| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Chrome Erweiterung nicht löschbarWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
24.09.2015, 14:01
| #16 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Chrome Erweiterung nicht löschbar Muss ein Bug in FRST sein  ich glaub jetzt weiß ich auch durch diesen Bug warum ich mich in einem anderen Thread so schwer tue   Was sagt Chrome jetzt? Und bitte frische FRST Logs erstellen
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
24.09.2015, 14:13
| #17 |
 | Chrome Erweiterung nicht löschbar Danke Arne!
__________________SRware Iron (Fast genau wie Chrome), ist jetzt endlich befreit davon! Danke Arne! FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:23-09-2015 durchgeführt von Marvin (Administrator) auf MARVIN-PC (24-09-2015 14:59:47) Gestartet von C:\Users\Marvin\Desktop Geladene Profile: Marvin (Verfügbare Profile: Marvin) Platform: Windows 7 Ultimate (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser nicht gefunden!) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Windows\System32\vmms.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Flux Software LLC) C:\Users\Marvin\AppData\Local\FluxSoftware\Flux\flux.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe () C:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Deutsche Telekom AG) C:\Program Files (x86)\Deutsche Telekom AG\Browser 7\Browser7.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-09-19] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [f.lux] => C:\Users\Marvin\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3907152 2015-08-28] (Tonec Inc.) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [787592 2015-06-23] (Sandboxie Holdings, LLC) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-09-20] (Electronic Arts) HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe [10566352 2015-09-02] () HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\MountPoints2: {4a1341e0-5a50-11e5-8251-0030678c4569} - "G:\pushinst.exe" HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\MountPoints2: {bf0b5d6c-5a39-11e5-824f-806e6f6e6963} - "E:\Autorun.exe" ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-09-20] ShortcutTarget: MEGAsync.lnk -> C:\Users\Marvin\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OMSI Addon Manager.lnk [2015-09-15] ShortcutTarget: OMSI Addon Manager.lnk -> C:\Program Files (x86)\OMSI Addon Manager\OMSI Addon Manager.exe (Jan Kiesewalter) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{41EB8567-6A5D-4D0D-B932-9F874D329573}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{8A7B889B-C767-401D-8DF7-EBFE976520BC}: [DhcpNameServer] 10.77.0.254 Internet Explorer: ================== HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://msn.com/ BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-08-28] (Internet Download Manager, Tonec Inc.) BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-24] (IObit) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-08-28] (Internet Download Manager, Tonec Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation) FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-23] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-23] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Marvin\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\Marvin\AppData\Roaming\IDM\idmmzcc5 [2015-09-21] Chrome: ======= CHR dev: Chrome dev build erkannt! <======= ACHTUNG CHR Profile: C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Docs) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-23] CHR Extension: (Google Drive) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-23] CHR Extension: (YouTube) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-23] CHR Extension: (Google Search) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-23] CHR Extension: (Google Docs Offline) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-24] CHR Extension: (Chrome Web Store Payments) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-24] CHR Extension: (word highlight) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa [2015-09-23] CHR Extension: (Gmail) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-23] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 Browser7Maintenance; C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe [148792 2015-08-10] (Deutsche Telekom AG) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-24] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-20] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2015-09-21] () R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] () R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [175752 2015-06-23] (Sandboxie Holdings, LLC) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH) S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [800208 2015-08-27] (Tunngle.net GmbH) R2 vmms; C:\Windows\system32\vmms.exe [13784064 2015-04-01] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 DRHARD64; C:\WINDOWS\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software) R2 DRHARD64; C:\WINDOWS\SysWOW64\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software) R2 DRHMSR64; C:\WINDOWS\system32\drivers\DRHMSR64.sys [13760 2013-07-21] () R2 DRHMSR64; C:\WINDOWS\SysWOW64\drivers\DRHMSR64.sys [13760 2013-07-21] () S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R3 fwlanusb6; C:\Windows\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH) R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68952 2015-05-12] (Microsoft Corporation) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-19] (REALiX(tm)) S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2015-09-19] (Microsoft Corporation) R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [109272 2015-06-18] (Malwarebytes Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-24] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation) S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2014-11-21] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2015-09-19] (Microsoft Corporation) S3 ptun0901; C:\Windows\system32\DRIVERS\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project) S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2015-09-19] (Microsoft Corporation) R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.) R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [129472 2015-06-27] (Razer, Inc.) R3 RZSURROUNDVADService; C:\Windows\system32\drivers\RzSurroundVAD.sys [40640 2015-07-29] (Windows (R) Win 7 DDK provider) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [190088 2015-06-23] (Sandboxie Holdings, LLC) R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-09-08] (Oracle Corporation) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [146072 2015-09-08] (Oracle Corporation) S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [18944 2015-09-19] (Microsoft Corporation) R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 DRHARD; \??\C:\WINDOWS\system32\DRIVERS\DRHARD.SYS [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-24 14:59 - 2015-09-24 15:00 - 00017844 _____ C:\Users\Marvin\Desktop\FRST.txt 2015-09-24 14:18 - 2015-09-24 15:04 - 00002086 _____ C:\Users\Marvin\Desktop\Chromium.lnk 2015-09-24 14:17 - 2015-09-24 14:17 - 00000896 _____ C:\Users\Public\Desktop\SRWare Iron (64-Bit).lnk 2015-09-24 14:17 - 2015-09-24 14:17 - 00000000 ____D C:\Program Files\SRWare Iron (64-Bit) 2015-09-24 14:16 - 2015-09-24 14:16 - 52008030 _____ (SRWare ) C:\Users\Marvin\Downloads\srware_iron64_45.0.2400.exe 2015-09-24 14:14 - 2015-09-24 14:14 - 00929872 _____ (Google Inc.) C:\Users\Marvin\Downloads\ChromeSetup.exe 2015-09-24 13:48 - 2015-09-24 13:48 - 00003310 _____ C:\WINDOWS\System32\Tasks\WeatherApi 2015-09-24 13:48 - 2015-09-24 13:48 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\WJwktKvvk 2015-09-24 13:48 - 2015-09-24 13:48 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\nets 2015-09-24 13:47 - 2015-09-24 13:47 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Cucckoo 2015-09-24 13:32 - 2015-09-24 14:04 - 00000252 _____ C:\Users\Marvin\Desktop\Search.txt 2015-09-24 13:29 - 2015-09-24 13:30 - 44889680 _____ (Google Inc.) C:\Users\Marvin\Downloads\ChromeStandaloneSetup.exe 2015-09-24 13:25 - 2015-09-24 14:41 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-09-24 13:25 - 2015-09-24 13:25 - 00003910 _____ C:\WINDOWS\System32\Tasks\realtor 2015-09-24 13:25 - 2015-09-24 13:25 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\NShChaGNnj 2015-09-24 13:25 - 2015-09-24 13:25 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\charts 2015-09-24 13:10 - 2015-09-24 14:35 - 00000300 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Marvin.job 2015-09-24 13:10 - 2015-09-24 14:14 - 00002402 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Marvin 2015-09-24 13:10 - 2015-09-24 13:10 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\ProductData 2015-09-24 13:10 - 2015-09-24 13:10 - 00000000 ____D C:\ProgramData\ProductData 2015-09-24 13:09 - 2015-09-24 13:09 - 00001386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk 2015-09-24 13:09 - 2015-09-24 13:09 - 00001374 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2015-09-24 13:02 - 2015-09-24 13:02 - 10942240 _____ (IObit) C:\Users\Marvin\Downloads\iobituninstaller_5.0.3.171.exe 2015-09-23 22:19 - 2015-09-23 22:19 - 00302329 _____ C:\Users\Marvin\Downloads\Dateien.7z 2015-09-23 22:14 - 2015-09-24 14:19 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-09-23 22:14 - 2015-09-24 13:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-09-23 22:14 - 2015-09-23 22:19 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-23 22:14 - 2015-09-23 22:14 - 00003890 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-23 22:14 - 2015-09-23 22:14 - 00003654 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-23 22:14 - 2015-09-23 22:14 - 00000000 ____D C:\Users\Marvin\AppData\Local\Google 2015-09-23 22:07 - 2015-09-23 22:08 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Notepad++ 2015-09-23 22:07 - 2015-09-23 22:08 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2015-09-23 22:07 - 2015-09-23 22:07 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2015-09-23 22:07 - 2015-09-23 22:07 - 00000000 ____D C:\Users\Marvin\AppData\Local\Deployment 2015-09-23 22:07 - 2015-09-23 22:07 - 00000000 ____D C:\Users\Marvin\AppData\Local\Apps\2.0 2015-09-23 22:07 - 2015-09-23 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2015-09-23 21:39 - 2015-09-23 21:39 - 00005734 _____ C:\Users\Marvin\Desktop\MBAM.txt 2015-09-23 21:04 - 2015-09-23 21:05 - 02192384 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe 2015-09-23 20:35 - 2015-09-23 20:35 - 00000000 ____D C:\Users\Marvin\Desktop\revouninstaller-portable 2015-09-23 20:27 - 2015-09-23 20:27 - 00002124 _____ C:\Users\Public\Desktop\BF2 jetzt online spielen!.lnk 2015-09-23 20:27 - 2015-09-23 20:27 - 00002102 _____ C:\Users\Public\Desktop\Battlefield 2.lnk 2015-09-23 20:25 - 2015-09-23 23:30 - 00000000 ____D C:\Users\Marvin\Documents\Battlefield 2 2015-09-23 15:53 - 2015-09-24 14:35 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2015-09-21 23:56 - 2015-09-24 14:54 - 00041472 ___SH C:\Users\Marvin\Desktop\Thumbs.db 2015-09-21 20:30 - 2015-09-21 20:30 - 00002168 _____ C:\Users\Marvin\Desktop\DesertCombat.lnk 2015-09-21 20:30 - 2015-09-21 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesertCombat 2015-09-21 20:30 - 2015-09-21 20:15 - 00729088 _____ (Indigo Rose Corporation) C:\WINDOWS\iun6002.exe 2015-09-21 20:27 - 2015-09-21 20:27 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC_Final_Client 2015-09-21 20:27 - 2015-09-21 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DC_Final_Client 2015-09-21 18:30 - 2015-09-23 21:53 - 00000000 ____D C:\AdwCleaner 2015-09-21 18:10 - 2015-09-24 14:59 - 00000000 ____D C:\FRST 2015-09-21 17:30 - 2015-09-24 13:25 - 00000000 ____D C:\Users\Marvin\Documents\benko 2015-09-21 17:26 - 2015-09-21 17:26 - 00000000 ____D C:\Users\Marvin\AppData\Local\GameSpy 2015-09-21 17:23 - 2015-09-21 17:23 - 00000094 _____ C:\Users\Marvin\AppData\Local\fusioncache.dat 2015-09-21 15:26 - 2015-09-21 15:26 - 00001987 _____ C:\Users\Public\Desktop\GameSpy Comrade.lnk 2015-09-21 15:26 - 2015-09-21 15:26 - 00000000 ____D C:\Users\Marvin\Documents\My Games 2015-09-21 15:26 - 2015-09-21 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy 2015-09-21 15:25 - 2015-09-21 15:25 - 00000000 ____D C:\Program Files (x86)\GameSpy 2015-09-21 15:23 - 2015-09-21 15:23 - 01805156 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2015-09-21 15:23 - 2015-09-21 15:23 - 00000000 __RHD