| |
| |||||||
Log-Analyse und Auswertung: Malware : Ads by NameWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
04.09.2015, 20:24
| #31 |
 |  Malware : Ads by Name 2015-08-25 20:49 - 2010-11-05 03:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2015-08-25 20:49 - 2010-11-05 03:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2015-08-25 20:49 - 2010-11-05 03:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2015-08-25 20:49 - 2010-11-05 03:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2015-08-25 20:48 - 2010-11-20 14:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2015-08-25 20:48 - 2010-11-20 14:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2015-08-25 20:48 - 2010-11-20 14:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2015-08-25 20:48 - 2010-11-20 14:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2015-08-25 20:48 - 2010-11-20 14:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2015-08-25 20:48 - 2010-11-20 14:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2015-08-25 20:48 - 2010-11-20 14:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-08-25 20:48 - 2010-11-20 14:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2015-08-25 20:48 - 2010-11-20 14:18 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2015-08-25 20:48 - 2010-11-20 14:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2015-08-25 20:48 - 2010-11-20 14:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-08-25 20:48 - 2010-11-20 14:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2015-08-25 20:48 - 2010-11-20 14:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2015-08-25 20:48 - 2010-11-20 14:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2015-08-25 20:48 - 2010-11-20 14:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2015-08-25 20:48 - 2010-11-20 12:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-08-25 20:48 - 2010-11-20 12:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2015-08-25 20:48 - 2010-11-20 12:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-08-25 20:48 - 2010-11-20 12:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2015-08-25 20:48 - 2010-11-20 12:01 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SET3476.tmp 2015-08-25 20:48 - 2010-11-20 11:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys 2015-08-25 20:48 - 2010-11-20 11:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SET3A5D.tmp 2015-08-25 20:48 - 2010-11-20 11:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-08-25 20:48 - 2010-11-20 10:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2015-08-25 20:48 - 2010-11-20 10:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-08-25 20:48 - 2010-11-20 10:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2015-08-25 20:48 - 2010-11-20 10:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2015-08-25 20:48 - 2010-11-20 07:23 - 00053600 _____ C:\Windows\system32\dosx.exe 2015-08-25 20:48 - 2010-11-05 04:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2015-08-25 20:47 - 2010-11-20 14:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2015-08-25 20:47 - 2010-11-20 14:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2015-08-25 20:47 - 2010-11-20 14:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2015-08-25 20:47 - 2010-11-20 14:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2015-08-25 20:47 - 2010-11-20 14:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2015-08-25 20:47 - 2010-11-20 14:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2015-08-25 20:47 - 2010-11-20 14:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2015-08-25 20:47 - 2010-11-20 14:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2015-08-25 20:47 - 2010-11-20 14:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2015-08-25 20:47 - 2010-11-20 14:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2015-08-25 20:47 - 2010-11-20 13:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2015-08-25 20:47 - 2010-11-20 13:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2015-08-25 20:47 - 2010-11-20 12:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2015-08-25 20:47 - 2010-11-20 12:49 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-08-25 20:47 - 2010-11-20 12:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys 2015-08-25 20:47 - 2010-11-20 12:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll 2015-08-25 20:47 - 2010-11-20 12:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys 2015-08-25 20:47 - 2010-11-20 12:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2015-08-25 20:47 - 2010-11-20 12:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2015-08-25 20:47 - 2010-11-20 12:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2015-08-25 20:47 - 2010-11-20 11:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-08-25 20:47 - 2010-11-20 11:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2015-08-25 20:47 - 2010-11-20 11:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2015-08-25 20:47 - 2010-11-20 11:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2015-08-25 20:47 - 2010-11-20 11:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2015-08-25 20:47 - 2010-11-20 10:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2015-08-25 20:47 - 2010-11-20 10:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2015-08-25 20:47 - 2010-11-10 03:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml 2015-08-25 20:47 - 2010-11-05 04:20 - 00105559 _____ C:\Windows\system32\RacRules.xml 2015-08-25 00:03 - 2015-08-29 21:14 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-08-25 00:03 - 2015-08-25 00:03 - 00000000 ____D C:\Windows\system32\appraiser 2015-08-24 23:43 - 2015-08-24 23:47 - 00000000 ____D C:\Windows\system32\MRT 2015-08-24 23:42 - 2015-07-28 11:01 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-08-24 23:32 - 2015-08-24 23:33 - 00276578 _____ C:\Windows\msxml4-KB954430-enu.LOG 2015-08-24 23:32 - 2015-08-24 23:32 - 00282250 _____ C:\Windows\msxml4-KB973688-enu.LOG 2015-08-24 23:32 - 2015-08-24 23:32 - 00000000 ____D C:\Program Files\MSXML 4.0 2015-08-24 23:23 - 2015-05-21 15:18 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-08-24 23:23 - 2015-01-28 01:28 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-08-24 23:19 - 2009-10-24 06:00 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SETF55F.tmp 2015-08-24 22:09 - 2015-08-24 22:09 - 00000000 ____D C:\Program Files\ESET 2015-08-24 21:43 - 2015-08-28 07:16 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-08-24 21:43 - 2015-08-24 21:43 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-08-24 21:43 - 2015-08-24 21:43 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-08-24 21:38 - 2015-08-24 21:38 - 00242856 _____ C:\Users\mein\Firefox Setup Stub 40.0.2.exe 2015-08-24 21:11 - 2015-08-24 21:11 - 00001222 _____ C:\Users\mein\Desktop\Revo Uninstaller.lnk 2015-08-24 21:11 - 2015-08-24 21:11 - 00000000 ____D C:\Program Files\VS Revo Group 2015-08-24 21:10 - 2015-08-24 21:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\mein\Desktop\revosetup95.exe 2015-08-23 22:33 - 2015-08-23 22:33 - 00852684 _____ C:\Users\mein\Desktop\SecurityCheck.exe 2015-08-23 21:29 - 2015-08-23 21:29 - 02870984 _____ (ESET) C:\Users\mein\Desktop\esetsmartinstaller_deu.exe 2015-08-23 21:06 - 2015-08-24 20:59 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\086F3A8B.sys 2015-08-23 17:08 - 2015-08-23 17:08 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7CCF0476.sys 2015-08-23 12:35 - 2015-08-23 12:35 - 01798040 _____ (Malwarebytes Corporation) C:\Users\mein\Desktop\JRT_7.5.6.exe 2015-08-23 12:22 - 2015-08-23 12:22 - 01605632 _____ C:\Users\mein\Desktop\adwcleaner_5.003.exe 2015-08-23 11:51 - 2015-09-04 20:38 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-23 11:51 - 2015-08-23 11:51 - 00001060 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-23 11:51 - 2015-08-23 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-23 11:51 - 2015-08-23 11:51 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 2015-08-23 11:51 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-23 11:51 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-23 11:51 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-22 13:46 - 2015-08-22 14:13 - 00240417 _____ C:\Users\mein\Desktop\Don´s Challenge.odt 2015-08-22 13:20 - 2015-08-22 13:20 - 00010984 _____ C:\ComboFix.txt 2015-08-22 13:08 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2015-08-22 13:08 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2015-08-22 13:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2015-08-22 13:02 - 2015-08-22 13:20 - 00000000 ____D C:\Qoobox 2015-08-22 13:02 - 2015-08-22 13:19 - 00000000 ____D C:\Windows\erdnt 2015-08-22 13:02 - 2015-08-22 13:02 - 05635234 ____R (Swearware) C:\Users\mein\Desktop\ComboFix.exe 2015-08-21 22:43 - 2015-08-21 22:43 - 00001867 _____ C:\Users\Public\Desktop\NoaFX Trader.lnk 2015-08-21 20:11 - 2015-09-04 21:14 - 00000000 ____D C:\FRST 2015-08-21 20:10 - 2015-08-29 14:46 - 01690624 _____ (Farbar) C:\Users\mein\Desktop\FRST.exe 2015-08-18 22:47 - 2015-08-18 22:47 - 00001190 _____ C:\Windows\system32\ServiceConfig.xml 2015-08-18 22:34 - 2015-08-18 22:34 - 00000000 _____ C:\Windows\system32\SBRC.dat 2015-08-18 22:30 - 2015-08-18 22:30 - 00000000 ____D C:\ProgramData\VIPRE 2015-08-18 22:30 - 2013-09-04 14:57 - 00024040 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys 2015-08-18 22:30 - 2013-05-23 08:39 - 00043368 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys 2015-08-18 21:59 - 2015-09-04 20:38 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\Windows\system32\Drivers\VDD 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\Program Files\iS3 2015-08-18 21:59 - 2015-05-01 12:59 - 00097432 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\sbhips.sys 2015-08-18 21:52 - 2015-08-18 21:53 - 02042328 _____ (iS3, Inc.) C:\Users\mein\Downloads\STOPzillaPRO_Downloader.exe 2015-08-18 21:19 - 2015-08-18 21:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-18 20:42 - 2015-08-18 20:44 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\mein\Downloads\mbam-setup-2.1.8.1057.exe 2015-08-18 20:13 - 2015-08-18 20:14 - 00000830 _____ C:\AdwCleaner[S2].txt 2015-08-18 20:12 - 2015-08-18 20:12 - 00017628 _____ C:\AdwCleaner[C1].txt 2015-08-18 20:10 - 2015-08-23 12:24 - 00000000 ____D C:\AdwCleaner 2015-08-18 20:10 - 2015-08-18 20:12 - 00016875 _____ C:\AdwCleaner[S1].txt 2015-08-18 20:09 - 2015-08-18 20:09 - 01573888 _____ C:\Users\mein\Downloads\adwcleaner_5.001.exe 2015-08-13 18:37 - 2015-08-14 17:51 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7 2015-08-09 16:53 - 2015-08-09 16:53 - 00000000 ____D C:\Users\mein\AppData\Roaming\Opera Software 2015-08-09 16:53 - 2015-08-09 16:53 - 00000000 ____D C:\Users\mein\AppData\Local\Opera Software 2015-08-09 16:50 - 2015-08-09 16:50 - 00000000 _____ C:\Windows\prleth.sys 2015-08-09 16:50 - 2015-08-09 16:50 - 00000000 _____ C:\Windows\hgfs.sys 2015-08-07 07:13 - 2015-08-07 07:13 - 00000000 ____D C:\Users\mein\AppData\Local\CEF 2015-08-05 12:10 - 2015-08-05 12:10 - 00000383 _____ C:\ftconfig.ini ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-04 21:05 - 2015-06-16 20:53 - 00001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job 2015-09-04 21:05 - 2015-05-24 18:21 - 00000000 ____D C:\Users\mein\AppData\Roaming\Skype 2015-09-04 21:04 - 2015-06-16 20:53 - 00001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job 2015-09-04 21:04 - 2015-04-05 19:15 - 00000000 ____D C:\Users\mein\AppData\Roaming\Spotify 2015-09-04 20:38 - 2015-05-27 22:19 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job 2015-09-04 20:38 - 2015-02-11 15:08 - 01509989 _____ C:\Windows\WindowsUpdate.log 2015-09-04 18:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-09-04 18:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-09-04 18:27 - 2015-04-05 19:15 - 00000000 ____D C:\Users\mein\AppData\Local\Spotify 2015-09-04 18:27 - 2015-04-05 19:09 - 00000000 ___RD C:\Users\mein\Dropbox 2015-09-04 18:27 - 2015-04-05 19:07 - 00000000 ____D