 08:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-08-06 11:13 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-08-06 11:13 - 2015-07-30 08:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-08-06 11:13 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-08-06 11:13 - 2015-07-30 08:03 - 01983328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-08-06 11:13 - 2015-07-30 07:30 - 22319520 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-08-06 11:13 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2015-08-06 11:13 - 2015-07-30 06:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2015-08-06 11:13 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-08-06 11:13 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2015-08-06 11:13 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2015-08-06 11:13 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-08-06 11:13 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2015-08-06 11:13 - 2015-07-30 06:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-08-06 11:13 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2015-08-06 11:13 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-08-06 11:13 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2015-08-06 11:13 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2015-08-06 11:13 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2015-08-06 11:13 - 2015-07-30 06:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-08-06 11:13 - 2015-07-30 06:17 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-08-06 11:13 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2015-08-06 11:13 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-08-06 11:13 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-08-06 11:13 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-08-06 11:13 - 2015-07-30 06:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2015-08-06 11:13 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2015-08-06 11:13 - 2015-07-30 06:07 - 20854776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-08-06 11:13 - 2015-07-30 06:02 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll 2015-08-06 11:13 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-08-06 11:13 - 2015-07-30 05:56 - 16707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-08-06 11:13 - 2015-07-30 05:54 - 24591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-08-06 11:13 - 2015-07-30 05:54 - 02415616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-08-06 11:13 - 2015-07-30 05:53 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2015-08-06 11:13 - 2015-07-30 05:53 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2015-08-06 11:13 - 2015-07-30 05:53 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2015-08-06 11:13 - 2015-07-30 05:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-08-06 11:13 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-08-06 11:13 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2015-08-06 11:13 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-08-06 11:13 - 2015-07-30 05:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-08-06 11:13 - 2015-07-30 05:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-06 11:13 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-08-06 11:13 - 2015-07-30 05:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-08-06 11:13 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2015-08-06 11:13 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-08-06 11:13 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2015-08-06 11:13 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys 2015-08-06 11:13 - 2015-07-30 05:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-08-06 11:13 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-08-06 11:13 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2015-08-06 11:13 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2015-08-06 11:13 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2015-08-06 11:13 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll 2015-08-06 11:13 - 2015-07-30 05:42 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2015-08-06 11:13 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2015-08-06 11:13 - 2015-07-30 05:41 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-08-06 11:13 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2015-08-06 11:13 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2015-08-06 11:13 - 2015-07-30 05:40 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-08-06 11:13 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-08-06 11:13 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-08-06 11:13 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2015-08-06 11:13 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-08-06 11:13 - 2015-07-30 05:32 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-08-06 11:13 - 2015-07-30 05:32 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-08-06 11:13 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-08-06 11:13 - 2015-07-30 05:23 - 13024256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-08-06 11:13 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-08-06 11:13 - 2015-07-30 05:14 - 19333632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-08-06 11:13 - 2015-07-30 05:13 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2015-08-06 11:13 - 2015-07-30 05:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2015-08-06 11:13 - 2015-07-30 05:12 - 01914880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-08-06 11:13 - 2015-07-30 05:11 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-08-06 11:13 - 2015-07-30 05:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-08-06 11:13 - 2015-07-30 05:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-06 11:13 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll 2015-08-06 11:13 - 2015-07-30 05:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2015-08-06 11:13 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2015-08-06 11:13 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll 2015-08-06 11:13 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll 2015-08-06 11:13 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-08-06 11:13 - 2015-07-30 05:04 - 00495616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2015-08-06 11:13 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2015-08-06 11:13 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-08-06 11:13 - 2015-07-30 04:58 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2015-08-06 11:13 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-08-05 18:09 - 2015-08-05 18:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Zarb 2015-08-05 18:07 - 2015-08-05 18:07 - 00003120 _____ C:\WINDOWS\SysWOW64\6CQFRLMQ.ocx 2015-08-05 18:06 - 2015-08-05 18:08 - 00000000 ____D C:\Program Files (x86)\Zarb 5 2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zarb 5 2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\InstallMate 2015-08-05 18:06 - 2010-07-13 11:24 - 00605184 ____N (Concept Software, Inc.) C:\WINDOWS\SysWOW64\KEYLIB32.dll 2015-08-04 17:28 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2015-08-04 17:28 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2015-08-04 17:28 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2015-08-04 17:27 - 2015-08-04 17:28 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11(1).exe 2015-08-04 11:48 - 2015-08-04 11:48 - 00000000 ____D C:\Users\*****\Documents\Benutzerdefinierte Office-Vorlagen 2015-08-03 12:34 - 2015-08-03 12:34 - 00000000 ____D C:\Users\*****\AppData\Local\NetworkTiles 2015-08-02 13:15 - 2015-08-02 12:26 - 00000000 ___DC C:\WINDOWS\Panther 2015-08-02 13:13 - 2015-08-02 13:13 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 12502016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 11260928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03589632 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02446336 _____ C:\WINDOWS\system32\InputService.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02150696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01601024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-08-02 13:13 - 2015-08-02 13:13 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 01161728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-08-02 13:13 - 2015-08-02 13:13 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2015-08-02 13:13 - 2015-08-02 13:13 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00643616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00606392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00539216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-08-02 13:13 - 2015-08-02 13:13 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2015-08-02 13:13 - 2015-08-02 13:13 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll 2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe 2015-08-02 13:13 - 2015-08-02 13:13 - 00000000 ____D C:\Windows.old 2015-08-02 13:11 - 2015-08-02 13:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\MSBuild 2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-08-02 13:10 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-08-02 13:10 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-02 13:10 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-08-02 13:10 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-08-02 13:10 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-08-02 13:10 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-08-02 12:28 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\MicrosoftEdge 2015-08-02 12:27 - 2015-08-02 12:27 - 00002375 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-08-02 12:26 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\Comms 2015-08-02 12:26 - 2015-08-02 12:26 - 00000020 ___SH C:\Users\*****\ntuser.ini 2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\TileDataLayer 2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\Publishers 2015-08-02 12:25 - 2015-08-09 21:58 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-08-02 12:23 - 2015-08-02 12:23 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Vorlagen 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Startmenü 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 __SHD C:\Recovery 2015-08-02 12:20 - 2015-08-02 12:20 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2015-08-02 12:19 - 2015-08-04 17:18 - 00000000 ____D C:\Users\***** 2015-08-02 12:19 - 2015-08-02 12:26 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Vorlagen 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Startmenü 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Netzwerkumgebung 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Lokale Einstellungen 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Eigene Dateien 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Druckumgebung 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Musik 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Bilder 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Verlauf 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Anwendungsdaten 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Anwendungsdaten 2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-02 12:19 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-08-02 12:18 - 2015-08-09 21:51 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-02 12:18 - 2015-08-04 17:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\Program Files\Realtek 2015-08-02 12:18 - 2015-07-23 03:10 - 06873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 00937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2015-08-02 12:18 - 2015-07-23 03:10 - 00579912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2015-08-02 12:18 - 2015-07-23 03:10 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2015-08-02 12:18 - 2015-07-22 06:29 - 05121613 _____ C:\WINDOWS\system32\nvcoproc.bin 2015-08-02 12:17 - 2015-08-10 10:17 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-08-02 12:17 - 2015-08-02 12:19 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-08-02 12:17 - 2015-08-02 12:17 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Synaptics 2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Intel 2015-08-02 12:17 - 2015-07-17 23:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2015-08-02 12:17 - 2015-07-17 23:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2015-08-02 12:16 - 2015-08-02 12:16 - 00029787 _____ C:\WINDOWS\system32\NetSetupMig.log 2015-08-02 12:15 - 2015-08-09 20:56 - 00003568 _____ C:\WINDOWS\PFRO.log 2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagwrn.xml 2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagerr.xml 2015-08-02 12:04 - 2015-08-02 12:23 - 00006611 _____ C:\WINDOWS\comsetup.log 2015-08-02 11:38 - 2015-07-23 02:46 - 00572232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2015-08-02 11:32 - 2015-08-02 11:32 - 00000000 ___HD C:\ProgramData\CanonIJFAX 2015-08-02 10:35 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-08-02 10:35 - 2015-08-02 10:35 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA 2015-08-02 10:35 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2015-08-02 10:35 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2015-08-02 10:35 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2015-08-02 10:35 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2015-08-02 10:27 - 2015-08-02 10:27 - 00000000 ____D C:\ProgramData\boost_interprocess 2015-08-02 10:24 - 2015-08-02 10:25 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11.exe 2015-08-01 22:23 - 2015-08-01 22:23 - 00179998 _____ C:\Users\*****\Downloads\importexporttools-3.2.1-sm+tb.xpi 2015-08-01 22:19 - 2015-08-01 22:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2015-07-31 21:59 - 2015-07-31 21:59 - 00002030 _____ C:\Users\*****\Desktop\Cahier de verbes_NEU.lnk 2015-07-28 15:58 - 2015-07-28 15:58 - 00000000 ____D C:\Users\*****\AppData\Roaming\elsterformular 2015-07-28 15:57 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2015-07-28 15:57 - 2015-07-28 15:58 - 00000000 ____D C:\ProgramData\elsterformular 2015-07-28 15:57 - 2015-07-28 15:57 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-28 15:55 - 2015-07-28 15:56 - 65326880 _____ (Landesfinanzdirektion Thüringen) C:\Users\*****\Downloads\ElsterFormular-16.2.24.20150630p.exe 2015-07-23 04:02 - 2015-07-23 04:02 - 42730312 _____ C:\WINDOWS\system32\nvcompiler.