C:\Users\Marvin\AppData\Roaming\SecuROM 2015-09-21 15:22 - 2015-09-21 15:22 - 00000000 ____D C:\WINDOWS\SysWOW64\URTTEMP 2015-09-21 15:19 - 2015-09-21 15:19 - 00669184 _____ C:\WINDOWS\SysWOW64\pbsvc.exe 2015-09-21 15:17 - 2015-09-21 15:17 - 00001322 _____ C:\Users\Public\Desktop\Crysis.lnk 2015-09-21 15:16 - 2015-09-21 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts 2015-09-21 14:57 - 2015-09-21 14:57 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2015-09-21 14:30 - 2015-09-21 14:30 - 00000000 ____D C:\Users\Marvin\AppData\Local\cu 2015-09-21 11:44 - 2015-06-11 09:36 - 00072154 _____ C:\WINDOWS\procexp.chm 2015-09-21 11:44 - 2015-05-11 13:56 - 02508432 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\procexp.exe 2015-09-21 11:44 - 2015-01-26 09:19 - 00002009 _____ C:\WINDOWS\Eula.txt 2015-09-21 11:43 - 2015-09-21 11:47 - 00002064 _____ C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk 2015-09-21 11:43 - 2015-09-21 11:47 - 00002034 _____ C:\Users\Marvin\Desktop\FileHippo App Manager.lnk 2015-09-21 11:43 - 2015-09-21 11:47 - 00000000 ____D C:\Program Files (x86)\FileHippo.com 2015-09-21 11:41 - 2015-09-21 18:10 - 00000000 ____D C:\Program Files (x86)\SecurityXploded 2015-09-21 11:39 - 2015-09-24 13:47 - 00000000 ____D C:\Users\Marvin\AppData\Local\AppUpd 2015-09-21 11:39 - 2015-09-21 11:39 - 00003306 _____ C:\WINDOWS\System32\Tasks\App Update 2015-09-21 11:39 - 2015-09-21 11:39 - 00001133 _____ C:\Users\Public\Desktop\herdProtect.lnk 2015-09-21 11:39 - 2015-09-21 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\herdProtect 2015-09-21 11:39 - 2015-09-21 11:39 - 00000000 ____D C:\Program Files\Reason 2015-09-21 11:20 - 2015-09-21 11:20 - 00001028 _____ C:\Users\Public\Desktop\TweakMe!.lnk 2015-09-21 11:20 - 2015-09-21 11:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakMe! 2015-09-21 11:20 - 2015-09-21 11:20 - 00000000 ____D C:\Program Files (x86)\TweakMe! 2015-09-20 20:58 - 2015-09-20 20:58 - 00280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr 2015-09-20 20:58 - 2015-09-20 20:58 - 00000000 ____D C:\Users\Marvin\AppData\Local\PunkBuster 2015-09-20 19:42 - 2015-09-20 19:52 - 00000000 ____D C:\Users\Marvin\Desktop\BF2 MODS 2015-09-20 17:25 - 2015-09-20 17:41 - 00000000 ____D C:\Users\Marvin\Documents\Battlefield 3 2015-09-20 17:25 - 2015-09-20 17:25 - 00000000 ____D C:\ProgramData\EA Core 2015-09-20 17:24 - 2015-09-20 17:24 - 00002967 _____ C:\Users\Marvin\Desktop\Venice Unleashed.lnk 2015-09-20 17:24 - 2015-09-20 17:24 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Venice Unleashed 2015-09-20 17:20 - 2015-09-20 17:20 - 00001190 _____ C:\Users\Public\Desktop\Battlefield 3.lnk 2015-09-20 17:20 - 2015-09-20 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2015-09-20 16:32 - 2015-09-21 15:19 - 00103736 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe 2015-09-20 16:32 - 2015-09-21 15:19 - 00066872 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe 2015-09-20 16:32 - 2015-09-20 17:20 - 00189248 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0 2015-09-20 15:23 - 2015-09-20 15:24 - 00000000 ____D C:\Program Files (x86)\Origin Games 2015-09-20 15:19 - 2015-09-20 20:53 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Origin 2015-09-20 15:19 - 2015-09-20 15:23 - 00000000 ____D C:\Users\Marvin\AppData\Local\Origin 2015-09-20 15:17 - 2015-09-21 10:02 - 00000000 ____D C:\ProgramData\Origin 2015-09-20 15:17 - 2015-09-20 17:25 - 00000000 ____D C:\ProgramData\Electronic Arts 2015-09-20 15:17 - 2015-09-20 15:19 - 00000000 ____D C:\Program Files (x86)\Origin 2015-09-20 15:17 - 2015-09-20 15:17 - 00000995 _____ C:\Users\Public\Desktop\Origin.lnk 2015-09-20 15:17 - 2015-09-20 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-09-20 14:48 - 2015-09-20 14:48 - 00000424 _____ C:\Users\Marvin\Desktop\Dieser PC - Verknüpfung.lnk 2015-09-20 14:10 - 2015-09-20 14:11 - 00000660 _____ C:\WINDOWS\eReg.dat 2015-09-20 14:10 - 2015-09-20 14:10 - 00002136 _____ C:\Users\Public\Desktop\Battlefield 1942 Secret Weapons of WWII.lnk 2015-09-20 14:08 - 2015-09-20 14:08 - 00002136 _____ C:\Users\Public\Desktop\Battlefield 1942 The Road To Rome.lnk 2015-09-20 14:05 - 2015-09-20 14:05 - 00002110 _____ C:\Users\Public\Desktop\Battlefield 1942.lnk 2015-09-20 14:03 - 1998-06-17 17:07 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mfc42loc.dll 2015-09-20 14:00 - 2015-09-23 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES 2015-09-20 13:58 - 2015-09-23 20:19 - 00000000 ____D C:\Program Files (x86)\EA GAMES 2015-09-20 13:38 - 2015-09-20 13:38 - 00000000 ___RD C:\Users\Marvin\Documents\MEGAsync 2015-09-20 12:48 - 2015-09-20 12:48 - 00000220 _____ C:\Users\Marvin\Desktop\Garry's Mod.url 2015-09-20 10:51 - 2015-09-20 10:51 - 00000000 ____D C:\Users\Marvin\AppData\Local\Logitech 2015-09-19 22:32 - 2013-04-23 00:33 - 370087936 _____ C:\Users\Marvin\Desktop\Windows NT Workstation 5.0 Evaluation.iso 2015-09-19 22:18 - 2015-09-21 08:38 - 00000000 ____D C:\Program Files\Common Files\McAfee 2015-09-19 22:18 - 2015-09-19 22:22 - 00000000 ____D C:\ProgramData\McAfee 2015-09-19 22:03 - 2015-09-19 22:03 - 00000000 ___RD C:\Sandbox 2015-09-19 22:00 - 2015-09-21 11:37 - 00001610 _____ C:\WINDOWS\Sandboxie.ini 2015-09-19 22:00 - 2015-09-19 22:00 - 00000926 _____ C:\Users\Marvin\Desktop\Sandboxed Web Browser.lnk 2015-09-19 22:00 - 2015-09-19 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie 2015-09-19 22:00 - 2015-09-19 22:00 - 00000000 ____D C:\Program Files\Sandboxie 2015-09-19 21:59 - 2015-09-19 21:59 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2015-09-19 21:59 - 2015-09-19 21:59 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2015-09-19 21:59 - 2015-09-19 21:59 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2015-09-19 21:59 - 2015-09-19 21:59 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2015-09-19 21:58 - 2015-09-19 21:59 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2015-09-19 21:58 - 2015-09-19 21:58 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2015-09-19 21:58 - 2015-09-19 21:58 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2015-09-19 21:54 - 2015-09-24 13:14 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\IObit 2015-09-19 21:54 - 2015-09-24 13:10 - 00000000 ____D C:\ProgramData\IObit 2015-09-19 21:54 - 2015-09-19 21:54 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS 2015-09-19 21:53 - 2015-09-24 13:10 - 00000000 ____D C:\Program Files (x86)\IObit 2015-09-19 21:25 - 2015-06-27 01:27 - 00129472 _____ (Razer, Inc.) C:\WINDOWS\system32\Drivers\rzpnk.sys 2015-09-19 21:24 - 2015-06-12 17:51 - 00037184 _____ (Razer, Inc.) C:\WINDOWS\system32\Drivers\rzpmgrk.sys 2015-09-19 21:21 - 2015-09-19 21:21 - 00000000 ____D C:\ProgramData\RzSurroundVAD_1.1.60.0 2015-09-19 21:16 - 2015-09-19 21:25 - 00000000 ____D C:\Program Files (x86)\Razer 2015-09-19 21:16 - 2015-09-19 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer 2015-09-19 21:14 - 2015-09-19 21:26 - 00000000 ____D C:\ProgramData\Razer 2015-09-19 21:14 - 2015-09-19 21:14 - 00000000 ____D C:\Users\Marvin\AppData\Local\Razer 2015-09-19 19:28 - 2015-09-19 19:28 - 06051033 _____ C:\Users\Marvin\Desktop\huzuni-new.zip 2015-09-19 18:32 - 2015-09-19 19:47 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\.minecraft 2015-09-19 18:32 - 2015-09-19 18:32 - 00000000 ____D C:\Users\Marvin\Downloads\runtime 2015-09-19 18:32 - 2015-09-19 18:32 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\java 2015-09-19 18:31 - 2015-09-19 18:32 - 00000000 ____D C:\Users\Marvin\Downloads\game 2015-09-19 18:15 - 2015-09-19 18:15 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\TeamViewer 2015-09-19 17:43 - 2015-09-19 19:49 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Tunngle 2015-09-19 17:43 - 2015-09-19 17:45 - 00000000 ____D C:\ProgramData\Tunngle 2015-09-19 17:43 - 2015-09-19 17:45 - 00000000 ____D C:\Program Files (x86)\Tunngle 2015-09-19 17:43 - 2015-09-19 17:43 - 00001007 _____ C:\Users\Public\Desktop\Tunngle.lnk 2015-09-19 17:43 - 2015-09-19 17:43 - 00000000 ____D C:\Users\Public\Documents\Tunngle 2015-09-19 17:43 - 2015-09-19 17:43 - 00000000 ____D C:\Users\Marvin\Documents\Tunngle 2015-09-19 17:43 - 2015-09-19 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle 2015-09-19 16:48 - 2015-09-19 16:48 - 00000000 ____D C:\Users\Marvin\Documents\My Cheat Tables 2015-09-19 16:47 - 2015-09-19 16:47 - 00001101 _____ C:\Users\Marvin\Desktop\Cheat Engine.lnk 2015-09-19 16:47 - 2015-09-19 16:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 2015-09-19 16:47 - 2015-09-19 16:47 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.4 2015-09-19 16:02 - 2015-09-19 16:50 - 00000000 ____D C:\Users\Marvin\Documents\Euro Truck Simulator 2 2015-09-19 15:18 - 2015-04-01 05:30 - 13784064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmms.exe 2015-09-19 15:18 - 2015-03-09 02:25 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmickvpexchange.dll 2015-09-19 15:18 - 2015-03-09 02:24 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicguestinterface.dll 2015-09-19 15:18 - 2015-03-09 02:23 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicshutdown.dll 2015-09-19 15:18 - 2015-03-09 02:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimesync.dll 2015-09-19 15:18 - 2015-03-09 02:22 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicheartbeat.dll 2015-09-19 15:18 - 2015-03-09 02:21 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicvss.dll 2015-09-19 15:18 - 2015-03-09 02:20 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicrdv.dll 2015-09-19 14:17 - 2015-09-24 14:58 - 27590656 _____ C:\WINDOWS\system32\vmguest.iso 2015-09-19 13:58 - 2015-09-19 14:01 - 00000000 ____D C:\Program Files\Hyper-V 2015-09-19 13:58 - 2015-09-19 14:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hyper-V Management Tools 2015-09-19 13:58 - 2015-09-19 14:00 - 00000000 ____D C:\WINDOWS\vmguest 2015-09-19 13:58 - 2015-09-19 13:58 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2015-09-19 13:58 - 2015-09-19 13:58 - 00000000 ____D C:\Users\Public\Documents\Hyper-V 2015-09-19 00:57 - 2015-09-19 00:57 - 00000613 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk 2015-09-19 00:57 - 2015-09-19 00:57 - 00000000 ____D C:\Aerosoft 2015-09-19 00:49 - 2015-09-19 00:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft 2015-09-18 21:59 - 2015-09-18 21:59 - 00001304 _____ C:\Users\Public\Desktop\Data Lifeguard Diagnostic for Windows.lnk 2015-09-18 21:59 - 2015-09-18 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation 2015-09-18 21:59 - 2015-09-18 21:59 - 00000000 ____D C:\Program Files (x86)\Western Digital Corporation 2015-09-18 21:58 - 2015-09-20 15:19 - 00000000 ____D C:\ProgramData\Package Cache 2015-09-18 21:58 - 2015-09-18 21:58 - 00001421 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk 2015-09-18 21:57 - 2015-09-18 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate 2015-09-18 21:57 - 2015-09-18 21:57 - 00000000 ____D C:\Program Files (x86)\Seagate 2015-09-18 21:51 - 2015-09-18 21:51 - 00000996 _____ C:\Users\Marvin\Desktop\Dr. Hardware 2014.lnk 2015-09-18 21:51 - 2015-09-18 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr. Hardware 2014 2015-09-18 21:51 - 2015-09-18 21:51 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2014 2015-09-18 21:51 - 2013-07-21 18:41 - 00013760 _____ C:\WINDOWS\SysWOW64\Drivers\DRHMSR64.sys 2015-09-18 21:51 - 2013-07-21 18:41 - 00013760 _____ C:\WINDOWS\system32\Drivers\DRHMSR64.sys 2015-09-18 21:51 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\WINDOWS\SysWOW64\Drivers\DRHARD64.sys 2015-09-18 21:51 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\WINDOWS\system32\Drivers\DRHARD64.sys 2015-09-18 21:45 - 2015-09-21 11:49 - 00000000 ____D C:\WINDOWS\System32\Tasks\Abelssoft 2015-09-18 21:45 - 2015-09-19 11:48 - 00000000 ____D C:\Users\Marvin\AppData\Local\Abelssoft 2015-09-18 21:45 - 2015-09-18 21:45 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Abelssoft 2015-09-18 15:30 - 2015-09-18 15:30 - 00000000 ____D C:\m-r-software 2015-09-17 22:48 - 2015-09-22 18:33 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager 2015-09-17 22:48 - 2015-09-21 22:42 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\IDM 2015-09-17 22:48 - 2015-09-17 22:48 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2015-09-17 22:48 - 2015-09-17 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2015-09-17 21:33 - 2015-09-17 21:33 - 00000000 ____D C:\Users\Marvin\.android 2015-09-17 21:24 - 2015-09-17 21:56 - 00000000 ____D C:\Users\Marvin\AppData\Local\Genymobile 2015-09-17 21:23 - 2015-09-17 21:32 - 00000000 ____D C:\Users\Marvin\.VirtualBox 