C:\Users\mein\AppData\Roaming\Dropbox 2015-09-04 18:23 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-04 18:23 - 2009-07-14 06:39 - 00037570 _____ C:\Windows\setupact.log 2015-09-02 21:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing 2015-09-02 21:38 - 2015-05-27 22:19 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job 2015-08-30 16:09 - 2015-02-12 11:24 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-30 16:04 - 2009-07-14 06:33 - 00286688 _____ C:\Windows\system32\FNTCACHE.DAT 2015-08-30 11:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2015-08-30 08:34 - 2009-07-14 06:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-08-30 08:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2015-08-29 21:14 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2015-08-29 12:41 - 2015-02-12 20:38 - 00064024 _____ C:\Users\mein\AppData\Local\GDIPFONTCACHEV1.DAT 2015-08-29 11:52 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2015-08-29 11:52 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-08-29 11:51 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal 2015-08-29 11:51 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2015-08-28 07:53 - 2015-05-24 18:20 - 00000000 ____D C:\ProgramData\Skype 2015-08-28 07:52 - 2015-05-24 18:21 - 00000000 ___RD C:\Program Files\Skype 2015-08-28 07:16 - 2015-02-12 21:54 - 00029236 _____ C:\Windows\PFRO.log 2015-08-26 07:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2015-08-25 21:14 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\de-DE 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2015-08-25 21:07 - 2009-07-14 04:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2015-08-25 00:04 - 2015-04-14 20:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-08-24 23:56 - 2015-04-14 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-08-24 21:38 - 2015-02-11 15:07 - 00000000 ____D C:\Users\mein 2015-08-23 10:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2015-08-22 13:20 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public 2015-08-22 13:19 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini 2015-08-21 22:43 - 2015-06-19 22:01 - 00000000 ____D C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NoaFX Binary Options 2015-08-21 22:43 - 2015-06-19 22:01 - 00000000 ____D C:\Program Files\NoaFX Binary Options 2015-08-21 22:43 - 2015-06-19 21:48 - 00000000 ____D C:\Program Files\NoaFX Trader 2015-08-21 22:43 - 2015-02-12 20:54 - 00000000 ____D C:\Users\mein\AppData\Local\Google 2015-08-21 20:23 - 2015-06-15 21:39 - 00000000 ____D C:\Program Files\Gyazo 2015-08-18 19:38 - 2015-02-12 20:54 - 00000000 ____D C:\Program Files\Google 2015-08-15 18:02 - 2015-04-11 17:25 - 00000000 ____D C:\ProgramData\WinZip Einige Dateien in TEMP: ==================== C:\Users\mein\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdmnyfw.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-23 10:17 ==================== Ende vom FRST.txt ============================ FRST Additions Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:28-08-2015
durchgeführt von mein (2015-09-04 21:15:31)
Gestartet von C:\Users\mein\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-159680054-709694231-1308323662-500 - Administrator - Disabled)
Gast (S-1-5-21-159680054-709694231-1308323662-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-159680054-709694231-1308323662-1003 - Limited - Enabled)
mein (S-1-5-21-159680054-709694231-1308323662-1000 - Administrator - Enabled) => C:\Users\mein
UpdatusUser (S-1-5-21-159680054-709694231-1308323662-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: STOPzilla AntiVirus (Disabled - Out of date) {581418F3-DCB4-03A7-8970-1C2B5929FC27}
AS: STOPzilla AntiVirus (Disabled - Out of date) {E375F917-FA8E-0C29-B3C0-275922AEB69A}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.2.2218 - AVAST Software)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Dropbox (HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
FX Choice - MetaTrader 4 (HKLM\...\FX Choice - MetaTrader 4) (Version: 4.00 - MetaQuotes Software Corp.)
Google Talk Plugin (HKLM\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (Version: 1.3.21.169 - Google Inc.) Hidden
Gyazo 3.1.6 (HKLM\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 40.0.3 (x86 de) (HKLM\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NoaFX Binary Options (HKLM\...\{1F1521E4-E7EB-45D7-8651-14790FA464A5}) (Version: 4.19.2 - Capital Market Investments)
NoaFX Trader (HKLM\...\NoaFX Trader) (Version: 4.00 - MetaQuotes Software Corp.)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
oCam Version 101.0 (HKLM\...\oCam_is1) (Version: 101.0 - OhSoft(ohsoft.net) - Best Software Developer)
OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.8 (HKLM\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Spotify) (Version: 1.0.13.108.gcd94e7db - Spotify AB)
STOPzilla AntiVirus 7 (HKLM\...\{F2EC8AA8-9B41-4628-A263-CDB2A7479E7F}) (Version: 7.0.3.102 - iS3, Inc.)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden
WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.27.5\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.1\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
==================== Wiederherstellungspunkte =========================
08-05-2015 15:50:51 Geplanter Prüfpunkt
17-05-2015 16:10:19 Geplanter Prüfpunkt
24-05-2015 16:27:16 Geplanter Prüfpunkt
02-06-2015 20:49:30 Geplanter Prüfpunkt
14-06-2015 12:53:39 Geplanter Prüfpunkt
19-06-2015 21:51:51 Windows Update
19-06-2015 22:00:37 Installed NoaFX Binary Options
27-06-2015 11:56:19 Geplanter Prüfpunkt
05-07-2015 13:42:25 Geplanter Prüfpunkt
13-07-2015 14:41:35 Geplanter Prüfpunkt
26-07-2015 10:56:27 Geplanter Prüfpunkt
02-08-2015 15:00:29 Geplanter Prüfpunkt
09-08-2015 15:10:43 Geplanter Prüfpunkt
15-08-2015 18:01:26 WinZip 19.0 wird entfernt
18-08-2015 21:38:40 Removed Skype Click to Call
18-08-2015 21:58:41 Installed STOPzilla AntiVirus 7.
18-08-2015 22:07:30 Windows Modules Installer
22-08-2015 13:08:30 ComboFix created restore point
23-08-2015 12:36:39 JRT Pre-Junkware Removal
24-08-2015 21:12:58 Revo Uninstaller's restore point - Mozilla Firefox 39.0.3 (x86 de)
24-08-2015 23:08:39 Windows Update
24-08-2015 23:25:36 Windows Update
25-08-2015 20:58:20 Windows Update
26-08-2015 17:23:04 Windows Update
26-08-2015 21:16:41 Windows Update
27-08-2015 23:15:12 Windows Update
28-08-2015 23:50:24 Windows Update
29-08-2015 16:27:57 Windows Update
29-08-2015 23:28:29 Windows Update
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:04 - 2015-09-03 20:05 - 00000057 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
0.0.0.1 mssplus.mcafee.com
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1522CC29-3FC5-4649-B54B-A954CD9ACD9A} - System32\Tasks\{536D8DAA-2236-42BF-AF20-8C96BEBF1840} => C:\Program Files\FX Choice - MetaTrader 4\terminal.exe [2015-07-04] (MetaQuotes Software Corp.)
Task: {1EF19417-292D-4ED0-B94B-1EB98BD6BE1B} - System32\Tasks\Gliwotsob => C:\ProgramData\Gliwotsob\1.0.4.1\cuovofco.exe
Task: {291E5624-5FDF-42D7-A941-AAFF2FA9AF17} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {2BCB96C5-BC8A-4049-9716-04CAF2CE75BA} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files\Gyazo\GyazoUpdate.exe [2015-08-19] ()
Task: {2DB30139-5BCF-4BEF-9EF7-52F77D191BB6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {3828FDBA-82C8-44C5-A3C2-6A7037BC5526} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {3BEE6803-8E71-43A1-8269-3832682CFBA3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-27] (Google Inc.)
Task: {3FF40EC9-DDAD-4DA0-B4DC-89C2B6B4342B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-27] (Google Inc.)
Task: {62DFAF43-7183-4483-95F3-A412F3DA291B} - System32\Tasks\{A52935C5-14F1-47F2-A78F-A53C2D329DD1} => pcalua.exe -a "C:\Medion\08. WLAN\AW-NE104_Win7_2010.0.0119.2010\Setup.exe" -d "C:\Medion\08. WLAN\AW-NE104_Win7_2010.0.0119.2010"
Task: {6F4BB4EE-E06F-4414-8FFE-F0B7D657268A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)
Task: {8773E4B3-1D0F-44C9-A286-87878E6D9BFF} - System32\Tasks\avastBCLRestartS-1-5-21-159680054-709694231-1308323662-1000 => Firefox.exe
Task: {BDD90CDE-2A5D-4757-BC82-4B8F836D4AFA} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files\Gyazo\GyazoUpdate.exe [2015-08-19] ()
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-04-23 06:59 - 2015-04-23 06:59 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-23 06:59 - 2015-04-23 06:59 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-03 20:03 - 2015-09-03 20:03 - 02964480 _____ () C:\Program Files\AVAST Software\Avast\defs\15090300\algo.dll
2015-09-04 18:26 - 2015-09-04 18:26 - 02964480 _____ () C:\Program Files\AVAST Software\Avast\defs\15090400\algo.dll
2015-02-21 14:21 - 2013-08-30 01:08 - 00088864 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-04-23 06:59 - 2015-04-23 06:59 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-09-04 18:24 - 2015-09-04 18:24 - 00071168 _____ () c:\users\mein\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdmnyfw.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00012800 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00779776 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-30 07:15 - 2015-08-05 07:26 - 00056320 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00012288 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 45067320 _____ () C:\Users\mein\AppData\Roaming\Spotify\libcef.dll
2015-08-18 22:30 - 2015-06-26 03:13 - 00184184 _____ () C:\Program Files\iS3\STOPzilla AntiVirus\Definitions\libBase64.dll
2015-08-18 22:30 - 2015-06-26 03:13 - 00175992 _____ () C:\Program Files\iS3\STOPzilla AntiVirus\Definitions\libMachoUniv.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 01649208 _____ () C:\Users\mein\AppData\Roaming\Spotify\libglesv2.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 00080952 _____ () C:\Users\mein\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\mein\Desktop\Screenshot 2015-09-02 21.19.12.png:com.dropbox.attributes
AlternateDataStreams: C:\Users\mein\Desktop\Screenshot 2015-09-02 21.19.33.png:com.dropbox.attributes
AlternateDataStreams: C:\Users\mein\Desktop\Screenshot 2015-09-02 21.23.31.png:com.dropbox.attributes
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-159680054-709694231-1308323662-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\mein\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{25CABD83-7E2B-48E9-9716-C71EE01EEA1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BEEB9934-C4BA-4E17-81F8-B4F96F82282F}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{3A3C9A74-A20B-4A2D-9DC3-0A6684736200}] => (Allow) C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{096C4484-603F-4F21-9DDA-B51FCEFBF5CB}] => (Allow) C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{C0994A30-1A2F-464F-9A16-C8E4A0806C17}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{8C6D41DD-EFD5-4513-B053-6F007658447B}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{D83A985B-EB7A-4B7E-8A31-9C41DF267C46}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{081C55DA-ACE4-46FF-BB23-5D203A31E332}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{A7B9AB8C-9316-461B-B306-003D14910E5C}C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{1B0A894E-FB6D-4B42-B4BB-F91A08DBB8C2}C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{2019863A-68CF-49DE-B177-110BF438736D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{573A322C-24BA-4D82-B61B-36A963C24E9C}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{03C789B2-80B3-4215-8783-DD4D61F26782}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C6CD251E-ACE6-48BA-9371-4CE27D5E78EE}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{137A1309-149D-4695-B385-4B6E7E35DF56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{60381692-A4B2-4D60-A950-32DF18864D08}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Coprozessor
Description: Coprozessor
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/29/2015 09:21:05 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-159680054-709694231-1308323662-1000}/">.