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 37749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 30518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 22973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 18376584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 16160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 16011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 15754192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 14511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 13274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 12973680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 11843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 11142984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2015-07-23 04:02 - 2015-07-23 04:02 - 03351864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 02963208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 02360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 02164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 01898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435362.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435362.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 01061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 01053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00787384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00632664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00408208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00384464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00364360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00314936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2015-07-23 04:02 - 2015-07-23 04:02 - 00031976 _____ C:\WINDOWS\system32\nvinfo.pb 2015-07-22 18:56 - 2015-07-22 18:56 - 00886528 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2015-07-22 18:56 - 2015-07-22 18:56 - 00100000 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll 2015-07-18 00:36 - 2015-07-18 00:36 - 06389688 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys 2015-07-18 00:36 - 2015-07-18 00:36 - 00519056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe 2015-07-18 00:36 - 2015-07-18 00:36 - 00283024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 01008016 _____ C:\WINDOWS\system32\igfxSDK.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00927120 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00923536 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00589712 _____ C:\WINDOWS\system32\IntelCpHDCPSvc.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00448912 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00396688 _____ C:\WINDOWS\system32\igfxTray.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00351120 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00328080 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00249232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00219024 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00214416 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00213904 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe 2015-07-18 00:35 - 2015-07-18 00:35 - 00157072 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe 2015-07-18 00:34 - 2015-07-18 00:34 - 36681912 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 35768808 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 30404056 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 29613040 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 13727296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 12880160 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 11276968 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 10528136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 06305696 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 05121136 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 05092320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 04841488 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 01858632 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 01767992 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 01765408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 01456408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00284280 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00269360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00220432 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00200856 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00184352 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00163776 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00162752 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00160680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00141080 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00140056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00036616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll 2015-07-18 00:34 - 2015-07-18 00:34 - 00004682 _____ C:\WINDOWS\system32\iglhxs64.vp 2015-07-18 00:29 - 2015-07-18 00:29 - 11384832 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll 2015-07-18 00:29 - 2015-07-18 00:29 - 04443136 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll 2015-07-18 00:29 - 2015-07-18 00:29 - 00425472 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll 2015-07-18 00:29 - 2015-07-18 00:29 - 00397824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 29084160 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 06741482 _____ C:\WINDOWS\system32\igdclbif.bin 2015-07-18 00:28 - 2015-07-18 00:28 - 05467648 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 05245440 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 02028032 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 01216000 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00723456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv 2015-07-18 00:28 - 2015-07-18 00:28 - 00624128 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv 2015-07-18 00:28 - 2015-07-18 00:28 - 00386048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv 2015-07-18 00:28 - 2015-07-18 00:28 - 00353280 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00256000 _____ C:\WINDOWS\system32\igfxCPL.cpl 2015-07-18 00:28 - 2015-07-18 00:28 - 00243200 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00172032 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00090112 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00086016 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00082944 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00073728 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00064512 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00011776 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00011264 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll 2015-07-18 00:28 - 2015-07-18 00:28 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll 2015-07-18 00:24 - 2015-07-18 00:24 - 00153600 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll 2015-07-18 00:18 - 2015-07-18 00:18 - 03873280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll 2015-07-18 00:17 - 2015-07-18 00:17 - 00373248 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll 2015-07-18 00:17 - 2015-07-18 00:17 - 00300032 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll 2015-07-18 00:16 - 2015-07-18 00:16 - 03801600 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll 2015-07-18 00:16 - 2015-07-18 00:16 - 00970752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll 2015-07-18 00:09 - 2015-07-18 00:09 - 08507392 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll 2015-07-18 00:03 - 2015-07-18 00:03 - 00035328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 02813952 _____ C:\WINDOWS\system32\iglhxa64.cpa 2015-07-17 23:58 - 2015-07-17 23:58 - 01565696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 01156608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00803113 _____ C:\WINDOWS\system32\DisplayAudiox64.cab 2015-07-17 23:58 - 2015-07-17 23:58 - 00511260 _____ C:\WINDOWS\system32\cp_resources.bin 2015-07-17 23:58 - 2015-07-17 23:58 - 00331808 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00313888 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00143904 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll 2015-07-17 23:58 - 2015-07-17 23:58 - 00044025 _____ C:\WINDOWS\system32\iglhxo64.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00043816 _____ C:\WINDOWS\system32\iglhxc64_dev.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00043494 _____ C:\WINDOWS\system32\iglhxc64.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00043298 _____ C:\WINDOWS\system32\iglhxg64_dev.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00043256 _____ C:\WINDOWS\system32\iglhxg64.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00042079 _____ C:\WINDOWS\system32\iglhxo64_dev.vp 2015-07-17 23:58 - 2015-07-17 23:58 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp 2015-07-17 11:19 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3 2015-07-17 11:19 - 2015-07-17 11:19 - 00000000 ____D C:\Users\*****\AppData\Roaming\LibreOffice 2015-07-17 11:10 - 2015-07-17 11:16 - 226148352 _____ C:\Users\*****\Downloads\LibreOffice_4.3.7_Win_x86.msi 2015-07-17 10:41 - 2015-08-02 12:21 - 00000000 ____D C:\WINDOWS\de 2015-07-17 10:41 - 2015-07-17 10:41 - 00001401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-07-17 10:41 - 2015-07-17 10:41 - 00001332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-07-17 10:41 - 2015-07-17 10:41 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2015-07-17 10:40 - 2015-07-17 10:41 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2015-07-17 10:40 - 2015-07-17 10:41 - 00000000 ____D C:\Program Files (x86)\Windows Live 2015-07-17 10:40 - 2015-07-17 10:40 - 00000198 _____ C:\WINDOWS\DirectX.log 2015-07-17 10:40 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2015-07-17 10:40 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2015-07-17 10:40 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2015-07-17 10:40 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2015-07-17 10:40 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2015-07-17 10:40 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2015-07-17 10:40 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2015-07-17 10:40 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2015-07-17 10:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2015-07-17 10:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2015-07-17 10:39 - 2015-07-17 10:39 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-10 16:03 - 2015-05-17 10:00 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-08-10 15:45 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru 2015-08-10 11:02 - 2015-07-10 14:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2015-08-10 10:28 - 2015-06-28 16:29 - 00005412 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MightyMannz-***** MightyMannz 2015-08-09 21:58 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat 2015-08-09 21:58 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat 2015-08-09 21:51 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-08-09 21:51 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2015-08-09 20:56 - 2015-07-10 14:20 - 00348440 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-08-09 20:56 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning 2015-08-09 17:40 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache 2015-08-09 16:45 - 2015-07-10 14:20 - 00023276 _____ C:\WINDOWS\setupact.log 2015-08-09 16:42 - 2015-05-05 20:17 - 00000000 ____D C:\Eigene Programme 2015-08-09 12:23 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-08-08 18:58 - 2015-05-03 19:23 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net 2015-08-08 10:59 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-08-08 10:59 - 2015-05-02 13:45 - 00000000 ____D C:\Users\*****\AppData\Local\Packages 2015-08-05 19:07 - 2015-05-09 00:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc 2015-08-05 18:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-08-04 18:02 - 2015-05-03 13:59 - 00000000 ____D C:\Users\*****\Desktop\npg5s04x.Mannz 2015-08-04 17:12 - 2015-05-03 18:58 - 00000000 ____D C:\Users\*****\Documents\Steuererklärungen 2015-08-04 17:11 - 2015-05-03 18:57 - 00000000 ____D C:\Users\*****\Documents\Schätzelein 2015-08-04 16:28 - 2015-05-03 19:22 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-08-04 10:01 - 2015-05-04 14:21 - 00000000 ____D C:\Users\*****\AppData\Local\Microsoft Help 2015-08-03 11:26 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-08-03 10:16 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore 2015-08-03 10:15 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\appcompat 2015-08-02 13:15 - 2015-07-10 13:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-08-02 13:13 - 2015-07-10 13:06 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-08-02 13:13 - 2015-07-10 13:06 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-08-02 12:27 - 2015-06-01 22:03 - 00000000 ___RD C:\Users\*****\OneDrive 2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-08-02 12:26 - 2014-11-11 23:48 - 00000000 ___HD C:\Intel 2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Registration 2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT 2015-08-02 12:23 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default 2015-08-02 12:23 - 2015-05-17 10:00 - 00003882 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RSD C:\WINDOWS\Media 2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RHD C:\Users\Public\Libraries 2015-08-02 12:22 - 2015-05-02 13:50 - 00003708 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2085589762-2516902079-1211625513-1001 2015-08-02 12:21 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-08-02 12:21 - 2015-07-10 11:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-08-02 12:21 - 2015-06-01 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-08-02 12:21 - 2015-05-05 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MasterTool - Basissystem 2015-08-02 12:21 - 2015-05-03 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II 2015-08-02 12:21 - 2015-05-03 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-08-02 12:21 - 2015-05-03 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5 2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack 2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2015-08-02 12:21 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-08-02 12:21 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-08-02 12:20 - 2015-07-10 13:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log 2015-08-02 12:20 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\th-TH 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\spool 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Recovery 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\he-IL 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\et-EE 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\en-GB 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\InputMethod 2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer 2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS 2015-08-02 12:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Help 2015-08-02 12:18 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-08-02 12:06 - 2015-05-02 13:31 - 01603677 _____ C:\WINDOWS\WindowsUpdate (1).log 2015-08-02 12:04 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT 2015-08-02 11:41 - 2015-05-03 19:24 - 00000000 ____D C:\Program Files (x86)\StarCraft II 2015-08-02 11:38 - 2015-05-03 14:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-08-02 10:35 - 2015-05-03 14:25 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation 2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList 2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList 2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList 2015-07-22 09:21 - 2015-06-01 21:50 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-07-16 18:46 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Oracle 2015-07-16 18:45 - 2015-05-02 14:02 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2015-07-16 18:45 - 2015-05-02 14:02 - 00000000 ____D C:\Program Files\Java 2015-07-16 18:45 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Java 2015-07-15 22:09 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData 2015-07-15 20:39 - 2015-05-03 19:10 - 00000000 ____D C:\WINDOWS\system32\MRT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-02 12:18 - 2015-08-02 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-09 17:19 ==================== Ende von log ============================ |