2015-09-17 21:22 - 2015-09-17 21:22 - 00001092 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk 2015-09-17 21:22 - 2015-09-17 21:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox 2015-09-17 21:22 - 2015-09-08 11:48 - 00964392 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys 2015-09-17 21:22 - 2015-09-08 11:47 - 00138904 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys 2015-09-17 21:19 - 2015-09-17 21:19 - 00000000 ____D C:\Program Files\Oracle 2015-09-17 21:14 - 2015-09-17 21:14 - 00000997 _____ C:\Users\Public\Desktop\Genymotion.lnk 2015-09-17 21:14 - 2015-09-17 21:14 - 00000992 _____ C:\Users\Public\Desktop\Genymotion Shell.lnk 2015-09-17 21:14 - 2015-09-17 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion 2015-09-17 21:12 - 2015-09-17 21:12 - 00000000 ____D C:\Program Files\Genymobile 2015-09-17 20:47 - 2015-09-17 20:47 - 00000000 ___RD C:\Users\Marvin\AppData\Roaming\Andy_45_Online 2015-09-17 20:47 - 2015-09-17 20:47 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Andy 2015-09-17 20:40 - 2015-09-17 20:40 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\NVIDIA 2015-09-17 20:34 - 2015-09-17 20:44 - 00000000 ____D C:\SocketeQ 2015-09-16 20:18 - 2015-09-21 23:54 - 00000078 _____ C:\Users\Marvin\Desktop\maptools.ini 2015-09-16 20:14 - 2014-04-18 01:17 - 00692736 _____ (Thiago Sobral) C:\Users\Marvin\Desktop\maptools.exe 2015-09-16 18:50 - 2015-08-22 15:42 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-09-16 18:50 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-09-16 18:50 - 2015-08-10 20:15 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2015-09-16 18:50 - 2015-08-10 20:15 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2015-09-16 18:50 - 2015-08-10 20:06 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2015-09-16 18:50 - 2015-08-10 19:49 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2015-09-16 18:50 - 2015-08-10 18:56 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2015-09-16 18:50 - 2015-08-10 18:46 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2015-09-16 18:50 - 2015-08-07 23:41 - 07460168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-09-16 18:50 - 2015-08-07 23:40 - 01736520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-09-16 18:50 - 2015-08-07 23:40 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-09-16 18:50 - 2015-08-07 23:40 - 01134752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2015-09-16 18:50 - 2015-08-07 23:40 - 00686960 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2015-09-16 18:50 - 2015-08-07 23:40 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2015-09-16 18:50 - 2015-08-07 16:13 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2015-09-16 18:50 - 2015-08-06 21:16 - 01424712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2015-09-16 18:50 - 2015-08-06 21:16 - 01392968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2015-09-16 18:50 - 2015-08-06 21:16 - 01381704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2015-09-16 18:50 - 2015-08-06 21:16 - 01265992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2015-09-16 18:50 - 2015-08-06 21:15 - 01658544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-09-16 18:50 - 2015-08-06 21:15 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-09-16 18:50 - 2015-08-06 21:15 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-09-16 18:50 - 2015-08-06 21:15 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-09-16 18:50 - 2015-08-06 18:47 - 04710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2015-09-16 18:50 - 2015-08-06 18:18 - 04068352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2015-09-16 18:50 - 2015-07-16 20:58 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll 2015-09-16 18:50 - 2015-05-12 02:24 - 00068952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2015-09-16 18:50 - 2015-05-12 02:24 - 00019800 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2015-09-16 18:49 - 2015-08-06 19:05 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx 2015-09-16 18:49 - 2015-08-06 18:37 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx 2015-09-16 17:48 - 2015-09-21 17:56 - 00001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-09-16 17:48 - 2015-09-21 17:56 - 00001047 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk 2015-09-16 17:48 - 2015-09-21 17:56 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2015-09-16 16:03 - 2015-09-24 14:53 - 00010088 _____ C:\WINDOWS\setupact.log 2015-09-16 16:03 - 2015-09-16 16:03 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-09-15 19:24 - 2015-09-15 19:24 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2015-09-15 19:24 - 2015-09-15 19:24 - 00000000 ____D C:\Users\Marvin\AppData\Local\FluxSoftware 2015-09-15 18:27 - 2015-09-15 18:27 - 00001143 _____ C:\Users\Public\Desktop\OMSI Addon Manager.lnk 2015-09-15 18:27 - 2015-09-15 18:27 - 00000000 ____D C:\Users\Marvin\AppData\Local\OMSI AM 2015-09-15 18:27 - 2015-09-15 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OMSI Addon Manager 2015-09-15 18:27 - 2015-09-15 18:27 - 00000000 ____D C:\Program Files (x86)\OMSI Addon Manager 2015-09-15 18:14 - 2015-09-15 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-09-15 18:14 - 2015-09-15 18:14 - 00000000 ____D C:\Program Files\Logitech 2015-09-15 18:14 - 2015-09-15 18:14 - 00000000 ____D C:\Program Files\Common Files\Logitech 2015-09-15 18:02 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2015-09-15 18:02 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2015-09-15 18:02 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2015-09-15 18:02 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2015-09-15 18:02 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2015-09-15 18:02 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2015-09-15 18:02 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2015-09-15 18:02 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2015-09-15 18:02 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2015-09-15 18:02 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2015-09-15 18:02 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2015-09-15 18:02 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2015-09-15 18:02 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2015-09-15 18:02 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2015-09-15 18:02 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2015-09-15 18:02 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2015-09-15 18:02 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2015-09-15 18:02 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2015-09-15 18:02 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2015-09-15 18:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2015-09-15 18:02 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2015-09-15 18:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2015-09-15 18:02 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2015-09-15 18:02 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2015-09-15 18:02 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2015-09-15 18:02 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2015-09-15 18:02 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2015-09-15 18:02 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2015-09-15 18:02 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2015-09-15 18:02 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2015-09-15 18:02 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2015-09-15 18:02 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2015-09-15 18:02 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2015-09-15 18:02 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2015-09-15 18:02 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2015-09-15 18:02 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2015-09-15 18:02 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2015-09-15 18:02 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2015-09-15 18:02 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2015-09-15 18:02 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2015-09-15 18:02 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2015-09-15 18:02 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2015-09-15 18:02 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2015-09-15 18:02 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2015-09-15 18:02 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2015-09-15 18:02 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2015-09-15 18:02 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2015-09-15 18:02 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2015-09-15 18:02 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2015-09-15 18:02 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2015-09-15 18:02 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2015-09-15 18:02 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2015-09-15 18:01 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2015-09-15 18:01 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2015-09-15 18:01 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2015-09-15 18:01 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2015-09-15 18:01 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2015-09-15 18:01 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2015-09-15 18:01 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2015-09-15 18:01 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2015-09-15 18:01 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2015-09-15 18:01 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2015-09-15 18:01 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2015-09-15 18:01 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2015-09-15 18:01 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2015-09-15 18:01 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2015-09-15 18:01 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2015-09-15 18:01 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2015-09-15 18:01 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2015-09-15 18:01 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2015-09-15 18:01 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2015-09-15 18:01 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2015-09-15 18:01 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2015-09-15 18:01 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2015-09-15 18:01 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2015-09-15 18:01 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2015-09-15 18:01 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2015-09-15 18:01 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2015-09-15 18:01 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2015-09-15 18:01 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2015-09-15 18:01 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2015-09-15 18:01 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2015-09-15 18:01 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2015-09-15 18:01 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2015-09-15 18:01 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2015-09-15 18:01 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2015-09-15 18:01 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2015-09-15 18:01 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2015-09-15 18:01 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2015-09-15 18:01 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2015-09-15 18:01 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2015-09-15 18:01 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2015-09-15 18:01 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2015-09-15 18:01 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2015-09-15 18:01 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2015-09-15 18:01 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2015-09-15 18:01 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2015-09-15 18:01 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2015-09-15 18:01 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2015-09-15 18:01 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2015-09-15 18:01 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2015-09-15 18:01 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2015-09-15 18:01 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2015-09-15 18:01 