Error: (08/29/2015 12:03:54 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.
Vorgang:
Für die Sicherung initialisieren
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 22) (User: )
Description: Fehler im Volumenschattenkopie-Dienst: Eine vom Volumenschattenkopie-Dienst benötigte kritische Komponente ist nicht registriert.
Dies kann geschehen, wenn bei der Windows-Installation oder bei der Installation eines Schattenkopieanbieters ein Fehler aufgetreten ist.
Der von CoCreateInstance für die Klasse mit CLSID "{f5078f32-c551-11d3-89b9-0000f81fe221}" und dem Namen "MSXML30" zurückgegebene Fehler ist [0x80040154].
Vorgang:
Für die Sicherung initialisieren
Error: (08/26/2015 06:09:45 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Error: (08/24/2015 09:12:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {bfed4707-d656-4feb-bf9e-dfab2c4488c4}
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:42:43 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:42:42 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Systemfehler:
=============
Error: (09/04/2015 06:25:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (09/03/2015 07:59:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (09/03/2015 07:59:15 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 02.09.2015 um 22:00:45 unerwartet heruntergefahren.
Error: (09/02/2015 09:49:31 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 09:49:30 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 09:49:30 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 09:39:11 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 09:39:11 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 09:39:11 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (09/02/2015 07:10:56 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Microsoft Office:
=========================
Error: (08/29/2015 09:21:05 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: 300x80040d07iehistory://{S-1-5-21-159680054-709694231-1308323662-1000}/
Error: (08/29/2015 12:03:54 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80040154
Vorgang:
Für die Sicherung initialisieren
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 22) (User: )
Description: {f5078f32-c551-11d3-89b9-0000f81fe221}MSXML300x80040154
Vorgang:
Für die Sicherung initialisieren
Error: (08/26/2015 06:09:45 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Error: (08/24/2015 09:12:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {bfed4707-d656-4feb-bf9e-dfab2c4488c4}
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:42:43 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:42:42 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
CodeIntegrity:
===================================
Date: 2015-08-09 17:09:34.077
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:34.064
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:33.632
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:33.597
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.709
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.036
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.015
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.597
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.547
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.512
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 3327.24 MB
Verfügbarer physikalischer RAM: 2221.55 MB
Summe virtueller Speicher: 6652.79 MB
Verfügbarer virtueller Speicher: 4173.46 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:910.41 GB) (Free:797.71 GB) NTFS
Drive d: (Recovery) (Fixed) (Total:20 GB) (Free:12.12 GB) NTFS
Drive f: (INTENSO) (Fixed) (Total:931.28 GB) (Free:930.58 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=910.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: DD55E363)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)
==================== Ende vom Addition.txt ============================
|
|
04.09.2015, 20:27
| #32 |
| | Malware : Ads by Name Users shortcut scan result (x86) Version:28-08-2015
__________________durchgeführt von mein (2015-09-04 21:17:01) Gestartet von C:\Users\mein\Desktop Start-Modus: Normal ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Konsol RAR qo'llanmasi.lnk -> C:\Program Files\WinRAR\Rar.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR yordami.lnk -> C:\Program Files\WinRAR\WinRAR.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla\STOPzilla AntiVirus.lnk -> C:\Program Files\iS3\STOPzilla AntiVirus\STOPzilla.exe (iS3, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (McAfee, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Base.lnk -> C:\Program Files\OpenOffice 4\program\sbase.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Calc.lnk -> C:\Program Files\OpenOffice 4\program\scalc.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Draw.lnk -> C:\Program Files\OpenOffice 4\program\sdraw.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Impress.lnk -> C:\Program Files\OpenOffice 4\program\simpress.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Math.lnk -> C:\Program Files\OpenOffice 4\program\smath.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Writer.lnk -> C:\Program Files\OpenOffice 4\program\swriter.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice.lnk -> C:\Program Files\OpenOffice 4\program\soffice.exe (Apache Software Foundation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam\oCam.lnk -> C:\Program Files\oCam\oCam.exe (oh!soft ( Partner: MediaWave )) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam\Uninstall.lnk -> C:\Program Files\oCam\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoaFX Trader\MetaEditor.lnk -> C:\Program Files\NoaFX Trader\metaeditor.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoaFX Trader\NoaFX MT4.lnk -> C:\Program Files\NoaFX Trader\terminal.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoaFX Trader\Uninstall.lnk -> C:\Program Files\NoaFX Trader\uninstall.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\Silverlight.Configuration.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \Malwarebytes Anti-Malware entfernen.lnk -> C:\Program Files\ Malwarebytes Anti-Malware \unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \ Malwarebytes Anti-Malware .lnk -> C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\chameleon.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo GIF.lnk -> C:\Program Files\Gyazo\GyazoGIF.exe (Nota Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo.lnk -> C:\Program Files\Gyazo\Gyazowin.exe (Nota Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FX Choice - MetaTrader 4\FX Choice MT4.lnk -> C:\Program Files\FX Choice - MetaTrader 4\terminal.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FX Choice - MetaTrader 4\MetaEditor.lnk -> C:\Program Files\FX Choice - MetaTrader 4\metaeditor.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FX Choice - MetaTrader 4\Uninstall.lnk -> C:\Program Files\FX Choice - MetaTrader 4\uninstall.exe (MetaQuotes Software Corp.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\DVDVideoSoft Free Studio.lnk -> C:\Program Files\Common Files\DVDVideoSoft\FreeStudioManager.exe (Keine Datei) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Log Report.lnk -> C:\Program Files\Common Files\DVDVideoSoft\bin\DVSSysReport.exe (DVDVideoSoft Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Premium Membership.lnk -> C:\Program Files\Common Files\DVDVideoSoft\bin\PremiumMembershipOffer.exe (DVDVideoSoft Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Uninstall.lnk -> C:\Program Files\Common Files\DVDVideoSoft\lib\Uninstall.exe (Keine Datei) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\mein\Links\Desktop.lnk -> C:\Users\mein\Desktop () Shortcut: C:\Users\mein\Links\Downloads.lnk -> C:\Users\mein\Downloads () Shortcut: C:\Users\mein\Links\Dropbox.lnk -> C:\Users\mein\Dropbox () Shortcut: C:\Users\mein\Desktop\oCam.lnk -> C:\Program Files\oCam\oCam.exe (oh!soft ( Partner: MediaWave )) Shortcut: C:\Users\mein\Desktop\Revo Uninstaller.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) Shortcut: C:\Users\mein\Desktop\Skype.lnk -> C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) Shortcut: C:\Users\mein\Desktop\Spotify.lnk -> C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk -> C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Konsol RAR qo'llanmasi.lnk -> C:\Program Files\WinRAR\Rar.txt () Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR yordami.lnk -> C:\Program Files\WinRAR\WinRAR.chm () Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url () Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NoaFX Binary Options\NoaFX Binary Options.lnk -> C:\Program Files\NoaFX Binary Options\TraderExt.Launcher.exe (TradeToolsFX) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Windows\SendTo\Dropbox.lnk -> C:\Users\mein\Dropbox () Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo GIF.lnk -> C:\Program Files\Gyazo\GyazoGIF.exe (Nota Inc.) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo.lnk -> C:\Program Files\Gyazo\Gyazowin.exe (Nota Inc.) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Keine Datei) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gyazo GIF.lnk -> C:\Program Files\Gyazo\GyazoGIF.exe (Nota Inc.) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gyazo.lnk -> C:\Program Files\Gyazo\Gyazowin.exe (Nota Inc.) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox (2).lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Public\Desktop\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.) Shortcut: C:\Users\Public\Desktop\FX Choice - MetaTrader 4.lnk -> C:\Program Files\FX Choice - MetaTrader 4\terminal.exe (MetaQuotes Software Corp.) Shortcut: C:\Users\Public\Desktop\Gyazo GIF.lnk -> C:\Program Files\Gyazo\GyazoGIF.exe (Nota Inc.) Shortcut: C:\Users\Public\Desktop\Gyazo.lnk -> C:\Program Files\Gyazo\Gyazowin.exe (Nota Inc.) Shortcut: C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk -> C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation) Shortcut: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Public\Desktop\NoaFX Trader.lnk -> C:\Program Files\NoaFX Trader\terminal.exe (MetaQuotes Software Corp.) Shortcut: C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk -> C:\Program Files\OpenOffice 4\program\soffice.exe (Apache Software Foundation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla\Uninstall STOPzilla AntiVirus.lnk -> C:\Windows\System32\msiexec.exe (Microsoft Corporation) -> /x {F2EC8AA8-9B41-4628-A263-CDB2A7479E7F} ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\Deinstallieren.lnk -> C:\Program Files\McAfee Security Scan\uninstall.exe (McAfee, Inc.) -> C:\Program Files\McAfee Security Scan\3.11.163\McAfee.ico ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\McUICnt.exe (McAfee, Inc.) -> SecurityScanner.dll ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo Settings.lnk -> C:\Program Files\Gyazo\GyStation.exe (Nota Inc.) -> /option ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\mein\Desktop\Dropbox.lnk -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /home ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /systemstartup ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) -> -hunter ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NoaFX Binary Options\Uninstall NoaFX Binary Options.lnk -> C:\Program Files\NoaFX Binary Options\TraderExt.Launcher.exe (TradeToolsFX) -> -uninstall {1F1521E4-E7EB-45D7-8651-14790FA464A5} ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /home ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto: ShortcutWithArgument: C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\McUICnt.exe (McAfee, Inc.) -> SecurityScanner.dll ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo InternetURL: C:\Users\mein\Favorites\Privatkunden - Sparkasse Gifhorn-Wolfsburg.url -> hxxps://banking.spk-gifhorn-wolfsburg.de/portal/portal/Starten?IID=26951311&AID=IPSTANDARD InternetURL: C:\Users\mein\Favorites\WA@Web.url -> hxxps://waweb.volkswagen.de/jctwaweb/waweb/index.jsp InternetURL: C:\Users\mein\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742 InternetURL: C:\Users\mein\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700 InternetURL: C:\Users\mein\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681 InternetURL: C:\Users\mein\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635 InternetURL: C:\Users\mein\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893 InternetURL: C:\Users\mein\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893 InternetURL: C:\Users\mein\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315 InternetURL: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox Website.URL -> 0 ==================== Ende vom Shortcut.txt ============================= hi schrauber, also es ist definitv nur im mozilla firefox. IE ging ohne jegliche probleme, allerdings konnte ich mich zum beispiel nicht auf meiner emailseite anmelden. da muss ich wohl noch was an den einstellungen ändern. keine geblockten seiten, keine pop ups oder links. auf mozilla schien es mir aber wieder schlimmer geworden zu sein, das kann aber auch daran liegen, dass meine testphase sowohl bei stoppzilla als auch bei malware um sind und daher nicht mehr so vieles von vornherein geblockt wurde. gruss |
|
05.09.2015, 14:55
| #33 |
| /// the machine /// TB-Ausbilder    | Malware : Ads by Name Hast Du bei Firefox irgend einen Sync aktiv?