|
11.08.2015, 10:44
| #5 |
| /// the machine /// TB-Ausbilder | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.08.2015, 11:21
| #6 |
| | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … 1.) Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 11.08.2015 Suchlaufzeit: 12:02 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.11.04 Rootkit-Datenbank: v2015.08.06.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: ***** Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 378857 Abgelaufene Zeit: 4 Min., 41 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 11/08/2015 um 12:11:22
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-01.1 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : ***** - MIGHTYMANNZ
# Gestarted von : C:\Users\*****\Downloads\AdwCleaner_4.208(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.10240.16412
-\\ Mozilla Firefox v39.0.3 (x86 de)
*************************
AdwCleaner[R0].txt - [850 Bytes] - [11/08/2015 12:10:55]
AdwCleaner[S0].txt - [771 Bytes] - [11/08/2015 12:11:22]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [829 Bytes] ##########
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015
durchgeführt von ***** (Administrator) auf MIGHTYMANNZ (11-08-2015 12:16:17)
Gestartet von C:\Users\*****\Downloads
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
() C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(NVIDIA Corporation) C:\Users\*****\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\fontdrvhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16384_none_115fd2f761f7c508\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [5060864 2015-06-16] (Realtek semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808 2015-06-24] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64\FileSyncShell64.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\*****\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\FileSyncShell.dll [2015-08-02] (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-06-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{69181ea1-6200-4310-a2d3-ed2f16f87cb3}: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ggbtl797.default
FF NewTab: about:blank
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-06-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-07-10] (Microsoft Corporation)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
S3 ClipSVC; C:\Windows\System32\ClipSVC.dll [658568 2015-08-02] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-02] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-02] (Microsoft Corporation)
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [196096 2015-07-10] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [33280 2015-07-10] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
R2 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [63488 2015-07-10] (Microsoft Corporation)
S2 DoSvc; C:\Windows\system32\dosvc.dll [1169408 2015-08-02] (Microsoft Corporation)
S3 DsSvc; C:\Windows\System32\DsSvc.dll [143872 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-02] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-18] (Intel Corporation)
R2 LavasoftAdAwareService11; C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe [716664 2015-06-24] ()
S3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-07-10] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
S3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [186368 2015-07-10] (Microsoft Corporation)
S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [268800 2015-07-10] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [512000 2015-07-10] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-07-30] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-02] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [229376 2015-07-30] (Microsoft Corporation)
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [583680 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [503808 2015-07-30] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 UserManager; C:\Windows\System32\usermgr.dll [717312 2015-07-10] (Microsoft Corporation)
S3 UsoSvc; C:\Windows\system32\usocore.dll [343040 2015-08-02] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2015-01-06] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261496 2015-01-06] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2015-01-06] (BitDefender)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7545008 2014-01-29] (Broadcom Corporation)
R1 BdfNdisf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [97816 2015-01-06] (BitDefender LLC)
R1 bdfwfpf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [107080 2015-01-06] (BitDefender LLC)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [32256 2015-07-10] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [116736 2015-07-10] (Microsoft Corporation)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-07-10] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
S3 fcvsc; C:\Windows\System32\drivers\fcvsc.sys [31232 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
R3 gzflt; C:\Eigene Programme\Ad-Aware\Antimalware Engine\3.0.98.0\gzflt.sys [155912 2015-01-22] (BitDefender LLC)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [48128 2015-07-10] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [94720 2015-07-10] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [934752 2015-08-02] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-16] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-02] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [245088 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [127840 2015-07-10] (Microsoft Corporation)
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-07-10] (Microsoft Corporation)
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [685056 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> Keine Datei
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> Keine Datei
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-11 12:12 - 2015-08-11 12:12 - 00016148 _____ C:\WINDOWS\system32\MIGHTYMANNZ_*****_HistoryPrediction.bin
2015-08-11 12:10 - 2015-08-11 12:11 - 00000000 ____D C:\AdwCleaner
2015-08-11 12:01 - 2015-08-11 12:10 - 02248704 _____ C:\Users\*****\Downloads\AdwCleaner_4.208(1).exe
2015-08-11 12:00 - 2015-08-11 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-08-11 10:09 - 2015-08-11 10:09 - 00000000 ____D C:\Users\*****\Documents\Benutzerdefinierte Office-Vorlagen
2015-08-10 22:06 - 2015-08-10 22:06 - 00000279 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk
2015-08-10 19:56 - 2015-08-10 20:04 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta
2015-08-10 19:19 - 2015-08-10 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II - Legacy of the Void Beta
2015-08-10 19:12 - 2015-08-10 21:15 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta
2015-08-10 18:44 - 2015-08-10 18:44 - 03183672 _____ (Blizzard Entertainment) C:\Users\*****\Downloads\StarCraft-II-Setup-deDE(1).exe
2015-08-10 17:50 - 2015-08-10 17:50 - 02248704 _____ C:\Users\*****\Downloads\AdwCleaner_4.208.exe
2015-08-10 17:09 - 2015-08-10 17:24 - 00380416 _____ C:\Users\*****\Downloads\Gmer-19357.exe
2015-08-10 17:08 - 2015-08-10 17:08 - 00000000 _____ C:\Users\*****\defogger_reenable
2015-08-10 17:07 - 2015-08-10 17:07 - 00050477 _____ C:\Users\*****\Downloads\Defogger.exe
2015-08-10 16:16 - 2015-08-11 12:13 - 00000000 ____D C:\Users\*****\Documents\Trojaner-Board
2015-08-10 16:03 - 2015-08-11 12:16 - 00027234 _____ C:\Users\*****\Downloads\FRST.txt
2015-08-10 16:03 - 2015-08-11 12:16 - 00000000 ____D C:\FRST
2015-08-10 16:03 - 2015-08-10 16:03 - 00043634 _____ C:\Users\*****\Downloads\Addition.txt
2015-08-10 16:02 - 2015-08-10 16:02 - 02171392 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2015-08-10 15:30 - 2015-08-10 15:59 - 00852684 _____ C:\Users\*****\Downloads\SecurityCheck.exe
2015-08-10 15:28 - 2015-08-10 15:28 - 02870984 _____ (ESET) C:\Users\*****\Downloads\esetsmartinstaller_deu.exe
2015-08-10 15:28 - 2015-08-10 15:28 - 00000000 ____D C:\Program Files (x86)\ESET
2015-08-10 15:24 - 2015-08-10 15:24 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Downloads\JRT.exe
2015-08-10 15:15 - 2015-08-11 12:01 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-10 15:15 - 2015-08-11 12:00 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-08-10 15:15 - 2015-08-10 15:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-10 15:15 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-08-10 15:15 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-10 15:15 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-08-10 15:13 - 2015-08-10 15:14 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-09 17:39 - 2015-08-09 17:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\ProgramData\BitDefender
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\LavasoftStatistics
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\Lavasoft
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2015-08-09 16:47 - 2015-01-06 13:47 - 01061776 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdsmtpp.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00209984 _____ (BitDefender) C:\WINDOWS\system32\BdFirewallSDK.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00195016 _____ (BitDefender) C:\WINDOWS\system32\httproxy.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00156936 _____ C:\WINDOWS\system32\bdfwcore.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00155912 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdpop3p.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00122928 _____ (BitDefender) C:\WINDOWS\system32\OEMbdpredir.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00096160 _____ (BitDefender) C:\WINDOWS\system32\bdpredir.dll
2015-08-09 16:47 - 2015-01-06 13:37 - 02084072 _____ (Bitdefender) C:\WINDOWS\system32\bdnc.dll
2015-08-09 16:45 - 2015-08-09 16:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\ProgramData\Lavasoft
2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2015-08-09 16:40 - 2015-08-09 16:41 - 02009904 _____ C:\Users\*****\Downloads\Adaware_Installer.exe
2015-08-08 11:33 - 2015-08-08 11:33 - 00001133 _____ C:\Users\*****\Desktop\Gutscheine.lnk
2015-08-08 11:01 - 2015-08-08 11:01 - 00001851 _____ C:\Users\*****\Desktop\Scanner.lnk