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2015-09-15 18:01 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2015-09-15 18:01 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2015-09-15 18:01 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2015-09-15 18:01 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2015-09-15 18:01 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2015-09-15 18:01 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2015-09-15 18:01 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2015-09-15 18:01 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2015-09-15 18:01 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2015-09-15 18:01 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2015-09-15 18:00 - 2015-09-23 20:26 - 00145825 _____ C:\WINDOWS\DirectX.log 2015-09-15 18:00 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2015-09-15 18:00 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2015-09-15 18:00 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2015-09-15 18:00 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2015-09-15 17:28 - 2015-09-20 12:48 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-09-15 17:13 - 2015-09-15 17:13 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\ESET 2015-09-15 17:13 - 2015-09-15 17:13 - 00000000 ____D C:\Users\Marvin\AppData\Local\ESET 2015-09-15 15:18 - 2015-09-15 15:18 - 00003118 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2015-09-15 15:18 - 2015-09-15 15:18 - 00003092 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2015-09-15 15:18 - 2015-09-15 15:18 - 00003090 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2015-09-15 15:18 - 2015-09-15 15:18 - 00003062 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2015-09-15 15:18 - 2015-09-15 15:18 - 00003060 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2015-09-15 15:18 - 2015-09-15 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2015-09-15 15:16 - 2015-09-15 15:17 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2015-09-15 00:27 - 2015-09-15 00:27 - 00000000 ____D C:\Program Files\Common Files\AV 2015-09-15 00:23 - 2015-09-24 14:52 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\DMCache 2015-09-15 00:23 - 2015-09-23 20:57 - 00000000 ____D C:\Users\Marvin\Downloads\Video 2015-09-15 00:23 - 2015-09-23 20:56 - 00000000 ____D C:\Users\Marvin\Downloads\Compressed 2015-09-15 00:23 - 2015-09-21 19:20 - 00001025 _____ C:\Users\Marvin\Desktop\Internet Download Manager.lnk 2015-09-15 00:23 - 2015-09-15 00:23 - 00000000 ____D C:\ProgramData\IDM 2015-09-14 23:35 - 2015-09-23 20:03 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\vlc 2015-09-14 23:18 - 2015-09-14 23:18 - 00001086 _____ C:\Users\Public\Desktop\VLC media player.lnk 2015-09-14 23:18 - 2015-09-14 23:18 - 00000238 _____ C:\Users\Marvin\.swfinfo 2015-09-14 23:18 - 2015-09-14 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-09-14 23:17 - 2015-09-14 23:17 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2015-09-14 22:29 - 2015-09-14 22:29 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Mozilla 2015-09-14 22:28 - 2015-09-14 22:35 - 00000000 ____D C:\Users\Marvin\AppData\Local\Deutsche Telekom AG 2015-09-14 22:28 - 2015-09-14 22:29 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Deutsche Telekom AG 2015-09-14 22:27 - 2015-09-14 22:27 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser 7 der Telekom.lnk 2015-09-14 22:27 - 2015-09-14 22:27 - 00001340 _____ C:\Users\Public\Desktop\Browser 7 der Telekom.lnk 2015-09-14 22:27 - 2015-09-14 22:27 - 00000000 ____D C:\ProgramData\Telekom-Browser 7 2015-09-14 22:27 - 2015-09-14 22:27 - 00000000 ____D C:\Program Files (x86)\Deutsche Telekom AG 2015-09-14 22:27 - 2015-09-14 22:27 - 00000000 ____D C:\Program Files (x86)\Browser 7 Maintenance Service 2015-09-14 22:17 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-09-14 22:17 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-09-14 22:10 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-09-14 22:10 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-09-14 21:59 - 2015-09-14 21:59 - 00000000 ____D C:\Users\Marvin\AppData\Local\Steam 2015-09-14 21:59 - 2015-09-14 21:59 - 00000000 ____D C:\Users\Marvin\AppData\Local\CEF 2015-09-14 21:56 - 2015-09-14 21:56 - 00000000 ____D C:\ProgramData\OMSI AM 2015-09-14 21:40 - 2015-09-15 03:18 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-09-14 21:40 - 2015-09-15 03:18 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-09-14 20:33 - 2015-09-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-09-14 20:33 - 2015-09-14 20:33 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-09-14 20:33 - 2015-09-14 20:33 - 00000000 ____D C:\Program Files\MSBuild 2015-09-14 20:33 - 2015-09-14 20:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-09-14 20:33 - 2015-09-14 20:33 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-09-14 20:32 - 2015-09-14 20:32 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-09-14 20:02 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-09-14 20:02 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-09-14 19:42 - 2015-09-15 15:47 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Skype 2015-09-14 19:42 - 2015-09-14 19:42 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk 2015-09-14 19:42 - 2015-09-14 19:42 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-09-14 19:42 - 2015-09-14 19:42 - 00000000 ____D C:\Users\Marvin\AppData\Local\Skype 2015-09-14 19:42 - 2015-09-14 19:42 - 00000000 ____D C:\ProgramData\Skype 2015-09-14 19:42 - 2015-09-14 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-09-14 19:21 - 2015-09-14 19:22 - 00004923 _____ C:\WINDOWS\avmacc.log 2015-09-14 19:21 - 2015-09-14 19:22 - 00003573 _____ C:\WINDOWS\avmsetup.log 2015-09-14 19:21 - 2015-09-14 19:22 - 00002749 _____ C:\WINDOWS\avmadd32.log 2015-09-14 19:21 - 2015-09-14 19:21 - 00000000 ____D C:\Program Files (x86)\AVM_update 2015-09-14 17:33 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll 2015-09-14 17:33 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll 2015-09-14 17:20 - 2015-09-14 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-09-14 17:17 - 2015-09-14 17:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-09-14 17:17 - 2015-09-14 17:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-09-14 17:14 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2015-09-14 17:14 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2015-09-14 17:14 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll 2015-09-14 17:14 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll 2015-09-14 17:12 - 2015-09-14 17:12 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2015-09-14 17:03 - 2015-09-24 14:53 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-09-14 17:03 - 2015-09-14 17:03 - 00001118 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-09-14 17:03 - 2015-09-14 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-09-14 17:03 - 2015-09-14 17:03 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-09-14 17:03 - 2015-09-14 17:03 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-09-14 17:03 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-09-14 17:03 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-09-14 17:03 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-09-14 17:03 - 2014-11-17 22:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2015-09-14 17:03 - 2014-11-17 22:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2015-09-14 17:03 - 2014-11-14 08:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll 2015-09-14 17:03 - 2014-11-14 08:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2015-09-14 17:03 - 2014-11-14 08:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2015-09-14 17:02 - 2015-05-01 03:13 - 06521800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2015-09-14 17:02 - 2015-05-01 03:13 - 01488000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2015-09-14 17:02 - 2015-05-01 03:13 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2015-09-14 17:02 - 2014-11-08 03:58 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2015-09-14 17:01 - 2014-11-15 21:05 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2015-09-14 17:01 - 2014-11-15 08:29 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2015-09-14 17:01 - 2014-11-14 08:57 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-09-14 17:01 - 2014-11-14 07:03 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-09-14 17:01 - 2014-11-10 20:06 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2015-09-14 17:01 - 2014-11-10 20:06 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2015-09-14 17:01 - 2014-11-10 04:57 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2015-09-14 17:01 - 2014-11-10 03:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2015-09-14 17:01 - 2014-11-10 03:08 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2015-09-14 17:01 - 2014-11-10 02:57 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2015-09-14 17:01 - 2014-11-08 06:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys 2015-09-14 17:01 - 2014-11-08 05:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys 2015-09-14 17:01 - 2014-11-08 05:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp 2015-09-14 17:01 - 2014-11-08 05:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll 2015-09-14 17:01 - 2014-11-08 05:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll 2015-09-14 17:01 - 2014-11-08 05:24 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll 2015-09-14 17:01 - 2014-11-08 05:13 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp 2015-09-14 17:01 - 2014-11-08 05:13 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll 2015-09-14 17:01 - 2014-11-08 05:13 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll 2015-09-14 17:01 - 2014-11-08 04:48 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll 2015-09-14 17:01 - 2014-11-08 04:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2015-09-14 17:01 - 2014-11-08 04:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2015-09-14 17:01 - 2014-11-08 04:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2015-09-14 17:01 - 2014-11-08 03:49 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2015-09-14 17:01 - 2014-11-07 05:58 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2015-09-14 17:01 - 2014-11-07 05:20 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2015-09-14 17:01 - 2014-11-05 04:12 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL 2015-09-14 17:01 - 2014-11-05 04:12 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL 2015-09-14 17:01 - 2014-11-05 04:06 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2015-09-14 17:01 - 2014-11-05 03:44 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2015-09-14 17:01 - 2014-11-05 03:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2015-09-14 17:01 - 2014-11-05 03:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2015-09-14 17:01 - 2014-11-05 03:39 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL 2015-09-14 17:01 - 2014-11-05 03:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL 2015-09-14 17:01 - 2014-11-05 03:33 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2015-09-14 17:01 - 2014-11-05 03:21 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2015-09-14 17:01 - 2014-11-05 03:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2015-09-14 17:01 - 2014-11-05 03:18 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2015-09-14 17:01 - 2014-11-05 03:14 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2015-09-14 17:01 - 2014-11-05 03:06 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2015-09-14 17:01 - 2014-11-04 21:33 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2015-09-14 17:01 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys 2015-09-14 17:01 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2015-09-14 17:01 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys 2015-09-14 17:01 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2015-09-14 17:01 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2015-09-14 17:01 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2015-09-14 17:01 - 2014-11-04 08:27 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2015-09-14 17:01 - 2014-11-04 07:01 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2015-09-14 17:01 - 2014-10-31 01:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2015-09-14 17:01 - 2014-10-31 01:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2015-09-14 17:01 - 2014-10-29 05:05 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2015-09-14 