__________________
__________________ |
|
06.09.2015, 19:56
| #34 |
| | Malware : Ads by Name keine ahnung, wie überprüfe ich das? |
|
07.09.2015, 18:27
| #35 |
| /// the machine /// TB-Ausbilder | Malware : Ads by Name Das würdest Du wissen  Firefox nochmal mit Revo runter, reste löschen, FF NICHT neu installieren. Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.09.2015, 17:46
| #36 |
| | Malware : Ads by Name Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:07-09-2015 durchgeführt von mein (Administrator) auf MEIN-PC (08-09-2015 18:36:01) Gestartet von C:\Users\mein\Desktop Geladene Profile: mein & UpdatusUser & (Verfügbare Profile: mein & UpdatusUser) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Sprache: Deutsch (Deutschland) Internet Explorer Version 8 (Standard-Browser nicht gefunden!) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Spotify Ltd) C:\Users\mein\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe (Nota Inc.) C:\Program Files\Gyazo\GyStation.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (iS3, Inc.) C:\Program Files\iS3\STOPzilla AntiVirus\SZServer.exe (Spotify Ltd) C:\Users\mein\AppData\Roaming\Spotify\SpotifyCrashService.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (Dropbox, Inc.) C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (ThreatTrack Security Inc.) C:\Program Files\iS3\STOPzilla AntiVirus\SBAMSvc.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Spotify Ltd) C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe (iS3, Inc.) C:\Program Files\iS3\STOPzilla AntiVirus\STOPzilla.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.) HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-08-25] (Microsoft Corporation) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Spotify Web Helper] => C:\Users\mein\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-09-04] (Spotify Ltd) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Spotify] => C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe [7535672 2015-09-04] (Spotify Ltd) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Gyazo] => C:\Program Files\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Dropbox Update] => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Run: [Google Update] => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-05-27] (Google Inc.) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\mein\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-09-04] (Spotify Ltd) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify] => C:\Users\mein\AppData\Roaming\Spotify\Spotify.exe [7535672 2015-09-04] (Spotify Ltd) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Gyazo] => C:\Program Files\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Dropbox Update] => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-05-27] (Google Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-08-25] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-23] (Avast Software s.r.o.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-03-28] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-05] ShortcutTarget: Dropbox.lnk -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{47761E7C-5DB2-4E09-8825-337EAD799CDF}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{47D1A413-5150-4B57-B2A3-733A63C14756}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-159680054-709694231-1308323662-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-159680054-709694231-1308323662-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-23] (Avast Software s.r.o.) FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\mein\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000: @talk.google.com/O1DPlugin -> C:\Users\mein\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000: @tools.google.com/Google Update;version=3 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000: @tools.google.com/Google Update;version=9 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @talk.google.com/GoogleTalkPlugin -> C:\Users\mein\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @talk.google.com/O1DPlugin -> C:\Users\mein\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=3 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.) FF Plugin HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=9 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\mein\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\mein\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google) Chrome: ======= CHR Profile: C:\Users\mein\AppData\Local\Google\Chrome\User Data\Default CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-23] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-23] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] Opera: ======= OPR Extension: (fjbbjfdilbioabojmcplalojlmdngbjl) - C:\Users\mein\AppData\Roaming\Opera Software\Opera Stable\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl [2015-08-18] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-23] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-04-23] (Avast Software) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [235696 2015-07-31] (McAfee, Inc.) R2 SBAMSvc; C:\Program Files\iS3\STOPzilla AntiVirus\SBAMSvc.exe [3985352 2015-05-01] (ThreatTrack Security Inc.) R2 sz7; C:\Program Files\iS3\STOPzilla AntiVirus\SZServer.exe [1743040 2015-09-05] (iS3, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-23] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-04-23] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-23] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-23] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-04-23] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-23] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-04-23] () S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security) S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [94936 2015-06-18] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [98520 2015-09-08] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation) R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [70888 2015-05-01] (ThreatTrack Security Inc.) S3 SBHIPS; C:\Windows\System32\drivers\sbhips.sys [97432 2015-05-01] (ThreatTrack Security) R1 sbwfw; C:\Windows\System32\DRIVERS\sbwfw.sys [308800 2015-05-01] (ThreatTrack Security) S3 sbwtis; C:\Windows\System32\DRIVERS\sbwtis.sys [83224 2015-05-01] (ThreatTrack Security) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-04-23] (Avast Software) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\mein\AppData\Local\Temp\catchme.sys [X] S3 eapihdrv; \??\C:\Users\mein\AppData\Local\Temp\ehdrv.sys [X] ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-08 18:36 - 2015-09-08 18:36 - 00017253 _____ C:\Users\mein\Desktop\FRST.txt 2015-09-08 18:35 - 2015-09-08 18:35 - 00000000 ____D C:\Users\mein\Desktop\FRST-OlderVersion 2015-09-06 22:00 - 2015-09-06 21:57 - 00004460 _____ C:\Users\mein\Desktop\Combo.mq4 2015-09-06 20:56 - 2009-07-14 03:17 - 00673048 _____ (Microsoft Corporation) C:\Users\mein\Desktop\iexplore.exe 2015-09-03 20:05 - 2015-09-03 20:05 - 00002007 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2015-09-03 20:05 - 2015-09-03 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2015-09-03 20:05 - 2015-09-03 20:05 - 00000000 ____D C:\Program Files\McAfee Security Scan 2015-09-02 21:21 - 2015-09-02 21:21 - 00000000 ____D C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-09-02 17:48 - 2015-09-02 17:48 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\27272FF9.sys 2015-08-31 21:14 - 2015-09-01 18:36 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\330031AE.sys 2015-08-31 19:52 - 2015-08-31 19:52 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\5DA17350.sys 2015-08-31 07:01 - 2015-08-31 07:13 - 00010596 _____ C:\Users\mein\Desktop\Nicola.ods 2015-08-29 16:37 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-08-29 16:37 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2015-08-29 16:37 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2015-08-29 16:37 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2015-08-29 16:37 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2015-08-29 16:37 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-08-29 16:36 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-08-29 16:36 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-08-29 16:36 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-08-29 16:36 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-08-29 16:36 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-08-29 16:36 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-08-29 12:00 - 2015-08-29 12:00 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\654F6D62.sys 2015-08-29 00:54 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\system32\locale.nls 2015-08-29 00:22 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2015-08-29 00:22 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2015-08-29 00:22 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2015-08-29 00:22 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2015-08-29 00:22 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2015-08-29 00:22 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2015-08-29 00:22 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2015-08-29 00:22 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2015-08-29 00:21 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2015-08-29 00:21 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-08-29 00:21 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2015-08-29 00:21 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2015-08-28 23:57 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-28 07:52 - 2015-08-28 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-08-28 07:52 - 2015-08-28 07:52 - 00000000 ____D C:\Program Files\Common Files\Skype 2015-08-26 20:08 - 2015-01-09 04:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-08-26 20:08 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-08-26 20:08 - 2015-01-09 04:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-08-26 20:07 - 2015-07-28 22:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-08-26 20:07 - 2015-07-28 22:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-08-26 20:07 - 2015-07-28 22:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-08-26 20:07 - 2015-07-28 22:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-08-26 20:07 - 2015-07-28 22:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-08-26 20:07 - 2015-07-28 22:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-08-26 20:07 - 2015-07-28 22:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-08-26 20:07 - 2015-07-28 21:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-08-26 20:07 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2015-08-26 20:07 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2015-08-26 20:07 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2015-08-26 20:07 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2015-08-26 20:07 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2015-08-26 20:07 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2015-08-26 20:07 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2015-08-26 20:07 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2015-08-26 20:07 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2015-08-26 20:06 - 2015-02-03 05:12 - 01011200 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-08-26 20:01 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-08-26 20:01 - 2015-07-20 19:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-08-26 20:01 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-08-26 20:01 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2015-08-26 20:01 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2015-08-26 20:01 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-08-26 20:01 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2015-08-26 20:01 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2015-08-26 20:01 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2015-08-26 20:01 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2015-08-26 20:01 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2015-08-26 20:01 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-08-26 20:01 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2015-08-26 20:01 - 2011-04-29 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-08-26 20:01 - 2011-04-29 04:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-08-26 20:01 - 2011-04-29 04:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-08-26 20:00 - 2015-07-20 19:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-08-26 20:00 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-08-26 20:00 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-08-26 20:00 - 2014-11-11 03:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-08-26 20:00 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2015-08-26 19:59 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2015-08-26 19:59 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2015-08-26 19:59 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-08-26 19:59 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2015-08-26 19:59 - 2015-06-15 23:47 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-08-26 19:59 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-08-26 19:59 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-08-26 19:59 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-08-26 19:59 - 2015-06-15 23:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-08-26 19:59 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-08-26 19:59 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-08-26 19:59 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-08-26 19:59 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2015-08-26 19:59 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2015-08-26 19:59 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2015-08-26 19:59 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2015-08-26 19:59 - 2011-02-18 07:43 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-08-26 19:59 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2015-08-26 19:58 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2015-08-26 19:58 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-08-26 19:58 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2015-08-26 19:58 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2015-08-26 19:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2015-08-26 19:58 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2015-08-26 19:58 - 2012-03-01 07:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2015-08-26 19:58 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2015-08-26 19:58 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2015-08-26 19:58 - 2011-03-03 07:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2015-08-26 19:58 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2015-08-26 19:57 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-08-26 19:57 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-08-26 19:57 - 2015-07-15 19:59 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-08-26 19:57 - 2015-07-15 19:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-08-26 19:57 - 2015-07-15 19:59 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-08-26 19:57 - 2015-07-15 19:56 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-08-26 19:57 - 2015-07-15 19:55 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-08-26 19:57 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-08-26 19:57 - 2015-07-15 19:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-08-26 19:57 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-08-26 19:57 - 2015-07-15 19:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2015-08-26 19:57 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-08-26 19:57 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-08-26 19:57 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-08-26 19:57 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-08-26 19:57 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-08-26 19:57 - 2015-07-15 18:36 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-08-26 19:57 - 2015-07-15 18:36 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-08-26 19:57 - 2015-07-15 18:36 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-08-26 19:57 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2015-08-26 19:57 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2015-08-26 19:57 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2015-08-26 19:57 