2015-08-07 08:33 - 2015-08-09 20:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-06 11:13 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 11:13 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-06 11:13 - 2015-07-30 08:22 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-06 11:13 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-06 11:13 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 11:13 - 2015-07-30 08:16 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-06 11:13 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-06 11:13 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-06 11:13 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 11:13 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-06 11:13 - 2015-07-30 08:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 11:13 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 11:13 - 2015-07-30 08:03 - 01983328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-06 11:13 - 2015-07-30 07:30 - 22319520 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-06 11:13 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-06 11:13 - 2015-07-30 06:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 11:13 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-06 11:13 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-06 11:13 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-06 11:13 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-08-06 11:13 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-08-06 11:13 - 2015-07-30 06:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-06 11:13 - 2015-07-30 06:17 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-06 11:13 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-06 11:13 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-06 11:13 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-06 11:13 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-06 11:13 - 2015-07-30 06:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-06 11:13 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-06 11:13 - 2015-07-30 06:07 - 20854776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-06 11:13 - 2015-07-30 06:02 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-06 11:13 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-06 11:13 - 2015-07-30 05:56 - 16707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-06 11:13 - 2015-07-30 05:54 - 24591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-06 11:13 - 2015-07-30 05:54 - 02415616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-06 11:13 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-06 11:13 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-06 11:13 - 2015-07-30 05:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-06 11:13 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-06 11:13 - 2015-07-30 05:42 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-06 11:13 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-06 11:13 - 2015-07-30 05:40 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-06 11:13 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-06 11:13 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 11:13 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-06 11:13 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-06 11:13 - 2015-07-30 05:32 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-06 11:13 - 2015-07-30 05:32 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-06 11:13 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-06 11:13 - 2015-07-30 05:23 - 13024256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-06 11:13 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-06 11:13 - 2015-07-30 05:14 - 19333632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-06 11:13 - 2015-07-30 05:13 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-06 11:13 - 2015-07-30 05:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-06 11:13 - 2015-07-30 05:12 - 01914880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-06 11:13 - 2015-07-30 05:11 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-06 11:13 - 2015-07-30 05:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-06 11:13 - 2015-07-30 05:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 11:13 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 00495616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-08-06 11:13 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-08-06 11:13 - 2015-07-30 04:58 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-06 11:13 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-08-05 18:09 - 2015-08-05 18:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Zarb
2015-08-05 18:07 - 2015-08-05 18:07 - 00003120 _____ C:\WINDOWS\SysWOW64\6CQFRLMQ.ocx
2015-08-05 18:06 - 2015-08-05 18:08 - 00000000 ____D C:\Program Files (x86)\Zarb 5
2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zarb 5
2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\InstallMate
2015-08-05 18:06 - 2010-07-13 11:24 - 00605184 ____N (Concept Software, Inc.) C:\WINDOWS\SysWOW64\KEYLIB32.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-08-04 17:27 - 2015-08-04 17:28 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11(1).exe
2015-08-03 12:34 - 2015-08-03 12:34 - 00000000 ____D C:\Users\*****\AppData\Local\NetworkTiles
2015-08-02 13:15 - 2015-08-02 12:26 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-02 13:13 - 2015-08-02 13:13 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 12502016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 11260928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03589632 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02150696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01601024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 01161728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00643616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00606392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00539216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-02 13:13 - 2015-08-02 13:13 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00000000 ____D C:\Windows.old
2015-08-02 13:11 - 2015-08-02 13:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\MSBuild
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-02 13:10 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-02 13:10 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-02 13:10 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-02 13:10 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-02 13:10 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-02 13:10 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-02 12:28 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\MicrosoftEdge
2015-08-02 12:27 - 2015-08-02 12:27 - 00002375 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-02 12:26 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\Comms
2015-08-02 12:26 - 2015-08-02 12:26 - 00000020 ___SH C:\Users\*****\ntuser.ini
2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\TileDataLayer
2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\Publishers
2015-08-02 12:25 - 2015-08-10 19:09 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-02 12:23 - 2015-08-02 12:23 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 __SHD C:\Recovery
2015-08-02 12:20 - 2015-08-02 12:20 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-02 12:19 - 2015-08-10 17:08 - 00000000 ____D C:\Users\*****
2015-08-02 12:19 - 2015-08-02 12:26 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Vorlagen
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Startmenü
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Netzwerkumgebung
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Lokale Einstellungen
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Eigene Dateien
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Druckumgebung
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Musik
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Bilder
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Verlauf
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Anwendungsdaten
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Anwendungsdaten
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-02 12:19 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-02 12:18 - 2015-08-11 12:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-02 12:18 - 2015-08-04 17:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\Program Files\Realtek
2015-08-02 12:18 - 2015-07-23 03:10 - 06873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-02 12:18 - 2015-07-23 03:10 - 00579912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-02 12:18 - 2015-07-22 06:29 - 05121613 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-02 12:17 - 2015-08-11 12:12 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-08-02 12:17 - 2015-08-02 12:19 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-02 12:17 - 2015-08-02 12:17 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Synaptics
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Intel
2015-08-02 12:17 - 2015-07-17 23:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-08-02 12:17 - 2015-07-17 23:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-08-02 12:16 - 2015-08-02 12:16 - 00029787 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-02 12:15 - 2015-08-10 17:30 - 00003944 _____ C:\WINDOWS\PFRO.log
2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagerr.xml
2015-08-02 12:04 - 2015-08-02 12:23 - 00006611 _____ C:\WINDOWS\comsetup.log
2015-08-02 11:38 - 2015-07-23 02:46 - 00572232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-08-02 11:32 - 2015-08-02 11:32 - 00000000 ___HD C:\ProgramData\CanonIJFAX
2015-08-02 10:35 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-02 10:35 - 2015-08-02 10:35 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2015-08-02 10:35 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-08-02 10:27 - 2015-08-02 10:27 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-08-02 10:24 - 2015-08-02 10:25 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11.exe
2015-08-01 22:23 - 2015-08-01 22:23 - 00179998 _____ C:\Users\*****\Downloads\importexporttools-3.2.1-sm+tb.xpi
2015-08-01 22:19 - 2015-08-01 22:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-07-31 21:59 - 2015-07-31 21:59 - 00002030 _____ C:\Users\*****\Desktop\Cahier de verbes_NEU.lnk
2015-07-28 15:58 - 2015-07-28 15:58 - 00000000 ____D C:\Users\*****\AppData\Roaming\elsterformular
2015-07-28 15:57 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-07-28 15:57 - 2015-07-28 15:58 - 00000000 ____D C:\ProgramData\elsterformular
2015-07-28 15:57 - 2015-07-28 15:57 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-28 15:55 - 2015-07-28 15:56 - 65326880 _____ (Landesfinanzdirektion Thüringen) C:\Users\*****\Downloads\ElsterFormular-16.2.24.20150630p.exe
2015-07-23 04:02 - 2015-07-23 04:02 - 42730312 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 37749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 30518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 22973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 18376584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 16160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 16011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 15754192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 14511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 13274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 12973680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 11843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 11142984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-07-23 04:02 - 2015-07-23 04:02 - 03351864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02963208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435362.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435362.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00787384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00632664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00408208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00384464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00364360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00314936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00031976 _____ C:\WINDOWS\system32\nvinfo.pb
2015-07-22 18:56 - 2015-07-22 18:56 - 00886528 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-07-22 18:56 - 2015-07-22 18:56 - 00100000 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-07-18 00:36 - 2015-07-18 00:36 - 06389688 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2015-07-18 00:36 - 2015-07-18 00:36 - 00519056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-07-18 00:36 - 2015-07-18 00:36 - 00283024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 01008016 _____ C:\WINDOWS\system32\igfxSDK.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00927120 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00923536 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00589712 _____ C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00448912 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00396688 _____ C:\WINDOWS\system32\igfxTray.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00351120 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00328080 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00249232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00219024 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00214416 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00213904 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-07-18 00:35 - 2015-07-18 00:35 - 00157072 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-07-18 00:34 - 2015-07-18 00:34 - 36681912 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 35768808 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 30404056 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 29613040 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 13727296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 12880160 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 11276968 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 10528136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 06305696 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 05121136 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 05092320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 04841488 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 01858632 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 01767992 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 01765408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 01456408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00284280 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00269360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00220432 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00200856 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00184352 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00163776 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00162752 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00160680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00141080 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00140056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00036616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-07-18 00:34 - 2015-07-18 00:34 - 00004682 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-07-18 00:29 - 2015-07-18 00:29 - 11384832 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll
2015-07-18 00:29 - 2015-07-18 00:29 - 04443136 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-07-18 00:29 - 2015-07-18 00:29 - 00425472 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-07-18 00:29 - 2015-07-18 00:29 - 00397824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 29084160 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 06741482 _____ C:\WINDOWS\system32\igdclbif.bin