17:01 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll 2015-09-14 17:01 - 2014-10-29 03:55 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2015-09-14 17:01 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll 2015-09-14 17:01 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll 2015-09-14 17:01 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe 2015-09-14 17:01 - 2014-10-29 03:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2015-09-14 17:01 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe 2015-09-14 17:01 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe 2015-09-14 17:01 - 2014-10-21 03:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll 2015-09-14 17:01 - 2014-10-21 03:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll 2015-09-14 17:01 - 2014-10-21 02:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll 2015-09-14 17:01 - 2014-10-21 02:31 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll 2015-09-14 17:01 - 2014-10-21 02:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll 2015-09-14 17:01 - 2014-10-21 02:30 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2015-09-14 17:01 - 2014-10-21 02:20 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll 2015-09-14 17:01 - 2014-10-17 06:56 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2015-09-14 17:01 - 2014-10-17 05:35 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2015-09-14 16:19 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2015-09-14 16:17 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2015-09-14 16:17 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2015-09-14 16:17 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe 2015-09-14 16:17 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe 2015-09-14 16:17 - 2014-11-10 04:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll 2015-09-14 16:17 - 2014-11-10 03:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll 2015-09-14 16:16 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-09-14 16:16 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-09-14 16:16 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-09-14 16:16 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-09-14 16:16 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-09-14 16:16 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-09-14 16:16 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-09-14 16:16 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-09-14 16:16 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-09-14 16:16 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-09-14 16:16 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-09-14 16:16 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-09-14 16:16 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2015-09-14 16:16 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2015-09-14 16:16 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2015-09-14 16:16 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2015-09-14 16:16 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2015-09-14 16:16 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2015-09-14 16:16 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2015-09-14 16:16 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll 2015-09-14 16:16 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll 2015-09-14 16:16 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2015-09-14 16:16 - 2014-12-09 05:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll 2015-09-14 16:16 - 2014-12-09 03:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll 2015-09-14 16:16 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2015-09-14 16:16 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2015-09-14 16:15 - 2015-08-05 16:14 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys 2015-09-14 16:15 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll 2015-09-14 16:15 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll 2015-09-14 16:15 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll 2015-09-14 16:15 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2015-09-14 16:15 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2015-09-14 16:15 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2015-09-14 16:15 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2015-09-14 16:15 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2015-09-14 16:15 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2015-09-14 16:15 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-09-14 16:15 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-09-14 16:15 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-09-14 16:15 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-09-14 16:15 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-09-14 16:15 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-09-14 16:15 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-09-14 16:15 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-09-14 16:15 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-09-14 16:15 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2015-09-14 16:15 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2015-09-14 16:15 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2015-09-14 16:15 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2015-09-14 16:15 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2015-09-14 16:15 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2015-09-14 16:15 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2015-09-14 16:15 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-09-14 16:15 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys 2015-09-14 16:15 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-09-14 16:15 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-09-14 16:15 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2015-09-14 16:15 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2015-09-14 16:15 - 2015-01-30 05:01 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys 2015-09-14 16:15 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll 2015-09-14 16:15 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll 2015-09-14 16:15 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2015-09-14 16:15 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2015-09-14 16:14 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2015-09-14 16:14 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2015-09-14 16:14 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2015-09-14 16:14 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2015-09-14 16:14 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2015-09-14 16:14 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-09-14 16:14 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-09-14 16:14 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2015-09-14 16:14 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-09-14 16:14 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-09-14 16:14 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-09-14 16:14 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2015-09-14 16:14 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-09-14 16:14 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-09-14 16:14 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-09-14 16:14 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-09-14 16:14 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-09-14 16:14 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-09-14 16:14 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-09-14 16:14 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2015-09-14 16:14 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-09-14 16:14 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-09-14 16:14 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2015-09-14 16:14 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2015-09-14 16:14 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll 2015-09-14 16:14 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll 2015-09-14 16:14 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll 2015-09-14 16:14 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-09-14 16:14 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2015-09-14 16:14 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe 2015-09-14 16:14 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2015-09-14 16:14 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2015-09-14 16:14 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2015-09-14 16:13 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-09-14 16:13 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-09-14 16:13 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-09-14 16:13 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-09-14 16:13 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-09-14 16:13 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-09-14 16:13 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-09-14 16:13 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-09-14 16:13 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-09-14 16:13 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-09-14 16:13 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-09-14 16:13 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-09-14 16:13 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-09-14 16:13 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-09-14 16:13 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-09-14 16:13 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-09-14 16:13 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-09-14 16:13 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-09-14 16:13 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-09-14 16:13 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-09-14 16:13 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-09-14 16:13 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-09-14 16:13 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-09-14 16:13 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-09-14 16:13 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-09-14 16:13 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-09-14 16:13 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-09-14 16:13 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-09-14 16:13 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-09-14 16:13 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2015-09-14 16:13 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-09-14 16:13 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-09-14 16:13 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2015-09-14 16:13 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-09-14 16:13 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-09-14 16:13 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-09-14 16:13 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-09-14 16:13 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2015-09-14 16:13 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2015-09-14 16:13 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-09-14 16:13 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-09-14 16:13 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-09-14 16:13 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2015-09-14 16:13 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2015-09-14 16:13 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-09-14 16:13 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-09-14 16:13 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-09-14 16:13 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2015-09-14 16:13 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2015-09-14 16:13 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2015-09-14 16:13 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2015-09-14 16:13 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2015-09-14 16:12 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll 2015-09-14 16:12 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2015-09-14 16:12 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll 2015-09-14 16:12 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2015-09-14 16:12 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2015-09-14 16:12 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2015-09-14 16:12 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe 2015-09-14 16:12 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe 2015-09-14 16:12 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2015-09-14 16:12 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2015-09-14 16:09 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2015-09-14 16:09 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2015-09-14 16:09 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-09-14 16:09 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2015-09-14 16:09 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-09-14 16:09 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2015-09-14 16:09 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-09-14 16:09 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-09-14 16:09 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2015-09-14 16:09 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-09-14 16:09 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2015-09-14 16:09 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll 2015-09-14 16:09 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2015-09-14 16:09 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll 2015-09-14 16:09 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2015-09-14 16:09 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2015-09-14 16:09 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2015-09-14 16:09 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2015-09-14 16:09 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-09-14 16:09 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-09-14 16:09 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2015-09-14 16:09 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2015-09-14 16:09 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2015-09-14 16:09 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-09-14 16:09 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-09-14 16:09 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2015-09-14 16:09 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2015-09-14 16:09 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-09-14 16:09 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2015-09-14 16:09 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2015-09-14 16:09 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2015-09-14 16:09 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2015-09-14 16:08 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-09-14 16:08 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-09-14 16:08 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-09-14 16:08 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-09-14 16:08 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-09-14 16:08 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll 2015-09-14 16:08 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll 2015-09-14 16:08 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2015-09-14 16:08 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2015-09-14 16:08 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll 2015-09-14 16:08 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll 2015-09-14 16:08 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll 2015-09-14 16:08 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll 2015-09-14 16:08 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll 2015-09-14 16:08 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll 2015-09-14 16:08 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll 2015-09-14 15:59 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2015-09-14 15:59 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll 2015-09-14 15:59 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll 2015-09-14 15:59 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll 2015-09-14 15:59 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2015-09-14 15:59 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2015-09-14 15:59 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2015-09-14 15:59 - 2015-03-09 04:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys 2015-09-14 15:59 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2015-09-14 15:58 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe 2015-09-14 15:58 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe 2015-09-14 15:58 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2015-09-14 15:58 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe 2015-09-14 15:58 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe 2015-09-14 15:58 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2015-09-14 15:58 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2015-09-14 15:58 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2015-09-14 15:58 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-09-14 15:58 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2015-09-14 15:58 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2015-09-14 15:58 - 2015-07-13 21:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml 2015-09-14 15:58 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2015-09-14 15:58 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2015-09-14 15:58 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2015-09-14 15:58 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2015-09-14 15:58 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2015-09-14 15:58 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2015-09-14 15:58 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2015-09-14 15:58 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-09-14 15:58 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2015-09-14 15:58 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2015-09-14 15:58 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2015-09-14 15:58 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2015-09-14 15:58 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2015-09-14 15:58 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-09-14 15:58 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls 2015-09-14 15:58 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2015-09-14 15:58 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2015-09-14 15:58 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-09-14 15:58 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-09-14 15:58 - 2015-04-16 08:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2015-09-14 15:58 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-09-14 15:58 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-09-14 15:58 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2015-09-14 15:58 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2015-09-14 15:58 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll 2015-09-14 15:58 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2015-09-14 15:58 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2015-09-14 15:58 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2015-09-14 15:58 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2015-09-14 15:58 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2015-09-14 15:58 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2015-09-14 15:58 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2015-09-14 15:58 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2015-09-14 15:58 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2015-09-14 15:58 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2015-09-14 15:58 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2015-09-14 15:58 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2015-09-14 15:58 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2015-09-14 15:58 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll 2015-09-14 15:58 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll 2015-09-14 15:58 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2015-09-14 15:58 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll 2015-09-14 15:58 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll 2015-09-14 15:58 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2015-09-14 15:58 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2015-09-14 15:58 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2015-09-14 15:58 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2015-09-14 15:58 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2015-09-14 15:58 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2015-09-14 15:57 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll 2015-09-14 15:57 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll 2015-09-14 15:57 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll 2015-09-14 15:57 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe 2015-09-14 15:57 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-09-14 15:57 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-09-14 15:57 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2015-09-14 15:57 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2015-09-14 15:57 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-09-14 15:57 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2015-09-14 15:56 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2015-09-14 15:56 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2015-09-14 15:56 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2015-09-14 15:56 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2015-09-14 15:56 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2015-09-14 15:56 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2015-09-14 15:56 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2015-09-14 15:56 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2015-09-14 15:56 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe 2015-09-14 15:56 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2015-09-14 15:56 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2015-09-14 15:54 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2015-09-14 15:50 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-09-14 15:42 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-09-14 15:42 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2015-09-14 15:28 - 2015-09-19 13:37 - 00001106 _____ C:\Users\Marvin\Desktop\MEGAsync.lnk 2015-09-14 15:28 - 2015-09-14 16:03 - 00000000 ___DC C:\WINDOWS\Panther |
|
24.09.2015, 14:14
| #18 |
| | Chrome Erweiterung nicht löschbar FRST Teil 2:
__________________Code:
ATTFilter 2015-09-14 15:28 - 2015-09-14 15:28 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2015-09-14 15:28 - 2015-09-14 15:28 - 00000000 ____D C:\Users\Marvin\AppData\Local\Mega Limited
2015-09-14 15:27 - 2015-09-19 13:37 - 00000000 ____D C:\Users\Marvin\AppData\Local\MEGAsync
2015-09-14 15:20 - 2015-09-24 14:54 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-14 15:20 - 2015-09-14 15:20 - 00000979 _____ C:\Users\Public\Desktop\Steam.lnk
2015-09-14 15:20 - 2015-09-14 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-09-14 15:19 - 2015-09-14 15:19 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-09-14 15:18 - 2015-09-14 15:18 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-09-14 15:18 - 2015-09-14 15:18 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-09-14 15:13 - 2015-09-14 15:13 - 00001454 _____ C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-14 15:13 - 2015-09-14 15:13 - 00000020 ___SH C:\Users\Marvin\ntuser.ini
2015-09-14 15:10 - 2015-09-14 15:16 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-09-14 15:10 - 2015-09-14 15:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-09-14 15:07 - 2015-08-11 04:47 - 02757072 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-09-14 15:07 - 2015-08-11 04:47 - 02414096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-09-14 15:06 - 2015-07-09 20:48 - 00131712 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2015-09-14 15:06 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-09-14 15:06 - 2015-07-09 19:59 - 00112624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe
2015-09-14 15:06 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-09-14 15:06 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-09-14 15:06 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-09-14 15:06 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-09-14 15:06 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-09-14 15:04 - 2015-09-14 15:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-09-14 15:03 - 2015-09-14 15:03 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-09-14 14:55 - 2015-09-14 14:55 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-09-14 14:53 - 2015-09-14 14:53 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-09-14 14:52 - 2015-09-23 21:53 - 00000000 ____D C:\Users\Marvin