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2015-08-26 19:57 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2015-08-26 19:57 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2015-08-26 19:57 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2015-08-26 19:57 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2015-08-26 19:57 - 2011-05-24 12:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2015-08-26 19:56 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-08-26 19:56 - 2015-04-11 05:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2015-08-26 19:56 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-08-26 19:56 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-08-26 19:56 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-08-26 19:56 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2015-08-26 19:56 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2015-08-26 19:56 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2015-08-26 19:56 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-08-26 19:56 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2015-08-26 19:56 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2015-08-26 19:56 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-08-26 19:55 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2015-08-26 19:55 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2015-08-26 19:55 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2015-08-26 19:55 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2015-08-26 19:55 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2015-08-26 19:55 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2015-08-26 19:55 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2015-08-26 19:55 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2015-08-26 19:55 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2015-08-26 19:55 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-08-26 19:55 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2015-08-26 19:54 - 2015-07-30 19:57 - 01171456 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-08-26 19:54 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-08-26 19:54 - 2015-07-30 18:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-08-26 19:54 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-08-26 19:54 - 2015-06-17 19:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-08-26 19:54 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-08-26 19:54 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-08-26 19:54 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2015-08-26 19:54 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2015-08-26 19:54 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2015-08-26 19:54 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2015-08-26 19:54 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2015-08-26 19:54 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2015-08-26 19:54 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2015-08-26 19:54 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2015-08-26 19:54 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2015-08-26 19:54 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2015-08-26 19:54 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2015-08-26 19:54 - 2011-02-12 07:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2015-08-26 19:53 - 2015-05-25 20:01 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-08-26 19:53 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-08-26 19:53 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-08-26 19:53 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-08-26 19:53 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-08-26 19:53 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-08-26 19:53 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-08-26 19:53 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-08-26 19:53 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-08-26 19:53 - 2015-05-25 18:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-08-26 19:53 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-08-26 19:53 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-08-26 19:53 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-08-26 19:53 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2015-08-26 19:53 - 2012-07-04 23:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-08-26 19:53 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2015-08-26 19:53 - 2012-04-17 06:34 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-08-26 19:52 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-08-26 19:52 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-08-26 19:52 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-08-26 19:52 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-08-26 19:52 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-08-26 19:52 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2015-08-26 19:52 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2015-08-26 19:52 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-08-26 19:52 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-08-26 19:52 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-08-26 19:52 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-08-26 19:52 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2015-08-26 19:52 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2015-08-26 19:52 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2015-08-26 19:52 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2015-08-26 19:52 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2015-08-26 19:51 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2015-08-26 19:51 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2015-08-26 19:51 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2015-08-26 19:51 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-08-26 19:51 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2015-08-26 19:51 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2015-08-26 19:51 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2015-08-26 19:50 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-08-26 19:50 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-08-26 19:50 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-08-26 19:50 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-08-26 19:50 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-08-26 19:50 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2015-08-26 19:50 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-08-26 19:50 - 2014-12-11 19:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-08-26 19:50 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-08-26 19:50 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-08-26 19:50 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2015-08-26 19:50 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2015-08-26 19:50 - 2012-03-17 09:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2015-08-26 19:50 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2015-08-26 19:50 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2015-08-26 19:50 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2015-08-26 19:50 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2015-08-26 19:50 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2015-08-26 19:50 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2015-08-26 19:50 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2015-08-26 19:49 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-08-26 19:49 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-08-26 19:49 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-08-26 19:49 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2015-08-26 19:49 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2015-08-26 19:49 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-08-26 19:49 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2015-08-26 19:49 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2015-08-26 19:49 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2015-08-26 19:49 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2015-08-26 19:49 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2015-08-26 19:49 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2015-08-26 19:49 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2015-08-26 19:49 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2015-08-26 19:49 - 2012-05-14 06:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-08-26 19:49 - 2012-04-26 06:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2015-08-26 19:49 - 2012-04-26 06:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2015-08-26 19:49 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2015-08-26 19:48 - 2015-07-15 04:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2015-08-26 19:48 - 2012-11-23 04:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2015-08-26 19:48 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2015-08-26 19:48 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2015-08-26 19:47 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-08-26 19:47 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-08-26 19:47 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-08-26 19:47 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-08-26 19:47 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-08-26 19:47 - 2015-05-09 05:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-08-26 19:47 - 2015-05-09 05:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-08-26 19:47 - 2015-05-09 05:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-08-26 19:47 - 2015-05-09 05:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-08-26 19:47 - 2015-05-09 05:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 03:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-08-26 19:47 - 2015-05-09 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-08-26 19:47 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-08-26 19:47 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-08-26 19:47 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-08-26 19:47 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-08-26 19:47 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-08-26 19:47 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-08-26 19:47 - 2015-02-04 04:54 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-08-26 19:47 - 2014-12-19 03:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-08-26 19:47 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-08-26 19:47 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-08-26 19:47 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-08-26 19:47 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-08-26 19:47 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2015-08-26 19:47 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-08-26 19:47 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2015-08-26 19:47 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2015-08-26 19:47 - 2013-07-12 12:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2015-08-26 19:47 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2015-08-26 19:47 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2015-08-26 19:47 - 2012-11-29 00:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2015-08-26 19:47 - 2012-11-29 00:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2015-08-26 19:47 - 2012-11-29 00:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2015-08-26 19:47 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-08-26 19:47 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-08-26 19:47 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2015-08-26 19:47 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2015-08-26 19:47 - 2011-02-23 06:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2015-08-26 19:46 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 02135040 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2015-08-26 19:46 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-08-26 19:46 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2015-08-26 19:46 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2015-08-26 19:46 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2015-08-26 19:46 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-08-26 19:46 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2015-08-26 19:46 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-08-26 19:46 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-08-26 19:46 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-08-26 19:46 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-08-26 19:46 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-08-26 19:46 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2015-08-26 19:46 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2015-08-26 19:36 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-08-26 19:36 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-08-26 19:36 - 2014-10-14 03:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2015-08-26 19:18 - 2015-08-27 20:04 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\5080529D.sys 2015-08-26 19:05 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-08-26 19:05 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2015-08-26 19:05 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2015-08-26 19:05 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2015-08-26 19:05 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2015-08-26 18:46 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2015-08-26 18:46 - 2012-02-17 06:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2015-08-25 21:00 - 2015-08-25 21:00 - 00000000 ____D C:\Windows\system32\SPReview |
|
08.09.2015, 17:46
| #37 |
| | Malware : Ads by Name 2015-08-25 20:59 - 2015-08-25 20:59 - 00000000 ____D C:\Windows\system32\EventProviders 2015-08-25 20:49 - 2010-11-20 14:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2015-08-25 20:49 - 2010-11-20 14:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-08-25 20:49 - 2010-11-20 14:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2015-08-25 20:49 - 2010-11-20 14:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01229824 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00980992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2015-08-25 20:49 - 2010-11-20 14:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-08-25 20:49 - 2010-11-20 14:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2015-08-25 20:49 - 2010-11-20 14:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2015-08-25 20:49 - 2010-11-20 14:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2015-08-25 20:49 - 2010-11-20 14:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2015-08-25 20:49 - 2010-11-20 14:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 10990080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 05977600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2015-08-25 20:49 - 2010-11-20 14:19 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2015-08-25 20:49 - 2010-11-20 14:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2015-08-25 20:49 - 2010-11-20 14:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2015-08-25 20:49 - 2010-11-20 14:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2015-08-25 20:49 - 2010-11-20 12:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2015-08-25 20:49 - 2010-11-20 12:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2015-08-25 20:49 - 2010-11-05 04:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd 2015-08-25 20:49 - 2010-11-05 03:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2015-08-25 20:49 - 2010-11-05 03:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2015-08-25 20:49 - 2010-11-05 03:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2015-08-25 20:49 - 2010-11-05 03:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2015-08-25 20:48 - 2010-11-20 14:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2015-08-25 20:48 - 2010-11-20 14:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2015-08-25 20:48 - 2010-11-20 14:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2015-08-25 20:48 - 2010-11-20 14:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2015-08-25 20:48 - 2010-11-20 14:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2015-08-25 20:48 - 2010-11-20 14:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2015-08-25 20:48 - 2010-11-20 14:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2015-08-25 20:48 - 2010-11-20 14:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2015-08-25 20:48 - 