2015-07-18 00:28 - 2015-07-18 00:28 - 05467648 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 05245440 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 02028032 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 01216000 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00723456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2015-07-18 00:28 - 2015-07-18 00:28 - 00624128 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2015-07-18 00:28 - 2015-07-18 00:28 - 00386048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2015-07-18 00:28 - 2015-07-18 00:28 - 00353280 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00256000 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-07-18 00:28 - 2015-07-18 00:28 - 00243200 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00172032 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00090112 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00086016 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00082944 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00073728 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00064512 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00011776 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00011264 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-07-18 00:28 - 2015-07-18 00:28 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-07-18 00:24 - 2015-07-18 00:24 - 00153600 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2015-07-18 00:18 - 2015-07-18 00:18 - 03873280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-07-18 00:17 - 2015-07-18 00:17 - 00373248 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-07-18 00:17 - 2015-07-18 00:17 - 00300032 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-07-18 00:16 - 2015-07-18 00:16 - 03801600 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2015-07-18 00:16 - 2015-07-18 00:16 - 00970752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-07-18 00:09 - 2015-07-18 00:09 - 08507392 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll
2015-07-18 00:03 - 2015-07-18 00:03 - 00035328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 02813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2015-07-17 23:58 - 2015-07-17 23:58 - 01565696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 01156608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00803113 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2015-07-17 23:58 - 2015-07-17 23:58 - 00511260 _____ C:\WINDOWS\system32\cp_resources.bin
2015-07-17 23:58 - 2015-07-17 23:58 - 00331808 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00313888 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00143904 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-07-17 23:58 - 2015-07-17 23:58 - 00044025 _____ C:\WINDOWS\system32\iglhxo64.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00043816 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00043494 _____ C:\WINDOWS\system32\iglhxc64.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00043298 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00043256 _____ C:\WINDOWS\system32\iglhxg64.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00042079 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2015-07-17 23:58 - 2015-07-17 23:58 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2015-07-17 11:19 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3
2015-07-17 11:19 - 2015-07-17 11:19 - 00000000 ____D C:\Users\*****\AppData\Roaming\LibreOffice
2015-07-17 11:10 - 2015-07-17 11:16 - 226148352 _____ C:\Users\*****\Downloads\LibreOffice_4.3.7_Win_x86.msi
2015-07-17 10:41 - 2015-08-02 12:21 - 00000000 ____D C:\WINDOWS\de
2015-07-17 10:41 - 2015-07-17 10:41 - 00001401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-07-17 10:41 - 2015-07-17 10:41 - 00001332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-07-17 10:41 - 2015-07-17 10:41 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-17 10:40 - 2015-07-17 10:41 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live
2015-07-17 10:40 - 2015-07-17 10:41 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-07-17 10:40 - 2015-07-17 10:40 - 00000198 _____ C:\WINDOWS\DirectX.log
2015-07-17 10:40 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-07-17 10:40 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-07-17 10:40 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-07-17 10:40 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-07-17 10:40 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-07-17 10:40 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-07-17 10:40 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-07-17 10:40 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-07-17 10:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-07-17 10:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-07-17 10:39 - 2015-07-17 10:39 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-11 12:13 - 2015-06-28 16:29 - 00005412 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MightyMannz-***** MightyMannz
2015-08-11 12:12 - 2015-07-10 14:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-11 12:12 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-11 12:11 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-11 12:11 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-08-11 12:03 - 2015-05-17 10:00 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-11 10:03 - 2015-05-02 13:45 - 00000000 ____D C:\Users\*****\AppData\Local\Packages
2015-08-10 22:11 - 2015-05-03 19:23 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net
2015-08-10 19:58 - 2015-05-03 19:22 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-08-10 19:09 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat
2015-08-10 19:09 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat
2015-08-10 18:53 - 2015-05-03 19:24 - 00000000 ____D C:\Users\*****\Documents\StarCraft II
2015-08-09 20:56 - 2015-07-10 14:20 - 00348440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-09 20:56 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-08-09 17:40 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-09 16:45 - 2015-07-10 14:20 - 00023276 _____ C:\WINDOWS\setupact.log
2015-08-09 16:42 - 2015-05-05 20:17 - 00000000 ____D C:\Eigene Programme
2015-08-09 12:23 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-08 10:59 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-05 19:07 - 2015-05-09 00:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc
2015-08-05 18:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-04 18:02 - 2015-05-03 13:59 - 00000000 ____D C:\Users\*****\Desktop\npg5s04x.Mannz
2015-08-04 17:12 - 2015-05-03 18:58 - 00000000 ____D C:\Users\*****\Documents\Steuererklärungen
2015-08-04 17:11 - 2015-05-03 18:57 - 00000000 ____D C:\Users\*****\Documents\Schätzelein
2015-08-04 16:28 - 2015-05-03 19:22 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-04 10:01 - 2015-05-04 14:21 - 00000000 ____D C:\Users\*****\AppData\Local\Microsoft Help
2015-08-03 11:26 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-08-03 10:16 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-03 10:15 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-08-02 13:15 - 2015-07-10 13:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-02 13:13 - 2015-07-10 13:06 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-02 13:13 - 2015-07-10 13:06 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-02 12:27 - 2015-06-01 22:03 - 00000000 ___RD C:\Users\*****\OneDrive
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-02 12:26 - 2014-11-11 23:48 - 00000000 ___HD C:\Intel
2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Registration
2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT
2015-08-02 12:23 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default
2015-08-02 12:23 - 2015-05-17 10:00 - 00003882 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RSD C:\WINDOWS\Media
2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-02 12:22 - 2015-05-02 13:50 - 00003708 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2085589762-2516902079-1211625513-1001
2015-08-02 12:21 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-08-02 12:21 - 2015-07-10 11:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-02 12:21 - 2015-06-01 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-08-02 12:21 - 2015-05-05 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MasterTool - Basissystem
2015-08-02 12:21 - 2015-05-03 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-02 12:21 - 2015-05-03 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-08-02 12:21 - 2015-05-03 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5
2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-08-02 12:21 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-02 12:21 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-02 12:20 - 2015-07-10 13:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log
2015-08-02 12:20 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\InputMethod
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-08-02 12:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Help
2015-08-02 12:18 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-02 12:06 - 2015-05-02 13:31 - 01603677 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-08-02 12:04 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT
2015-08-02 11:41 - 2015-05-03 19:24 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-08-02 11:38 - 2015-05-03 14:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-02 10:35 - 2015-05-03 14:25 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList
2015-07-22 09:21 - 2015-06-01 21:50 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-16 18:46 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Oracle
2015-07-16 18:45 - 2015-05-02 14:02 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-07-16 18:45 - 2015-05-02 14:02 - 00000000 ____D C:\Program Files\Java
2015-07-16 18:45 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-15 22:09 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-15 20:39 - 2015-05-03 19:10 - 00000000 ____D C:\WINDOWS\system32\MRT
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-08-02 12:18 - 2015-08-02 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\*****\AppData\Local\Temp\Quarantine.exe
C:\Users\*****\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-09 17:19
==================== Ende von log ============================
|
|
12.08.2015, 08:46
| #7 |
| /// the machine /// TB-Ausbilder | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet …ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.08.2015, 18:18
| #8 |
| | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … Hallo, sorry, war 1 Woche im Urlaub. 1.) ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# end=init
# utc_time=2015-08-10 01:29:07
# local_time=2015-08-10 03:29:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 25208
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# end=updated
# utc_time=2015-08-10 01:32:41
# local_time=2015-08-10 03:32:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# engine=25208
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-10 01:58:52
# local_time=2015-08-10 03:58:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 103820 2689144 0 0
# scanned=548663
# found=0
# cleaned=0
# scan_time=1570
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# end=init
# utc_time=2015-08-21 12:31:37
# local_time=2015-08-21 02:31:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 25385
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# end=updated
# utc_time=2015-08-21 12:38:32
# local_time=2015-08-21 02:38:32 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f1d2b1d652f9964abaabbb3ca70419b9
# engine=25385
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-21 01:16:16
# local_time=2015-08-21 03:16:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 1051664 3636988 0 0
# scanned=558541
# found=0
# cleaned=0
# scan_time=2264
Code:
ATTFilter Results of screen317's Security Check version 1.006
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Ad-Aware Antivirus
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 8 Update 51
Adobe Flash Player 18.0.0.232
Mozilla Firefox (39.0.3)
Mozilla Thunderbird (38.1.0)
````````Process Check: objlist.exe by Laurent````````
Ad-Aware Ad-Aware Antivirus 11.7.485.8398 AdAwareService.exe
Ad-Aware Ad-Aware Antivirus 11.7.485.8398 AdAwareTray.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:21-08-2015
durchgeführt von ***** (Administrator) auf MIGHTYMANNZ (21-08-2015 15:19:03)
Gestartet von C:\Users\*****\Documents\Trojaner-Board
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
() C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [5060864 2015-06-16] (Realtek semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808 2015-06-24] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2085589762-2516902079-1211625513-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-06-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{69181ea1-6200-4310-a2d3-ed2f16f87cb3}: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ggbtl797.default
FF NewTab: about:blank
FF Homepage: hxxps://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-21] ()
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-21] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-06-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-02] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-02] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-02] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-18] (Intel Corporation)
R2 LavasoftAdAwareService11; C:\Eigene Programme\Ad-Aware\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe [716664 2015-06-24] ()
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session4; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session4; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session4; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session4; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-07-30] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-02] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-02] (Microsoft Corporation)
S3 UnistoreSvc_Session4; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc_Session4; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation)
S3 UserDataSvc_Session4; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session4; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S5 3ware; C:\Windows\System32\drivers\3ware.sys [107360 2015-07-10] (LSI)
R5 ACPI; C:\Windows\System32\drivers\ACPI.sys [565088 2015-08-02] (Microsoft Corporation)
R5 acpiex; C:\Windows\System32\Drivers\acpiex.sys [127840 2015-07-10] (Microsoft Corporation)
S5 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [1135456 2015-07-10] (PMC-Sierra)
S5 agp440; C:\Windows\System32\drivers\agp440.sys [63328 2015-07-10] (Microsoft Corporation)
S5 amdsata; C:\Windows\System32\drivers\amdsata.sys [83296 2015-07-10] (Advanced Micro Devices)
S5 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259424 2015-07-10] (AMD Technologies Inc.)