2015-09-14 14:52 - 2015-09-14 15:03 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2015-09-14 14:52 - 2015-09-14 15:03 - 00020958 _____ C:\WINDOWS\diagerr.xml
2015-09-14 14:52 - 2015-09-14 14:53 - 00000000 ___RD C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-14 14:52 - 2015-09-14 14:53 - 00000000 ___RD C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Vorlagen
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Startmenü
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Netzwerkumgebung
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Lokale Einstellungen
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Eigene Dateien
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Druckumgebung
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Documents\Eigene Musik
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Documents\Eigene Bilder
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\AppData\Local\Verlauf
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\AppData\Local\Anwendungsdaten
2015-09-14 14:52 - 2015-09-14 14:52 - 00000000 _SHDL C:\Users\Marvin\Anwendungsdaten
2015-09-14 14:52 - 2014-11-21 13:08 - 00000000 ___RD C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-14 14:52 - 2014-11-21 05:42 - 00000369 _____ C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-09-14 14:52 - 2014-11-21 05:42 - 00000369 _____ C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-09-14 14:52 - 2013-08-22 17:36 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-09-14 14:46 - 2015-09-24 14:55 - 01800595 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-14 14:46 - 2015-09-24 14:53 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-14 14:46 - 2015-09-23 17:08 - 00035551 _____ C:\WINDOWS\avmfwlanci.log
2015-09-14 14:46 - 2015-09-19 22:00 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-09-14 14:46 - 2015-09-14 14:54 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-09-14 14:46 - 2015-09-14 14:54 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-09-14 14:46 - 2015-09-14 14:54 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-09-14 14:46 - 2015-09-14 14:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-09-14 14:46 - 2015-09-14 14:46 - 00000000 ____D C:\Program Files\Realtek
2015-09-14 14:46 - 2015-08-25 16:24 - 06884984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-09-14 14:46 - 2015-08-25 16:24 - 03496752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-09-14 14:46 - 2015-08-25 16:24 - 02558584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-09-14 14:46 - 2015-08-25 16:24 - 00937776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-09-14 14:46 - 2015-08-25 16:24 - 00385144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-09-14 14:46 - 2015-08-25 16:24 - 00062584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-09-14 14:46 - 2015-08-25 14:35 - 05165808 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-09-14 14:03 - 2015-09-14 15:03 - 00006517 _____ C:\WINDOWS\comsetup.log
2015-09-14 13:32 - 2015-09-24 14:41 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-14 13:11 - 2015-09-14 13:47 - 00000000 __RHD C:\ESD
2015-09-14 12:18 - 2015-09-15 00:47 - 00000000 ____D C:\Program Files\KMSpico
2015-09-14 12:18 - 2015-09-14 14:55 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2015-09-14 12:18 - 2015-09-14 12:18 - 00004608 _____ C:\WINDOWS\SECOH-QAD.exe
2015-09-14 12:18 - 2015-09-14 12:18 - 00003584 _____ C:\WINDOWS\SECOH-QAD.dll
2015-09-14 12:18 - 2015-09-14 12:18 - 00000000 ____D C:\Program Files\Unlocker
2015-09-13 22:06 - 2015-07-05 12:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-09-13 22:03 - 2014-08-08 18:31 - 00027136 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\ptun0901.sys
2015-09-13 22:03 - 2014-05-25 02:36 - 00015360 _____ C:\WINDOWS\system32\SppExtComObjHook.dll
2015-09-13 22:03 - 2014-05-25 02:36 - 00004608 _____ C:\WINDOWS\system32\SppExtComObjPatcher.exe
2015-09-13 22:02 - 2015-09-14 12:11 - 00000000 ____D C:\Users\Marvin\AppData\Local\MSfree Inc
2015-09-13 21:52 - 2015-09-19 00:08 - 00011353 _____ C:\WINDOWS\AVMInstall.Log
2015-09-13 21:52 - 2015-09-19 00:08 - 00000000 ____D C:\Program Files (x86)\avmwlanstick
2015-09-13 21:52 - 2015-09-14 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-09-13 21:52 - 2015-09-13 21:52 - 00002077 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-09-13 21:52 - 2015-09-13 21:52 - 00000000 ____D C:\WINDOWS\AVM_Driver
2015-09-13 21:52 - 2015-09-13 21:52 - 00000000 ____D C:\Users\Marvin\AVM_Driver
2015-09-13 20:51 - 2015-09-13 20:53 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-13 20:51 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-09-13 20:31 - 2015-09-13 20:41 - 00003172 _____ C:\WINDOWS\wsusofflineupdate.log
2015-09-13 20:20 - 2015-09-13 20:20 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2015-09-13 20:19 - 2015-09-14 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-09-13 20:19 - 2015-09-13 20:19 - 00000000 ____D C:\Program Files\7-Zip
2015-09-13 20:03 - 2015-08-25 16:08 - 00574072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-09-13 20:03 - 2015-05-15 19:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-09-13 20:03 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-09-13 20:03 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-09-13 20:03 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-09-13 20:03 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-09-13 20:03 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-09-13 20:02 - 2015-06-17 14:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-09-13 20:02 - 2015-05-25 15:18 - 03195416 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-09-13 20:02 - 2014-11-11 13:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-09-13 20:02 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-09-13 20:02 - 2014-01-08 15:25 - 00397592 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2015-09-13 20:02 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-09-13 20:02 - 2012-06-08 16:21 - 00897152 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO64.dll
2015-09-13 20:02 - 2012-06-08 16:21 - 00753280 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO32.dll
2015-09-13 20:02 - 2011-12-16 14:57 - 00065112 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBppld64.dll
2015-09-13 20:02 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-09-13 20:02 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-09-13 20:02 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-09-13 20:02 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBPPCn64.dll
2015-09-13 20:01 - 2015-09-23 20:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-13 20:01 - 2015-09-13 20:04 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-09-13 20:01 - 2015-09-13 20:01 - 00000000 ____D C:\Program Files (x86)\Realtek
2015-09-13 20:01 - 2015-05-27 17:38 - 02825944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2015-09-13 20:01 - 2014-06-09 10:59 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-09-13 20:01 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 42840368 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 37819184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 22525560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 18543736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 17082392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 16637336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 15512888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 14936264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 14635792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 13661160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 12515016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 12185152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 11089200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-09-13 19:54 - 2015-08-25 20:46 - 03527696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 03112904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 02940720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 02627704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 01898288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435582.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 01558648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435582.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 01106672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 01075320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 01064752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00986232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00945456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00944736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00879000 _____ C:\WINDOWS\system32\nvmcumd.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00155792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00150832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-09-13 19:54 - 2015-08-25 20:46 - 00033025 _____ C:\WINDOWS\system32\nvinfo.pb
2015-09-13 19:46 - 2015-09-14 23:45 - 00000000 ____D C:\Users\Marvin\AppData\Local\NVIDIA Corporation
2015-09-13 19:45 - 2015-09-13 19:46 - 00000000 ____D C:\Users\Marvin\AppData\Local\NVIDIA
2015-09-13 19:45 - 2015-09-13 19:45 - 00001397 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-09-13 19:45 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-09-13 19:45 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-09-13 19:44 - 2015-09-14 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-09-13 19:44 - 2015-08-27 02:37 - 01423120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-09-13 19:44 - 2015-08-27 02:37 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-09-13 19:44 - 2015-08-27 02:36 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-09-13 19:44 - 2015-08-27 02:36 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-09-13 19:44 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2015-09-13 19:44 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2015-09-13 19:44 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2015-09-13 19:44 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2015-09-13 19:43 - 2015-08-11 06:52 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-09-13 19:43 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-09-13 19:43 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-09-13 19:40 - 2015-09-14 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-09-13 19:40 - 2015-09-13 19:40 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-09-13 19:40 - 2015-09-13 19:40 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Sun
2015-09-13 19:40 - 2015-09-13 19:40 - 00000000 ____D C:\Users\Marvin\.oracle_jre_usage
2015-09-13 19:39 - 2015-09-13 19:39 - 00000000 ____D C:\ProgramData\Oracle
2015-09-13 19:39 - 2015-09-13 19:39 - 00000000 ____D C:\Program Files (x86)\Java
2015-09-13 19:36 - 2015-09-24 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRWare Iron (64-Bit)
2015-09-13 19:36 - 2015-09-13 19:36 - 00000000 ____D C:\Users\Marvin\AppData\Local\Chromium
2015-09-13 19:35 - 2015-09-24 14:58 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2840623005-2840827860-1408477528-1001
2015-09-13 19:34 - 2015-08-25 20:46 - 00112760 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-09-13 19:34 - 2015-08-25 20:46 - 00105264 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-09-13 19:32 - 2015-09-14 12:10 - 00000000 __SHD C:\Users\Marvin\AppData\Local\EmieUserList
2015-09-13 19:32 - 2015-09-14 12:10 - 00000000 __SHD C:\Users\Marvin\AppData\Local\EmieSiteList
2015-09-13 19:32 - 2015-09-13 19:32 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Macromedia
2015-09-13 19:30 - 2015-09-24 14:55 - 00000000 __RDO C:\Users\Marvin\OneDrive
2015-09-13 19:23 - 2015-09-13 19:25 - 00000000 ____D C:\Users\Marvin\AppData\Local\PackageStaging
2015-09-13 19:22 - 2015-09-19 19:23 - 00000000 ____D C:\Users\Marvin\AppData\Local\VirtualStore
2015-09-13 19:22 - 2015-09-15 15:19 - 00000000 ____D C:\Users\Marvin\AppData\Local\Packages
2015-09-13 19:22 - 2015-09-13 19:22 - 00000000 ____D C:\Users\Marvin\AppData\Roaming\Adobe
2015-09-13 19:14 - 2015-09-13 19:14 - 00000000 ____D C:\WINDOWS\CSC
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-09-13 19:12 - 2015-09-13 19:12 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-09-13 19:11 - 2015-09-14 14:08 - 01362974 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-09-13 18:51 - 2013-06-18 14:18 - 00000001 ___SH C:\BOOTNXT