2010-11-20 14:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-08-25 20:48 - 2010-11-20 14:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2015-08-25 20:48 - 2010-11-20 14:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2015-08-25 20:48 - 2010-11-20 14:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2015-08-25 20:48 - 2010-11-20 14:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2015-08-25 20:48 - 2010-11-20 14:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2015-08-25 20:48 - 2010-11-20 14:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2015-08-25 20:48 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2015-08-25 20:48 - 2010-11-20 14:18 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2015-08-25 20:48 - 2010-11-20 14:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2015-08-25 20:48 - 2010-11-20 14:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2015-08-25 20:48 - 2010-11-20 14:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2015-08-25 20:48 - 2010-11-20 14:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-08-25 20:48 - 2010-11-20 14:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2015-08-25 20:48 - 2010-11-20 14:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2015-08-25 20:48 - 2010-11-20 14:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2015-08-25 20:48 - 2010-11-20 14:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2015-08-25 20:48 - 2010-11-20 14:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2015-08-25 20:48 - 2010-11-20 14:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2015-08-25 20:48 - 2010-11-20 14:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2015-08-25 20:48 - 2010-11-20 14:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2015-08-25 20:48 - 2010-11-20 12:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-08-25 20:48 - 2010-11-20 12:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2015-08-25 20:48 - 2010-11-20 12:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-08-25 20:48 - 2010-11-20 12:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2015-08-25 20:48 - 2010-11-20 12:01 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SET3476.tmp 2015-08-25 20:48 - 2010-11-20 11:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys 2015-08-25 20:48 - 2010-11-20 11:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SET3A5D.tmp 2015-08-25 20:48 - 2010-11-20 11:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-08-25 20:48 - 2010-11-20 10:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2015-08-25 20:48 - 2010-11-20 10:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-08-25 20:48 - 2010-11-20 10:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2015-08-25 20:48 - 2010-11-20 10:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2015-08-25 20:48 - 2010-11-20 07:23 - 00053600 _____ C:\Windows\system32\dosx.exe 2015-08-25 20:48 - 2010-11-05 04:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2015-08-25 20:47 - 2010-11-20 14:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2015-08-25 20:47 - 2010-11-20 14:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2015-08-25 20:47 - 2010-11-20 14:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2015-08-25 20:47 - 2010-11-20 14:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2015-08-25 20:47 - 2010-11-20 14:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2015-08-25 20:47 - 2010-11-20 14:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-08-25 20:47 - 2010-11-20 14:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2015-08-25 20:47 - 2010-11-20 14:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2015-08-25 20:47 - 2010-11-20 14:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2015-08-25 20:47 - 2010-11-20 14:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2015-08-25 20:47 - 2010-11-20 14:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2015-08-25 20:47 - 2010-11-20 14:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2015-08-25 20:47 - 2010-11-20 14:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2015-08-25 20:47 - 2010-11-20 14:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2015-08-25 20:47 - 2010-11-20 14:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2015-08-25 20:47 - 2010-11-20 14:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2015-08-25 20:47 - 2010-11-20 14:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2015-08-25 20:47 - 2010-11-20 13:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2015-08-25 20:47 - 2010-11-20 13:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2015-08-25 20:47 - 2010-11-20 12:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2015-08-25 20:47 - 2010-11-20 12:49 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-08-25 20:47 - 2010-11-20 12:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys 2015-08-25 20:47 - 2010-11-20 12:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll 2015-08-25 20:47 - 2010-11-20 12:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys 2015-08-25 20:47 - 2010-11-20 12:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2015-08-25 20:47 - 2010-11-20 12:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2015-08-25 20:47 - 2010-11-20 12:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2015-08-25 20:47 - 2010-11-20 12:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2015-08-25 20:47 - 2010-11-20 11:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-08-25 20:47 - 2010-11-20 11:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2015-08-25 20:47 - 2010-11-20 11:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2015-08-25 20:47 - 2010-11-20 11:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2015-08-25 20:47 - 2010-11-20 11:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2015-08-25 20:47 - 2010-11-20 10:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2015-08-25 20:47 - 2010-11-20 10:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2015-08-25 20:47 - 2010-11-10 03:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml 2015-08-25 20:47 - 2010-11-05 04:20 - 00105559 _____ C:\Windows\system32\RacRules.xml 2015-08-25 00:03 - 2015-08-29 21:14 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-08-25 00:03 - 2015-08-25 00:03 - 00000000 ____D C:\Windows\system32\appraiser 2015-08-24 23:43 - 2015-08-24 23:47 - 00000000 ____D C:\Windows\system32\MRT 2015-08-24 23:42 - 2015-07-28 11:01 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-08-24 23:32 - 2015-08-24 23:33 - 00276578 _____ C:\Windows\msxml4-KB954430-enu.LOG 2015-08-24 23:32 - 2015-08-24 23:32 - 00282250 _____ C:\Windows\msxml4-KB973688-enu.LOG 2015-08-24 23:32 - 2015-08-24 23:32 - 00000000 ____D C:\Program Files\MSXML 4.0 2015-08-24 23:23 - 2015-05-21 15:18 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-08-24 23:23 - 2015-01-28 01:28 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-08-24 23:19 - 2009-10-24 06:00 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SETF55F.tmp 2015-08-24 22:09 - 2015-08-24 22:09 - 00000000 ____D C:\Program Files\ESET 2015-08-24 21:38 - 2015-08-24 21:38 - 00242856 _____ C:\Users\mein\Firefox Setup Stub 40.0.2.exe 2015-08-24 21:11 - 2015-09-08 18:23 - 00001222 _____ C:\Users\mein\Desktop\Revo Uninstaller.lnk 2015-08-24 21:11 - 2015-09-08 18:23 - 00000000 ____D C:\Program Files\VS Revo Group 2015-08-24 21:10 - 2015-08-24 21:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\mein\Desktop\revosetup95.exe 2015-08-23 22:33 - 2015-08-23 22:33 - 00852684 _____ C:\Users\mein\Desktop\SecurityCheck.exe 2015-08-23 21:29 - 2015-08-23 21:29 - 02870984 _____ (ESET) C:\Users\mein\Desktop\esetsmartinstaller_deu.exe 2015-08-23 21:06 - 2015-08-24 20:59 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\086F3A8B.sys 2015-08-23 17:08 - 2015-08-23 17:08 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7CCF0476.sys 2015-08-23 12:35 - 2015-08-23 12:35 - 01798040 _____ (Malwarebytes Corporation) C:\Users\mein\Desktop\JRT_7.5.6.exe 2015-08-23 12:22 - 2015-08-23 12:22 - 01605632 _____ C:\Users\mein\Desktop\adwcleaner_5.003.exe 2015-08-23 11:51 - 2015-09-08 18:21 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-23 11:51 - 2015-08-23 11:51 - 00001060 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-23 11:51 - 2015-08-23 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-23 11:51 - 2015-08-23 11:51 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 2015-08-23 11:51 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-23 11:51 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-23 11:51 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-22 13:46 - 2015-08-22 14:13 - 00240417 _____ C:\Users\mein\Desktop\Don´s Challenge.odt 2015-08-22 13:20 - 2015-08-22 13:20 - 00010984 _____ C:\ComboFix.txt 2015-08-22 13:08 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2015-08-22 13:08 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2015-08-22 13:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2015-08-22 13:08 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2015-08-22 13:02 - 2015-08-22 13:20 - 00000000 ____D C:\Qoobox 2015-08-22 13:02 - 2015-08-22 13:19 - 00000000 ____D C:\Windows\erdnt 2015-08-22 13:02 - 2015-08-22 13:02 - 05635234 ____R (Swearware) C:\Users\mein\Desktop\ComboFix.exe 2015-08-21 22:43 - 2015-08-21 22:43 - 00001867 _____ C:\Users\Public\Desktop\NoaFX Trader.lnk 2015-08-21 20:11 - 2015-09-08 18:36 - 00000000 ____D C:\FRST 2015-08-21 20:10 - 2015-09-08 18:35 - 01692160 _____ (Farbar) C:\Users\mein\Desktop\FRST.exe 2015-08-18 22:47 - 2015-08-18 22:47 - 00001190 _____ C:\Windows\system32\ServiceConfig.xml 2015-08-18 22:34 - 2015-08-18 22:34 - 00000000 _____ C:\Windows\system32\SBRC.dat 2015-08-18 22:30 - 2015-08-18 22:30 - 00000000 ____D C:\ProgramData\VIPRE 2015-08-18 22:30 - 2013-09-04 14:57 - 00024040 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys 2015-08-18 22:30 - 2013-05-23 08:39 - 00043368 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys 2015-08-18 21:59 - 2015-09-08 18:21 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\Windows\system32\Drivers\VDD 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla 2015-08-18 21:59 - 2015-08-18 21:59 - 00000000 ____D C:\Program Files\iS3 2015-08-18 21:59 - 2015-05-01 12:59 - 00097432 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\sbhips.sys 2015-08-18 21:52 - 2015-08-18 21:53 - 02042328 _____ (iS3, Inc.) C:\Users\mein\Downloads\STOPzillaPRO_Downloader.exe 2015-08-18 21:19 - 2015-08-18 21:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-18 20:42 - 2015-08-18 20:44 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\mein\Downloads\mbam-setup-2.1.8.1057.exe 2015-08-18 20:13 - 2015-08-18 20:14 - 00000830 _____ C:\AdwCleaner[S2].txt 2015-08-18 20:12 - 2015-08-18 20:12 - 00017628 _____ C:\AdwCleaner[C1].txt 2015-08-18 20:10 - 2015-08-23 12:24 - 00000000 ____D C:\AdwCleaner 2015-08-18 20:10 - 2015-08-18 20:12 - 00016875 _____ C:\AdwCleaner[S1].txt 2015-08-18 20:09 - 2015-08-18 20:09 - 01573888 _____ C:\Users\mein\Downloads\adwcleaner_5.001.exe 2015-08-13 18:37 - 2015-08-14 17:51 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7 2015-08-09 16:53 - 2015-08-09 16:53 - 00000000 ____D C:\Users\mein\AppData\Roaming\Opera Software 2015-08-09 16:53 - 2015-08-09 16:53 - 00000000 ____D C:\Users\mein\AppData\Local\Opera Software 2015-08-09 16:50 - 2015-08-09 16:50 - 00000000 _____ C:\Windows\prleth.sys 2015-08-09 16:50 - 2015-08-09 16:50 - 00000000 _____ C:\Windows\hgfs.sys ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-08 18:34 - 2015-05-24 18:21 - 00000000 ____D C:\Users\mein\AppData\Roaming\Skype 2015-09-08 18:30 - 2015-02-11 15:08 - 01611290 _____ C:\Windows\WindowsUpdate.log 2015-09-08 18:28 - 2015-04-05 19:15 - 00000000 ____D C:\Users\mein\AppData\Roaming\Spotify 2015-09-08 18:28 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-09-08 18:28 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-09-08 18:21 - 2015-04-05 19:09 - 00000000 ___RD C:\Users\mein\Dropbox 2015-09-08 18:21 - 2015-04-05 19:07 - 00000000 ____D C:\Users\mein\AppData\Roaming\Dropbox 2015-09-08 18:20 - 2015-04-05 19:15 - 00000000 ____D C:\Users\mein\AppData\Local\Spotify 2015-09-08 18:17 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-08 18:17 - 2009-07-14 06:39 - 00037794 _____ C:\Windows\setupact.log 2015-09-06 22:38 - 2015-05-27 22:19 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job 2015-09-06 22:04 - 2015-06-16 20:53 - 00001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job 2015-09-06 21:38 - 2015-05-27 22:19 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job 2015-09-06 21:04 - 2015-06-16 20:53 - 00001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job 2015-09-06 18:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing 2015-09-06 17:27 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2015-08-30 16:09 - 2015-02-12 11:24 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-30 16:04 - 2009-07-14 06:33 - 00286688 _____ C:\Windows\system32\FNTCACHE.DAT 2015-08-30 11:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2015-08-30 08:34 - 2009-07-14 06:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-08-30 08:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2015-08-29 21:14 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2015-08-29 12:41 - 2015-02-12 20:38 - 00064024 _____ C:\Users\mein\AppData\Local\GDIPFONTCACHEV1.DAT 2015-08-29 11:52 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2015-08-29 11:52 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-08-29 11:51 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal 2015-08-29 11:51 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2015-08-28 07:53 - 2015-05-24 18:20 - 00000000 ____D C:\ProgramData\Skype 2015-08-28 07:52 - 2015-05-24 18:21 - 00000000 ___RD C:\Program Files\Skype 2015-08-28 07:16 - 2015-02-12 21:54 - 00029236 _____ C:\Windows\PFRO.log 2015-08-26 07:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2015-08-25 21:14 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\de-DE 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-08-25 21:14 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2015-08-25 21:07 - 2009-07-14 04:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2015-08-25 00:04 - 2015-04-14 20:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-08-24 23:56 - 2015-04-14 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-08-24 21:38 - 2015-02-11 15:07 - 00000000 ____D C:\Users\mein 2015-08-22 13:20 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public 2015-08-22 13:19 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini 2015-08-21 22:43 - 2015-06-19 22:01 - 00000000 ____D C:\Users\mein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NoaFX Binary Options 2015-08-21 22:43 - 2015-06-19 22:01 - 00000000 ____D C:\Program Files\NoaFX Binary Options 2015-08-21 22:43 - 2015-06-19 21:48 - 00000000 ____D C:\Program Files\NoaFX Trader 2015-08-21 22:43 - 2015-02-12 20:54 - 00000000 ____D C:\Users\mein\AppData\Local\Google 2015-08-21 20:23 - 2015-06-15 21:39 - 00000000 ____D C:\Program Files\Gyazo 2015-08-18 19:38 - 2015-02-12 20:54 - 00000000 ____D C:\Program Files\Google 2015-08-15 18:02 - 2015-04-11 17:25 - 00000000 ____D C:\ProgramData\WinZip Einige Dateien in TEMP: ==================== C:\Users\mein\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_w8mz8.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-09-06 17:20 ==================== Ende vom FRST.txt ============================ |
|
08.09.2015, 17:47
| #38 |
| | Malware : Ads by Name FRST Additions Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:07-09-2015
durchgeführt von mein (2015-09-08 18:37:49)
Gestartet von C:\Users\mein\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2015-02-11 13:07:07)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-159680054-709694231-1308323662-500 - Administrator - Disabled)
Gast (S-1-5-21-159680054-709694231-1308323662-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-159680054-709694231-1308323662-1003 - Limited - Enabled)
mein (S-1-5-21-159680054-709694231-1308323662-1000 - Administrator - Enabled) => C:\Users\mein
UpdatusUser (S-1-5-21-159680054-709694231-1308323662-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: STOPzilla AntiVirus (Disabled - Out of date) {581418F3-DCB4-03A7-8970-1C2B5929FC27}
AS: STOPzilla AntiVirus (Disabled - Out of date) {E375F917-FA8E-0C29-B3C0-275922AEB69A}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.2.2218 - AVAST Software)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Dropbox (HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
FX Choice - MetaTrader 4 (HKLM\...\FX Choice - MetaTrader 4) (Version: 4.00 - MetaQuotes Software Corp.)