S5 amdxata; C:\Windows\System32\drivers\amdxata.sys [26976 2015-07-10] (Advanced Micro Devices)
S5 arcsas; C:\Windows\System32\drivers\arcsas.sys [131936 2015-07-10] (PMC-Sierra, Inc.)
S5 atapi; C:\Windows\System32\drivers\atapi.sys [28512 2015-07-10] (Microsoft Corporation)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2015-01-06] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261496 2015-01-06] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2015-01-06] (BitDefender)
S5 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [531296 2015-07-10] (Broadcom Corporation)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7545008 2014-01-29] (Broadcom Corporation)
R1 BdfNdisf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [97816 2015-01-06] (BitDefender LLC)
R1 bdfwfpf; C:\Eigene Programme\Ad-Aware\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [107080 2015-01-06] (BitDefender LLC)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
R5 CLFS; C:\Windows\System32\drivers\CLFS.sys [380768 2015-07-10] (Microsoft Corporation)
R5 CNG; C:\Windows\System32\Drivers\cng.sys [601344 2015-08-02] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
R5 disk; C:\Windows\System32\drivers\disk.sys [101216 2015-07-10] (Microsoft Corporation)
S5 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R5 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [88928 2015-07-10] (Microsoft Corporation)
S5 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [116576 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
R5 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [83808 2015-07-10] (Microsoft Corporation)
R5 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [368992 2015-07-10] (Microsoft Corporation)
U5 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [31072 2015-07-10] (Microsoft Corporation)
R5 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [633184 2015-07-10] (Microsoft Corporation)
S5 gagp30kx; C:\Windows\System32\drivers\gagp30kx.sys [66912 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
R3 gzflt; C:\Eigene Programme\Ad-Aware\Antimalware Engine\3.0.98.0\gzflt.sys [155912 2015-01-22] (BitDefender LLC)
S5 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64352 2015-07-10] (Hewlett-Packard Company)
S5 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [29024 2015-07-10] (Microsoft Corporation)
R5 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [645992 2014-03-26] (Intel Corporation)
S5 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [673120 2015-07-10] (Intel Corporation)
S5 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412000 2015-07-10] (Intel Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S5 intelide; C:\Windows\System32\drivers\intelide.sys [19296 2015-07-10] (Microsoft Corporation)
S5 intelpep; C:\Windows\System32\drivers\intelpep.sys [43872 2015-07-10] (Microsoft Corporation)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S5 isapnp; C:\Windows\System32\drivers\isapnp.sys [22368 2015-07-10] (Microsoft Corporation)
R5 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [131424 2015-07-10] (Microsoft Corporation)
R5 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [158560 2015-07-10] (Microsoft Corporation)
S5 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [108896 2015-07-10] (LSI Corporation)
S5 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S5 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S5 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82784 2015-07-10] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S5 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
S5 megasr; C:\Windows\System32\drivers\megasr.sys [575840 2015-07-10] (LSI Corporation, Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R5 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [103264 2015-07-10] (Microsoft Corporation)
R5 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [19296 2015-07-10] (Microsoft Corporation)
R5 Mup; C:\Windows\System32\Drivers\mup.sys [118624 2015-07-10] (Microsoft Corporation)
S5 mvumis; C:\Windows\System32\drivers\mvumis.sys [63840 2015-07-10] (Marvell Semiconductor, Inc.)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
R5 NDIS; C:\Windows\System32\drivers\ndis.sys [1168736 2015-08-02] (Microsoft Corporation)
S5 nvraid; C:\Windows\System32\drivers\nvraid.sys [150368 2015-07-10] (NVIDIA Corporation)
S5 nvstor; C:\Windows\System32\drivers\nvstor.sys [166240 2015-07-10] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S5 nv_agp; C:\Windows\System32\drivers\nv_agp.sys [126304 2015-07-10] (Microsoft Corporation)
R5 partmgr; C:\Windows\System32\drivers\partmgr.sys [117088 2015-07-10] (Microsoft Corporation)
R5 pci; C:\Windows\System32\drivers\pci.sys [325984 2015-08-02] (Microsoft Corporation)
S5 pciide; C:\Windows\System32\drivers\pciide.sys [15712 2015-07-10] (Microsoft Corporation)
S5 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [118112 2015-07-10] (Microsoft Corporation)
R5 pcw; C:\Windows\System32\drivers\pcw.sys [51552 2015-07-10] (Microsoft Corporation)
R5 pdc; C:\Windows\System32\drivers\pdc.sys [98144 2015-07-10] (Microsoft Corporation)
S5 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S5 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
R5 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [235872 2015-07-10] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-16] (Realtek Semiconductor Corp.)
S5 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [109920 2015-07-10] (Microsoft Corporation)
S5 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44896 2015-07-10] (Silicon Integrated Systems Corp.)
S5 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81760 2015-07-10] (Silicon Integrated Systems)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
R5 spaceport; C:\Windows\System32\drivers\spaceport.sys [474464 2015-07-10] (Microsoft Corporation)
S5 stexstor; C:\Windows\System32\drivers\stexstor.sys [31072 2015-07-10] (Promise Technology, Inc.)
S5 storahci; C:\Windows\System32\drivers\storahci.sys [133984 2015-07-10] (Microsoft Corporation)
S5 storflt; C:\Windows\System32\drivers\vmstorfl.sys [45920 2015-07-10] (Microsoft Corporation)
S5 stornvme; C:\Windows\System32\drivers\stornvme.sys [78688 2015-07-10] (Microsoft Corporation)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S5 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
S5 storvsc; C:\Windows\System32\drivers\storvsc.sys [36192 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
R5 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2430816 2015-07-10] (Microsoft Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)
S5 uagp35; C:\Windows\System32\drivers\uagp35.sys [66400 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-02] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S5 uliagpkx; C:\Windows\System32\drivers\uliagpkx.sys [66912 2015-07-10] (Microsoft Corporation)
R5 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [42848 2015-07-10] (Microsoft Corporation)
S5 vmbus; C:\Windows\System32\drivers\vmbus.sys [125792 2015-07-10] (Microsoft Corporation)
R5 volmgr; C:\Windows\System32\drivers\volmgr.sys [81248 2015-07-10] (Microsoft Corporation)
R5 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [370016 2015-07-10] (Microsoft Corporation)
R5 volsnap; C:\Windows\System32\drivers\volsnap.sys [378720 2015-07-10] (Microsoft Corporation)
S5 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [166752 2015-07-10] (VIA Technologies Inc.,Ltd)
S5 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305504 2015-07-10] (VIA Corporation)
R5 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [892224 2015-07-10] (Microsoft Corporation)
R5 WFPLWFS; C:\Windows\System32\drivers\wfplwfs.sys [153440 2015-07-10] (Microsoft Corporation)
R5 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R5 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
R5 Wof; C:\Windows\System32\Drivers\Wof.sys [199008 2015-07-10] (Microsoft Corporation)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> Keine Datei
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-21 15:14 - 2015-08-21 15:14 - 00016148 _____ C:\WINDOWS\system32\MIGHTYMANNZ_*****_HistoryPrediction.bin
2015-08-11 12:10 - 2015-08-11 12:11 - 00000000 ____D C:\AdwCleaner
2015-08-11 12:01 - 2015-08-11 12:10 - 02248704 _____ C:\Users\*****\Downloads\AdwCleaner_4.208(1).exe
2015-08-11 12:00 - 2015-08-11 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-08-11 10:09 - 2015-08-11 10:09 - 00000000 ____D C:\Users\*****\Documents\Benutzerdefinierte Office-Vorlagen
2015-08-10 22:06 - 2015-08-10 22:06 - 00000279 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk
2015-08-10 19:56 - 2015-08-10 20:04 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta
2015-08-10 19:19 - 2015-08-10 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II - Legacy of the Void Beta
2015-08-10 19:12 - 2015-08-11 19:04 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta
2015-08-10 18:44 - 2015-08-10 18:44 - 03183672 _____ (Blizzard Entertainment) C:\Users\*****\Downloads\StarCraft-II-Setup-deDE(1).exe
2015-08-10 17:50 - 2015-08-10 17:50 - 02248704 _____ C:\Users\*****\Downloads\AdwCleaner_4.208.exe
2015-08-10 17:09 - 2015-08-10 17:24 - 00380416 _____ C:\Users\*****\Downloads\Gmer-19357.exe
2015-08-10 17:08 - 2015-08-10 17:08 - 00000000 _____ C:\Users\*****\defogger_reenable
2015-08-10 17:07 - 2015-08-10 17:07 - 00050477 _____ C:\Users\*****\Downloads\Defogger.exe
2015-08-10 16:16 - 2015-08-21 15:18 - 00000000 ____D C:\Users\*****\Documents\Trojaner-Board
2015-08-10 16:03 - 2015-08-21 15:19 - 00000000 ____D C:\FRST
2015-08-10 16:03 - 2015-08-10 16:03 - 00043634 _____ C:\Users\*****\Downloads\Addition.txt
2015-08-10 15:30 - 2015-08-10 15:59 - 00852684 _____ C:\Users\*****\Downloads\SecurityCheck.exe
2015-08-10 15:28 - 2015-08-10 15:28 - 02870984 _____ (ESET) C:\Users\*****\Downloads\esetsmartinstaller_deu.exe
2015-08-10 15:28 - 2015-08-10 15:28 - 00000000 ____D C:\Program Files (x86)\ESET
2015-08-10 15:24 - 2015-08-10 15:24 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Downloads\JRT.exe
2015-08-10 15:15 - 2015-08-11 12:01 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-10 15:15 - 2015-08-11 12:00 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-08-10 15:15 - 2015-08-10 15:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-10 15:15 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-08-10 15:15 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-10 15:15 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-08-10 15:13 - 2015-08-10 15:14 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-09 17:39 - 2015-08-09 17:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\ProgramData\BitDefender
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\LavasoftStatistics
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\Users\*****\AppData\Roaming\Lavasoft
2015-08-09 16:47 - 2015-08-09 16:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2015-08-09 16:47 - 2015-01-06 13:47 - 01061776 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdsmtpp.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00209984 _____ (BitDefender) C:\WINDOWS\system32\BdFirewallSDK.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00195016 _____ (BitDefender) C:\WINDOWS\system32\httproxy.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00156936 _____ C:\WINDOWS\system32\bdfwcore.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00155912 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\bdpop3p.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00122928 _____ (BitDefender) C:\WINDOWS\system32\OEMbdpredir.dll
2015-08-09 16:47 - 2015-01-06 13:47 - 00096160 _____ (BitDefender) C:\WINDOWS\system32\bdpredir.dll
2015-08-09 16:47 - 2015-01-06 13:37 - 02084072 _____ (Bitdefender) C:\WINDOWS\system32\bdnc.dll
2015-08-09 16:45 - 2015-08-09 16:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\ProgramData\Lavasoft
2015-08-09 16:41 - 2015-08-09 16:41 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2015-08-09 16:40 - 2015-08-09 16:41 - 02009904 _____ C:\Users\*****\Downloads\Adaware_Installer.exe
2015-08-08 11:33 - 2015-08-08 11:33 - 00001133 _____ C:\Users\*****\Desktop\Gutscheine.lnk
2015-08-08 11:01 - 2015-08-08 11:01 - 00001851 _____ C:\Users\*****\Desktop\Scanner.lnk
2015-08-07 08:33 - 2015-08-09 20:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-06 11:13 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 11:13 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-06 11:13 - 2015-07-30 08:22 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-06 11:13 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:17 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-06 11:13 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 11:13 - 2015-07-30 08:16 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-06 11:13 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-06 11:13 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-06 11:13 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 11:13 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 11:13 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-06 11:13 - 2015-07-30 08:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 11:13 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 11:13 - 2015-07-30 08:03 - 01983328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-06 11:13 - 2015-07-30 07:30 - 22319520 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-06 11:13 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-06 11:13 - 2015-07-30 06:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 11:13 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-06 11:13 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-06 11:13 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-06 11:13 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-08-06 11:13 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-08-06 11:13 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-08-06 11:13 - 2015-07-30 06:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-06 11:13 - 2015-07-30 06:17 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-06 11:13 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-06 11:13 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-06 11:13 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-06 11:13 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-06 11:13 - 2015-07-30 06:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-06 11:13 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-06 11:13 - 2015-07-30 06:07 - 20854776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-06 11:13 - 2015-07-30 06:02 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-06 11:13 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-06 11:13 - 2015-07-30 05:56 - 16707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-06 11:13 - 2015-07-30 05:54 - 24591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-06 11:13 - 2015-07-30 05:54 - 02415616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-06 11:13 - 2015-07-30 05:53 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-06 11:13 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-06 11:13 - 2015-07-30 05:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-06 11:13 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-06 11:13 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-06 11:13 - 2015-07-30 05:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-06 11:13 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-06 11:13 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-06 11:13 - 2015-07-30 05:42 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-06 11:13 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-06 11:13 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-06 11:13 - 2015-07-30 05:40 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-06 11:13 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-06 11:13 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 11:13 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-06 11:13 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-06 11:13 - 2015-07-30 05:32 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-06 11:13 - 2015-07-30 05:32 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-06 11:13 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-06 11:13 - 2015-07-30 05:23 - 13024256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-06 11:13 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-06 11:13 - 2015-07-30 05:14 - 19333632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-06 11:13 - 2015-07-30 05:13 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-06 11:13 - 2015-07-30 05:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-06 11:13 - 2015-07-30 05:12 - 01914880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-06 11:13 - 2015-07-30 05:11 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-06 11:13 - 2015-07-30 05:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-06 11:13 - 2015-07-30 05:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 11:13 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-08-06 11:13 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 00495616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-06 11:13 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-08-06 11:13 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-08-06 11:13 - 2015-07-30 04:58 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-06 11:13 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-08-05 18:09 - 2015-08-05 18:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Zarb
2015-08-05 18:07 - 2015-08-05 18:07 - 00003120 _____ C:\WINDOWS\SysWOW64\6CQFRLMQ.ocx
2015-08-05 18:06 - 2015-08-05 18:08 - 00000000 ____D C:\Program Files (x86)\Zarb 5
2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zarb 5
2015-08-05 18:06 - 2015-08-05 18:06 - 00000000 ____D C:\ProgramData\InstallMate
2015-08-05 18:06 - 2010-07-13 11:24 - 00605184 ____N (Concept Software, Inc.) C:\WINDOWS\SysWOW64\KEYLIB32.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-08-04 17:28 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-08-04 17:27 - 2015-08-04 17:28 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11(1).exe
2015-08-03 12:34 - 2015-08-03 12:34 - 00000000 ____D C:\Users\*****\AppData\Local\NetworkTiles
2015-08-02 13:15 - 2015-08-02 12:26 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-02 13:13 - 2015-08-02 13:13 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 12502016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 11260928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03589632 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02150696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01601024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 01161728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-08-02 13:13 - 2015-08-02 13:13 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00643616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00606392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00539216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-02 13:13 - 2015-08-02 13:13 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-08-02 13:13 - 2015-08-02 13:13 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-02 13:13 - 2015-08-02 13:13 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-02 13:13 - 2015-08-02 13:13 - 00000000 ____D C:\Windows.old
2015-08-02 13:11 - 2015-08-02 13:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files\MSBuild
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-02 13:10 - 2015-08-02 13:10 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-02 13:10 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-02 13:10 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-02 13:10 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-02 13:10 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-02 13:10 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-02 13:10 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-02 12:28 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\MicrosoftEdge