Google Talk Plugin (HKLM\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (Version: 1.3.21.169 - Google Inc.) Hidden
Gyazo 3.1.6 (HKLM\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NoaFX Binary Options (HKLM\...\{1F1521E4-E7EB-45D7-8651-14790FA464A5}) (Version: 4.19.2 - Capital Market Investments)
NoaFX Trader (HKLM\...\NoaFX Trader) (Version: 4.00 - MetaQuotes Software Corp.)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
oCam Version 101.0 (HKLM\...\oCam_is1) (Version: 101.0 - OhSoft(ohsoft.net) - Best Software Developer)
OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.8 (HKLM\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-159680054-709694231-1308323662-1000\...\Spotify) (Version: 1.0.13.108.gcd94e7db - Spotify AB)
Spotify (HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.13.108.gcd94e7db - Spotify AB)
STOPzilla AntiVirus 7 (HKLM\...\{F2EC8AA8-9B41-4628-A263-CDB2A7479E7F}) (Version: 7.0.3.102 - iS3, Inc.)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden
WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.27.5\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.1\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.27.5\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.1\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mein\AppData\Local\Google\Update\1.3.28.13\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\mein\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-159680054-709694231-1308323662-1000_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\mein\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
==================== Wiederherstellungspunkte =========================
08-05-2015 15:50:51 Geplanter Prüfpunkt
17-05-2015 16:10:19 Geplanter Prüfpunkt
24-05-2015 16:27:16 Geplanter Prüfpunkt
02-06-2015 20:49:30 Geplanter Prüfpunkt
14-06-2015 12:53:39 Geplanter Prüfpunkt
19-06-2015 21:51:51 Windows Update
19-06-2015 22:00:37 Installed NoaFX Binary Options
27-06-2015 11:56:19 Geplanter Prüfpunkt
05-07-2015 13:42:25 Geplanter Prüfpunkt
13-07-2015 14:41:35 Geplanter Prüfpunkt
26-07-2015 10:56:27 Geplanter Prüfpunkt
02-08-2015 15:00:29 Geplanter Prüfpunkt
09-08-2015 15:10:43 Geplanter Prüfpunkt
15-08-2015 18:01:26 WinZip 19.0 wird entfernt
18-08-2015 21:38:40 Removed Skype Click to Call
18-08-2015 21:58:41 Installed STOPzilla AntiVirus 7.
18-08-2015 22:07:30 Windows Modules Installer
22-08-2015 13:08:30 ComboFix created restore point
23-08-2015 12:36:39 JRT Pre-Junkware Removal
24-08-2015 21:12:58 Revo Uninstaller's restore point - Mozilla Firefox 39.0.3 (x86 de)
24-08-2015 23:08:39 Windows Update
24-08-2015 23:25:36 Windows Update
25-08-2015 20:58:20 Windows Update
26-08-2015 17:23:04 Windows Update
26-08-2015 21:16:41 Windows Update
27-08-2015 23:15:12 Windows Update
28-08-2015 23:50:24 Windows Update
29-08-2015 16:27:57 Windows Update
29-08-2015 23:28:29 Windows Update
06-09-2015 17:27:30 Geplanter Prüfpunkt
08-09-2015 18:24:16 Revo Uninstaller's restore point - Mozilla Firefox 40.0.3 (x86 de)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:04 - 2015-09-03 20:05 - 00000057 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
0.0.0.1 mssplus.mcafee.com
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1522CC29-3FC5-4649-B54B-A954CD9ACD9A} - System32\Tasks\{536D8DAA-2236-42BF-AF20-8C96BEBF1840} => C:\Program Files\FX Choice - MetaTrader 4\terminal.exe [2015-07-04] (MetaQuotes Software Corp.)
Task: {1EF19417-292D-4ED0-B94B-1EB98BD6BE1B} - System32\Tasks\Gliwotsob => C:\ProgramData\Gliwotsob\1.0.4.1\cuovofco.exe
Task: {291E5624-5FDF-42D7-A941-AAFF2FA9AF17} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {2BCB96C5-BC8A-4049-9716-04CAF2CE75BA} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files\Gyazo\GyazoUpdate.exe [2015-08-19] ()
Task: {2DB30139-5BCF-4BEF-9EF7-52F77D191BB6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {3828FDBA-82C8-44C5-A3C2-6A7037BC5526} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {3BEE6803-8E71-43A1-8269-3832682CFBA3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-27] (Google Inc.)
Task: {3FF40EC9-DDAD-4DA0-B4DC-89C2B6B4342B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-27] (Google Inc.)
Task: {62DFAF43-7183-4483-95F3-A412F3DA291B} - System32\Tasks\{A52935C5-14F1-47F2-A78F-A53C2D329DD1} => pcalua.exe -a "C:\Medion\08. WLAN\AW-NE104_Win7_2010.0.0119.2010\Setup.exe" -d "C:\Medion\08. WLAN\AW-NE104_Win7_2010.0.0119.2010"
Task: {6F4BB4EE-E06F-4414-8FFE-F0B7D657268A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)
Task: {8773E4B3-1D0F-44C9-A286-87878E6D9BFF} - System32\Tasks\avastBCLRestartS-1-5-21-159680054-709694231-1308323662-1000 => Firefox.exe
Task: {BDD90CDE-2A5D-4757-BC82-4B8F836D4AFA} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files\Gyazo\GyazoUpdate.exe [2015-08-19] ()
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job => C:\Users\mein\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000Core.job => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-159680054-709694231-1308323662-1000UA.job => C:\Users\mein\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-02-21 14:21 - 2013-08-30 01:08 - 00088864 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-04-23 06:59 - 2015-04-23 06:59 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-23 06:59 - 2015-04-23 06:59 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-06 20:52 - 2015-09-06 20:52 - 02964480 _____ () C:\Program Files\AVAST Software\Avast\defs\15090601\algo.dll
2015-09-08 18:20 - 2015-09-08 18:20 - 02962432 _____ () C:\Program Files\AVAST Software\Avast\defs\15090800\algo.dll
2015-04-23 06:59 - 2015-04-23 06:59 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 45067320 _____ () C:\Users\mein\AppData\Roaming\Spotify\libcef.dll
2015-09-08 18:18 - 2015-09-08 18:18 - 00071168 _____ () c:\users\mein\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_w8mz8.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00012800 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00779776 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-30 07:15 - 2015-08-05 07:26 - 00056320 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-08-05 07:26 - 00012288 _____ () C:\Users\mein\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-08-18 22:30 - 2015-06-26 03:13 - 00184184 _____ () C:\Program Files\iS3\STOPzilla AntiVirus\Definitions\libBase64.dll
2015-08-18 22:30 - 2015-06-26 03:13 - 00175992 _____ () C:\Program Files\iS3\STOPzilla AntiVirus\Definitions\libMachoUniv.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 01649208 _____ () C:\Users\mein\AppData\Roaming\Spotify\libglesv2.dll
2015-04-05 19:15 - 2015-09-04 18:24 - 00080952 _____ () C:\Users\mein\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\mein\Desktop\Screenshot 2015-09-04 22.20.31.png:com.dropbox.attributes
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-159680054-709694231-1308323662-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\mein\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-159680054-709694231-1308323662-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\mein\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{25CABD83-7E2B-48E9-9716-C71EE01EEA1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BEEB9934-C4BA-4E17-81F8-B4F96F82282F}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{3A3C9A74-A20B-4A2D-9DC3-0A6684736200}] => (Allow) C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{096C4484-603F-4F21-9DDA-B51FCEFBF5CB}] => (Allow) C:\Users\mein\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{C0994A30-1A2F-464F-9A16-C8E4A0806C17}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{8C6D41DD-EFD5-4513-B053-6F007658447B}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{D83A985B-EB7A-4B7E-8A31-9C41DF267C46}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{081C55DA-ACE4-46FF-BB23-5D203A31E332}C:\users\mein\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mein\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{A7B9AB8C-9316-461B-B306-003D14910E5C}C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{1B0A894E-FB6D-4B42-B4BB-F91A08DBB8C2}C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mein\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{2019863A-68CF-49DE-B177-110BF438736D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{573A322C-24BA-4D82-B61B-36A963C24E9C}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{03C789B2-80B3-4215-8783-DD4D61F26782}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C6CD251E-ACE6-48BA-9371-4CE27D5E78EE}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Coprozessor
Description: Coprozessor
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/08/2015 06:24:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {718a8836-b7d8-4889-8b0e-75971f3df651}
Error: (09/05/2015 12:57:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SZServer.exe, Version: 7.0.3.111, Zeitstempel: 0x55b79dc5
Name des fehlerhaften Moduls: SZServer.exe, Version: 7.0.3.111, Zeitstempel: 0x55b79dc5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000ecf59
ID des fehlerhaften Prozesses: 0x96c
Startzeit der fehlerhaften Anwendung: 0xSZServer.exe0
Pfad der fehlerhaften Anwendung: SZServer.exe1
Pfad des fehlerhaften Moduls: SZServer.exe2
Berichtskennung: SZServer.exe3
Error: (08/29/2015 09:21:05 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-159680054-709694231-1308323662-1000}/">.