2015-08-02 12:27 - 2015-08-02 12:27 - 00002375 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-02 12:26 - 2015-08-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Local\Comms
2015-08-02 12:26 - 2015-08-02 12:26 - 00000020 ___SH C:\Users\*****\ntuser.ini
2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\TileDataLayer
2015-08-02 12:26 - 2015-08-02 12:26 - 00000000 ____D C:\Users\*****\AppData\Local\Publishers
2015-08-02 12:25 - 2015-08-11 12:18 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-02 12:23 - 2015-08-02 12:23 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-08-02 12:23 - 2015-08-02 12:23 - 00000000 __SHD C:\Recovery
2015-08-02 12:20 - 2015-08-02 12:20 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-02 12:20 - 2015-08-02 12:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-02 12:19 - 2015-08-10 17:08 - 00000000 ____D C:\Users\*****
2015-08-02 12:19 - 2015-08-02 12:26 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Vorlagen
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Startmenü
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Netzwerkumgebung
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Lokale Einstellungen
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Eigene Dateien
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Druckumgebung
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Musik
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Documents\Eigene Bilder
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Verlauf
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\AppData\Local\Anwendungsdaten
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 _SHDL C:\Users\*****\Anwendungsdaten
2015-08-02 12:19 - 2015-08-02 12:19 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-02 12:19 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-02 12:18 - 2015-08-11 12:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-02 12:18 - 2015-08-04 17:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-02 12:18 - 2015-08-02 12:18 - 00000000 ____D C:\Program Files\Realtek
2015-08-02 12:18 - 2015-07-23 03:10 - 06873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-02 12:18 - 2015-07-23 03:10 - 00579912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-02 12:18 - 2015-07-23 03:10 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-02 12:18 - 2015-07-22 06:29 - 05121613 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-02 12:17 - 2015-08-21 14:29 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-08-02 12:17 - 2015-08-02 12:19 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-02 12:17 - 2015-08-02 12:17 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Synaptics
2015-08-02 12:17 - 2015-08-02 12:17 - 00000000 ____D C:\Program Files\Intel
2015-08-02 12:17 - 2015-07-17 23:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-08-02 12:17 - 2015-07-17 23:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-08-02 12:16 - 2015-08-02 12:16 - 00029787 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-02 12:15 - 2015-08-10 17:30 - 00003944 _____ C:\WINDOWS\PFRO.log
2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-08-02 12:04 - 2015-08-02 12:23 - 00009528 _____ C:\WINDOWS\diagerr.xml
2015-08-02 12:04 - 2015-08-02 12:23 - 00006611 _____ C:\WINDOWS\comsetup.log
2015-08-02 11:38 - 2015-07-23 02:46 - 00572232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-08-02 11:32 - 2015-08-02 11:32 - 00000000 ___HD C:\ProgramData\CanonIJFAX
2015-08-02 10:35 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-02 10:35 - 2015-08-02 10:35 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2015-08-02 10:35 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-08-02 10:35 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-08-02 10:27 - 2015-08-02 10:27 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-08-02 10:24 - 2015-08-02 10:25 - 37807552 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\GeForce_Experience_v2.5.12.11.exe
2015-08-01 22:23 - 2015-08-01 22:23 - 00179998 _____ C:\Users\*****\Downloads\importexporttools-3.2.1-sm+tb.xpi
2015-08-01 22:19 - 2015-08-01 22:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-07-31 21:59 - 2015-07-31 21:59 - 00002030 _____ C:\Users\*****\Desktop\Cahier de verbes_NEU.lnk
2015-07-28 15:58 - 2015-07-28 15:58 - 00000000 ____D C:\Users\*****\AppData\Roaming\elsterformular
2015-07-28 15:57 - 2015-08-02 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-07-28 15:57 - 2015-07-28 15:58 - 00000000 ____D C:\ProgramData\elsterformular
2015-07-28 15:57 - 2015-07-28 15:57 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-28 15:55 - 2015-07-28 15:56 - 65326880 _____ (Landesfinanzdirektion Thüringen) C:\Users\*****\Downloads\ElsterFormular-16.2.24.20150630p.exe
2015-07-23 04:02 - 2015-07-23 04:02 - 42730312 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 37749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 30518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 22973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 18376584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 16160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 16011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 15754192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 14511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 13274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 12973680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 11843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 11142984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-07-23 04:02 - 2015-07-23 04:02 - 03351864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02963208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 02164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435362.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435362.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 01053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00787384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00632664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00408208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00384464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00364360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00314936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-07-23 04:02 - 2015-07-23 04:02 - 00031976 _____ C:\WINDOWS\system32\nvinfo.pb
2015-07-22 18:56 - 2015-07-22 18:56 - 00886528 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-07-22 18:56 - 2015-07-22 18:56 - 00100000 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-21 15:03 - 2015-05-17 10:00 - 00003870 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-21 15:03 - 2015-05-17 10:00 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-21 14:45 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-21 14:44 - 2015-05-03 19:10 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-21 14:44 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-21 14:44 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-21 14:43 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-21 14:43 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-21 14:43 - 2015-05-03 19:10 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-21 14:39 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-11 20:50 - 2015-06-28 16:29 - 00005432 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MightyMannz-***** MightyMannz
2015-08-11 20:49 - 2015-07-10 14:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-11 19:56 - 2015-05-03 19:23 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net
2015-08-11 12:18 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat
2015-08-11 12:18 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat
2015-08-11 12:12 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-11 12:11 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-08-11 10:03 - 2015-05-02 13:45 - 00000000 ____D C:\Users\*****\AppData\Local\Packages
2015-08-10 19:58 - 2015-05-03 19:22 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-08-10 18:53 - 2015-05-03 19:24 - 00000000 ____D C:\Users\*****\Documents\StarCraft II
2015-08-09 20:56 - 2015-07-10 14:20 - 00348440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-09 20:56 - 2015-05-02 14:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-09 20:55 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-08-09 17:40 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-09 16:45 - 2015-07-10 14:20 - 00023276 _____ C:\WINDOWS\setupact.log
2015-08-09 16:42 - 2015-05-05 20:17 - 00000000 ____D C:\Eigene Programme
2015-08-08 17:38 - 2015-07-10 13:06 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-08 17:38 - 2015-07-10 13:06 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-05 19:07 - 2015-05-09 00:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc
2015-08-05 18:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-04 18:02 - 2015-05-03 13:59 - 00000000 ____D C:\Users\*****\Desktop\npg5s04x.Mannz
2015-08-04 17:12 - 2015-05-03 18:58 - 00000000 ____D C:\Users\*****\Documents\Steuererklärungen
2015-08-04 17:11 - 2015-05-03 18:57 - 00000000 ____D C:\Users\*****\Documents\Schätzelein
2015-08-04 16:28 - 2015-05-03 19:22 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-04 10:01 - 2015-05-04 14:21 - 00000000 ____D C:\Users\*****\AppData\Local\Microsoft Help
2015-08-03 11:26 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-08-03 10:16 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-03 10:15 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-08-02 13:15 - 2015-07-10 13:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-02 13:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-08-02 13:13 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-08-02 13:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-02 12:27 - 2015-06-01 22:03 - 00000000 ___RD C:\Users\*****\OneDrive
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-02 12:26 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-02 12:26 - 2014-11-11 23:48 - 00000000 ___HD C:\Intel
2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Registration
2015-08-02 12:23 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT
2015-08-02 12:23 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default
2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RSD C:\WINDOWS\Media
2015-08-02 12:22 - 2015-07-10 13:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-02 12:22 - 2015-05-02 13:50 - 00003708 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2085589762-2516902079-1211625513-1001
2015-08-02 12:21 - 2015-07-17 11:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3
2015-08-02 12:21 - 2015-07-17 10:41 - 00000000 ____D C:\WINDOWS\de
2015-08-02 12:21 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-08-02 12:21 - 2015-07-10 11:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-02 12:21 - 2015-06-01 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-08-02 12:21 - 2015-05-05 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MasterTool - Basissystem
2015-08-02 12:21 - 2015-05-03 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-02 12:21 - 2015-05-03 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-08-02 12:21 - 2015-05-03 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5
2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-02 12:21 - 2015-05-02 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
2015-08-02 12:21 - 2015-05-02 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-08-02 12:21 - 2015-05-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-02 12:20 - 2015-07-10 13:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log
2015-08-02 12:20 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\InputMethod
2015-08-02 12:19 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-08-02 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-08-02 12:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Help
2015-08-02 12:18 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-02 12:06 - 2015-05-02 13:31 - 01603677 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-08-02 12:04 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT
2015-08-02 11:41 - 2015-05-03 19:24 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-08-02 11:38 - 2015-05-03 14:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-02 10:35 - 2015-05-03 14:25 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList
2015-08-02 10:13 - 2015-05-02 13:57 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList
2015-07-22 09:21 - 2015-06-01 21:50 - 00000000 ____D C:\Program Files\Microsoft Office 15
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-08-02 12:18 - 2015-08-02 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\*****\AppData\Local\Temp\Quarantine.exe
C:\Users\*****\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-09 17:19
==================== Ende von Ergebnis ============================
Vielen Dank!! Ste49 |
|
22.08.2015, 10:39
| #9 |
| /// the machine /// TB-Ausbilder | Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … ja Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren .
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung:Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 10: Fake-Paypal-Mail erhalten und versehentlich Anhang geöffnet … |
| ad-aware, anhang, dateien, erfolgreich, erhalte, erhalten, eset, gefunde, gelöscht, gestern, geändert, herzlichen, malwarebytes, neustart, neustart des pcs, nichts, passwörter, pcs, poste, quarantäne, sämtliche, verschoben, versehentlich, weiterhelfen, windows, windows 10 |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