Error: (08/29/2015 12:03:54 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.
Vorgang:
Für die Sicherung initialisieren
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 22) (User: )
Description: Fehler im Volumenschattenkopie-Dienst: Eine vom Volumenschattenkopie-Dienst benötigte kritische Komponente ist nicht registriert.
Dies kann geschehen, wenn bei der Windows-Installation oder bei der Installation eines Schattenkopieanbieters ein Fehler aufgetreten ist.
Der von CoCreateInstance für die Klasse mit CLSID "{f5078f32-c551-11d3-89b9-0000f81fe221}" und dem Namen "MSXML30" zurückgegebene Fehler ist [0x80040154].
Vorgang:
Für die Sicherung initialisieren
Error: (08/26/2015 06:09:45 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Error: (08/24/2015 09:12:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {bfed4707-d656-4feb-bf9e-dfab2c4488c4}
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Systemfehler:
=============
Error: (09/08/2015 06:30:25 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/08/2015 06:30:25 PM) (Source: atapi) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort1 gefunden.
Error: (09/08/2015 06:30:24 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/08/2015 06:30:23 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/08/2015 06:30:22 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/08/2015 06:30:21 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/08/2015 06:30:20 PM) (Source: cdrom) (EventID: 15) (User: )
Description: Das Gerät \Device\CdRom0 ist für den Zugriff noch nicht bereit.
Error: (09/06/2015 08:53:23 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (09/06/2015 08:49:38 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (09/06/2015 04:32:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Microsoft Office:
=========================
Error: (09/08/2015 06:24:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {718a8836-b7d8-4889-8b0e-75971f3df651}
Error: (09/05/2015 12:57:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SZServer.exe7.0.3.11155b79dc5SZServer.exe7.0.3.11155b79dc5c0000005000ecf5996c01d0e7b9d080fa40C:\Program Files\iS3\STOPzilla AntiVirus\SZServer.exeC:\Program Files\iS3\STOPzilla AntiVirus\SZServer.exef75380b0-53bc-11e5-b741-406186285fe2
Error: (08/29/2015 09:21:05 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: 300x80040d07iehistory://{S-1-5-21-159680054-709694231-1308323662-1000}/
Error: (08/29/2015 12:03:54 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
PresentationFramework.Luna, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80040154
Vorgang:
Für die Sicherung initialisieren
Error: (08/29/2015 11:52:30 AM) (Source: VSS) (EventID: 22) (User: )
Description: {f5078f32-c551-11d3-89b9-0000f81fe221}MSXML300x80040154
Vorgang:
Für die Sicherung initialisieren
Error: (08/26/2015 06:09:45 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020
Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Error: (08/24/2015 09:12:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {bfed4707-d656-4feb-bf9e-dfab2c4488c4}
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/21/2015 10:43:17 PM) (Source: MsiInstaller) (EventID: 11001) (User: mein-PC)
Description: Product: NoaFX Binary Options -- Error 1001. Error 1001. InstallUtilLib.dll: Unknown error.(NULL)(NULL)(NULL)(NULL)(NULL)
CodeIntegrity:
===================================
Date: 2015-08-09 17:09:34.077
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:34.064
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:33.632
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:33.597
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.709
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.036
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:27.015
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.597
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.547
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-09 17:09:22.512
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz
Prozentuale Nutzung des RAM: 62%
Installierter physikalischer RAM: 3327.24 MB
Verfügbarer physikalischer RAM: 1235.79 MB
Summe virtueller Speicher: 6652.79 MB
Verfügbarer virtueller Speicher: 4180.37 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:910.41 GB) (Free:793.47 GB) NTFS
Drive d: (Recovery) (Fixed) (Total:20 GB) (Free:12.12 GB) NTFS
Drive f: (INTENSO) (Fixed) (Total:931.28 GB) (Free:930.58 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=910.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: DD55E363)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)
==================== Ende vom Addition.txt ============================
|
|
09.09.2015, 07:02
| #39 |
| /// the machine /// TB-Ausbilder | Malware : Ads by Name So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Scan mit SystemLook Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.09.2015, 20:06
| #40 |
| | Malware : Ads by NameCode:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 21:03 on 09/09/2015 by mein
Administrator - Elevation successful
========== regfind ==========
Searching for "Firefox"
[HKEY_CURRENT_USER\Software\AVAST Software\Avast Browser Cleanup]
"firefox_SP"="8D26A3F9454C05783CD0BC4FE15F13A616ED9877DC910BC9968F0869AB297C86"
[HKEY_CURRENT_USER\Software\Clients\StartMenuInternet]
@="FIREFOX.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\139afaab_0]
@="{0.0.0.00000000}.{8cfbdc4b-8fcf-46a6-af9e-c45c281ccd51}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4c89f1fd_0]
@="{0.0.0.00000000}.{2d8ac2ca-fd31-4352-90d1-507c7b963fe2}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6d588c1e_0]
@="{0.0.0.00000000}.{f5bbf94f-0312-4fa8-99e4-988b29e62f3b}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\ddbf8e49_0]
@="{0.0.0.00000000}.{2d8ac2ca-fd31-4352-90d1-507c7b963fe2}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\plugin-container.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"b"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ex4\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"b"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mq4\OpenWithList]
"b"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msi\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odt\OpenWithList]
"c"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList]
"c"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rar\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpl\OpenWithList]
"b"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithList]
"a"="firefox.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice]
"Progid"="FirefoxURL"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice]
"Progid"="FirefoxURL"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice]
"Progid"="FirefoxURL"
[HKEY_CURRENT_USER\Software\Opera Software]
"Previous Default Browser"=""C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1""
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Mozilla Firefox\firefox.exe"="Firefox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\firefox.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\firefox_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\firefox_RASDLG]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\firefox_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox]
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\AVAST Software\Avast Browser Cleanup]
"firefox_SP"="8D26A3F9454C05783CD0BC4FE15F13A616ED9877DC910BC9968F0869AB297C86"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Clients\StartMenuInternet]
@="FIREFOX.EXE"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\139afaab_0]
@="{0.0.0.00000000}.{8cfbdc4b-8fcf-46a6-af9e-c45c281ccd51}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4c89f1fd_0]
@="{0.0.0.00000000}.{2d8ac2ca-fd31-4352-90d1-507c7b963fe2}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6d588c1e_0]
@="{0.0.0.00000000}.{f5bbf94f-0312-4fa8-99e4-988b29e62f3b}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\firefox.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\ddbf8e49_0]
@="{0.0.0.00000000}.{2d8ac2ca-fd31-4352-90d1-507c7b963fe2}|\Device\HarddiskVolume2\Program Files\Mozilla Firefox\plugin-container.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"b"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ex4\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"b"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mq4\OpenWithList]
"b"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msi\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odt\OpenWithList]
"c"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList]
"c"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rar\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpl\OpenWithList]
"b"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
"Progid"="FirefoxHTML"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithList]
"a"="firefox.exe"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice]
"Progid"="FirefoxURL"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice]
"Progid"="FirefoxURL"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice]
"Progid"="FirefoxURL"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Opera Software]
"Previous Default Browser"=""C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1""
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Mozilla Firefox\firefox.exe"="Firefox"
[HKEY_USERS\S-1-5-21-159680054-709694231-1308323662-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Mozilla Firefox\firefox.exe"="Firefox"
========== filefind ==========
Searching for "*Firefox*"
C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\firefox.com --a---- 893752 bytes [09:51 23/08/2015] [06:39 18/06/2015] 0692C8163852AB5674E2EB3B36131EF3
C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\firefox.exe --a---- 893752 bytes [09:51 23/08/2015] [06:39 18/06/2015] 0692C8163852AB5674E2EB3B36131EF3
C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\firefox.pif --a---- 893752 bytes [09:51 23/08/2015] [06:39 18/06/2015] 0692C8163852AB5674E2EB3B36131EF3
C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\firefox.scr --a---- 893752 bytes [09:51 23/08/2015] [06:39 18/06/2015] 0692C8163852AB5674E2EB3B36131EF3
C:\Users\mein\Firefox Setup Stub 40.0.2.exe --a---- 242856 bytes [19:38 24/08/2015] [19:38 24/08/2015] 776A33D8646324009798BEFE0278A23D
C:\Users\mein\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk --a---- 1058 bytes [18:58 13/08/2015] [17:46 30/08/2015] 6A1C03114F172EE42A651880DF389756
C:\Windows\erdnt\cache\firefox.exe --a---- 377000 bytes [11:19 22/08/2015] [07:06 08/08/2015] F7CEB1E5F0000FDEEE04B046BBDE1D4E
C:\Windows\Installer\$PatchCache$\Managed\FCDAC0A0AD874C333A05DC1548B97920\4.0.30319\firefox_browser_x86 -ra---- 3071 bytes [19:28 08/12/2009] [19:28 08/12/2009] F5B5084403E73FC33483DFFCA4EE22C3
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\firefox.browser --a---- 3082 bytes [17:28 26/10/2011] [17:28 26/10/2011] 2E4C68A5929B2CDF4BE8655F4D0866EF
C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf --a---- 225108 bytes [18:47 12/02/2015] [16:23 08/09/2015] B2A462251CD3A5A5E2E4597CC528BD5E
Searching for " "
No files found.
-= EOF =-
|
|
10.09.2015, 19:13
| #41 |
| /// the machine /// TB-Ausbilder | Malware : Ads by Name Sehr merkwürdig. Firefox neu laden, auch den Installer, und neu installieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.09.2015, 19:19
| #42 |
| | Malware : Ads by Name was meinst du mit firefox neu laden und den installer auch? soll ich firefox nun einfach neu installieren?? |
|
11.09.2015, 16:11
| #43 |
| /// the machine /// TB-Ausbilder | Malware : Ads by Name Ja, aber auch den Installer zum Neu installieren neu runter laden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.09.2015, 21:06
| #44 |
| | Malware : Ads by Name hi schrauber, habe den Installer und Mozilla neu installiert. Kurzer Testlauf und scheint wieder alles soweit in Ordnung. Keine Pop Ups oder Ads und keine geblockten Seiten oder Meldungen von den antivirenprogrammen. Auch kein langes Laden mehr und keine akamai oder warten auf sendevent oder tm553 mehr....bin geraade sehr happy. wie gehts nun weiter? ;-) |
|
12.09.2015, 13:48
| #45 |
| /// the machine /// TB-Ausbilder | Malware : Ads by Name Aufräumen Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren .
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung:Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Malware : Ads by Name |
| ads, ads by name, community, entdeck, entdeckt, freeware, gelöscht, gescannt, hoffe, malware, mozilla, nicht mehr, pop ups, sobald, surfe, surfen, ups, verlangsamt, öffnen |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