2015-09-13 15:34 - 2009-09-16 08:02 - 00031232 _____ (Tunngle.net) C:\WINDOWS\system32\Drivers\tap0901t.sys
2015-09-08 11:47 - 2015-09-08 11:47 - 00146072 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetLwf.sys
2015-09-08 11:47 - 2015-09-08 11:47 - 00117768 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetAdp6.sys
2015-09-07 00:17 - 2015-09-07 00:19 - 00000485 _____ C:\runcheck.txt
2015-09-06 20:34 - 2015-09-06 20:34 - 00000050 _____ C:\link.txt
2015-09-03 15:49 - 2015-09-03 15:49 - 00006624 _____ C:\string2.txt
2015-09-03 15:25 - 2015-09-03 15:28 - 00025086 _____ C:\string.txt
2015-09-02 22:26 - 2015-09-02 22:26 - 00469776 _____ (Microsoft Corporation) C:\WINDOWS\system32\coin98ip.dll
2015-08-29 22:03 - 2015-08-29 22:03 - 00000000 ____D C:\temp
2015-08-29 18:00 - 2015-09-13 09:46 - 00001732 _____ C:\DelFix.txt
2015-08-29 14:45 - 2015-08-29 14:45 - 00000000 ____D C:\bac57828cacb877bcfa142
2015-08-29 10:05 - 2015-08-29 10:05 - 00483828 __RSH C:\AQXOR
2015-08-29 01:31 - 2015-08-29 01:31 - 00000000 ____D C:\3b813b75af923fb313a60f6c
2015-08-29 00:28 - 2015-08-29 00:28 - 00000000 ____D C:\d8b1eeb0dada346ebb
2015-08-28 21:39 - 2015-09-14 14:06 - 00008192 __RSH C:\BOOTSECT.BAK
2015-08-28 21:39 - 2014-11-21 06:05 - 00404250 __RSH C:\bootmgr
2015-08-28 20:48 - 2014-03-27 01:00 - 01327744 _____ (AVM GmbH) C:\WINDOWS\system32\Drivers\fwlanusb6.sys
2015-08-28 20:48 - 2014-03-27 01:00 - 00104448 _____ (AVM Berlin) C:\WINDOWS\system32\fwlan6ci.dll
2015-08-28 20:48 - 2014-03-27 01:00 - 00080360 _____ C:\WINDOWS\system32\Drivers\fwlanusb6.bin
2015-08-28 20:45 - 2015-09-14 14:49 - 00000000 ____D C:\Recovery
2015-08-28 20:45 - 2015-08-28 20:45 - 00000000 _SHDL C:\Programme
2015-08-28 20:45 - 2015-08-28 20:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-08-28 14:36 - 2015-06-12 04:00 - 00197616 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-09-24 15:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-24 14:53 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-24 14:52 - 2014-11-20 20:24 - 00059762 _____ C:\WINDOWS\PFRO.log
2015-09-24 14:52 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-24 14:35 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-09-22 21:39 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-09-22 15:05 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-21 19:37 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2015-09-21 17:08 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-09-21 16:04 - 2013-08-22 16:44 - 00341208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-21 15:23 - 2014-11-21 04:45 - 00774650 _____ C:\WINDOWS\system32\perfh007.dat
2015-09-21 15:23 - 2014-11-21 04:45 - 00163872 _____ C:\WINDOWS\system32\perfc007.dat
2015-09-21 15:23 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Registration
2015-09-21 15:17 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-21 09:09 - 2014-11-21 05:35 - 01776922 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-20 13:59 - 2014-11-21 06:06 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2015-09-20 13:59 - 2014-11-21 06:06 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2015-09-20 13:59 - 2014-11-21 06:06 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2015-09-20 13:59 - 2014-11-21 06:06 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2015-09-20 13:59 - 2013-08-22 13:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-09-20 13:59 - 2013-08-22 13:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2015-09-20 13:59 - 2013-08-22 13:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2015-09-20 13:59 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2015-09-20 13:59 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2015-09-20 13:59 - 2013-08-22 05:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2015-09-20 13:59 - 2013-08-22 05:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2015-09-20 13:59 - 2013-08-22 05:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2015-09-20 13:59 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2015-09-20 13:59 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2015-09-20 10:35 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\TAPI
2015-09-19 13:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\schemas
2015-09-19 00:33 - 2014-11-21 06:06 - 06287360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe
2015-09-19 00:33 - 2014-11-21 06:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdvGpuInfo.dll
2015-09-19 00:33 - 2014-11-21 06:04 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wnv.sys
2015-09-19 00:33 - 2014-11-21 06:04 - 00421376 _____ (Microsoft Corporation) C:\WINDOWS\system32\synthnic.dll
2015-09-19 00:33 - 2014-11-21 06:04 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsconfig.dll
2015-09-19 00:33 - 2014-11-21 06:04 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmulatedNic.dll
2015-09-19 00:33 - 2014-11-21 06:04 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wnvapi.dll
2015-09-19 00:33 - 2014-11-21 05:43 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\synthstor.dll
2015-09-19 00:33 - 2014-11-21 05:42 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\synthfcvdev.dll
2015-09-19 00:33 - 2014-11-21 05:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pvhdparser.sys
2015-09-19 00:33 - 2014-11-21 05:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdparser.sys
2015-09-19 00:33 - 2013-08-22 13:48 - 00014688 _____ C:\WINDOWS\system32\sbresources.dll
2015-09-19 00:33 - 2013-08-22 13:46 - 01466522 _____ C:\WINDOWS\system32\WindowsVirtualization.V2.mof
2015-09-19 00:33 - 2013-08-22 13:39 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\passthruparser.sys
2015-09-19 00:33 - 2013-08-22 13:39 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lunparser.sys
2015-09-19 00:33 - 2013-08-22 13:38 - 00039739 _____ C:\WINDOWS\system32\hypervisor.mof
2015-09-19 00:33 - 2013-08-22 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\HyperVSysprepProvider.dll
2015-09-19 00:33 - 2013-08-22 12:35 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteFileBrowse.dll
2015-09-19 00:33 - 2013-08-22 11:53 - 00033280 _____ C:\WINDOWS\system32\ActivationVdev.dll
2015-09-19 00:33 - 2013-08-22 11:39 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbusvdev.dll
2015-09-19 00:33 - 2013-08-22 11:38 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmprox.dll
2015-09-19 00:33 - 2013-08-22 11:38 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwpctrl.dll
2015-09-19 00:33 - 2013-08-22 11:19 - 02159616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdp4vs.dll
2015-09-19 00:33 - 2013-08-22 10:25 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmconnect.exe
2015-09-19 00:33 - 2013-08-22 09:35 - 00144967 _____ C:\WINDOWS\system32\virtmgmt.msc
2015-09-19 00:09 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-16 00:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-14 20:33 - 2014-11-21 05:13 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-09-14 20:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-09-14 20:32 - 2014-11-21 13:07 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\setup
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-09-14 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-09-14 15:28 - 2013-08-22 17:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-09-14 15:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-09-14 15:07 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\restore
2015-09-14 15:07 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-09-14 15:04 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT
2015-09-14 15:04 - 2013-08-22 15:36 - 00000000 __RHD C:\Users\Default
2015-09-14 15:01 - 2013-08-22 17:36 - 00000000 __RSD C:\WINDOWS\Media
2015-09-14 15:00 - 2013-08-22 17:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-09-14 14:55 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-09-14 14:55 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-09-14 14:55 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-09-14 14:55 - 2014-03-18 11:37 - 00000000 ____D C:\WINDOWS\system32\wlms
2015-09-14 14:55 - 2013-08-22 17:37 - 00005217 _____ C:\WINDOWS\DtcInstall.log
2015-09-14 14:55 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\spool
2015-09-14 14:55 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-09-14 14:54 - 2013-08-22 17:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\InputMethod
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\IME
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Help
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\FileManager
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-09-14 14:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\WindowsPowerShell
2015-09-14 14:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-09-14 14:49 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-25 20:46 - 2015-08-11 01:08 - 01567576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SET87CE.tmp
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-09-21 17:23 - 2015-09-21 17:23 - 0000094 _____ () C:\Users\Marvin\AppData\Local\fusioncache.dat
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\wininit.exe FEHLT <==== ACHTUNG
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-09-24 13:21
==================== Ende von FRST.txt ============================
Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:23-09-2015
durchgeführt von Marvin (2015-09-24 15:07:58)
Gestartet von C:\Users\Marvin\Desktop
Windows 7 Ultimate (X64) (2015-09-14 13:12:24)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2840623005-2840827860-1408477528-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2840623005-2840827860-1408477528-1006 - Limited - Enabled)
Gast (S-1-5-21-2840623005-2840827860-1408477528-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2840623005-2840827860-1408477528-1005 - Limited - Enabled)
Marvin (S-1-5-21-2840623005-2840827860-1408477528-1001 - Administrator - Enabled) => C:\Users\Marvin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
aerosoft's - OMSI 2 - Stadtbus O305 (HKLM-x32\...\{AE36259F-2F4F-44FA-87B7-3D1792ADDCA2}) (Version: 1.10 - aerosoft)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
Battlefield 1942: Secret Weapons of WWII (HKLM-x32\...\{B73B4A99-4173-4747-BBEC-0F05E966F9D2}) (Version: - )
Battlefield 1942: The Road To Rome (HKLM-x32\...\{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}) (Version: - )
Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version: - )
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Browser 7 der Telekom 39.0.15 (x86 de) (HKLM-x32\...\Browser 7 der Telekom 39.0.15 (x86 de)) (Version: 39.0.15 - Deutsche Telekom AG)
Browser 7 Maintenance Service (HKLM-x32\...\Browser7MaintenanceService) (Version: 39.0.15 - Deutsche Telekom AG)
BVG Kubus Serie v.2.0 (HKLM-x32\...\BVG Kubus Serie v.2.0) (Version: 2.0 - CJayDesign)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Crysis(R) (HKLM-x32\...\{000E79B7-E725-4F01-870A-C12942B7F8E4}) (Version: 1.00.0000 - Electronic Arts)
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DesertCombat 0.7 (HKLM-x32\...\DesertCombat) (Version: - )
Dr. Hardware 2014 14.5d (HKLM-x32\...\Dr. Hardware 2014_is1) (Version: - Peter A. Gebhard)
Driver Booster 2.4 (HKLM-x32\...\Driver Booster_is1) (Version: 2.4 - IObit)
f.lux (HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\Flux) (Version: - )
FileHippo App Manager (HKLM-x32\...\FileHippo.com) (Version: - FileHippo.com)
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Genymotion version 2.5.4 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.5.4 - Genymobile)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.0.3.171 - IObit)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.5.166.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version: - MR-Software GbR)
OMSI Addon Manager Version 1.2.3 (HKLM-x32\...\{32B08666-1587-435D-988C-7958A04B218A}_is1) (Version: 1.2.3 - Jan Kiesewalter)
Oracle VM VirtualBox 5.0.4 (HKLM\...\{FC191F32-1A67-4231-91D0-0059A57C99A8}) (Version: 5.0.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.8.3.59237 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.18 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27405 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
Sandboxie 4.20 (64-bit) (HKLM\...\Sandboxie) (Version: 4.20 - Sandboxie Holdings, LLC)
SeaTools for Windows 1.4.0.2 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.2 - Seagate Technology)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SRWare Iron (64-Bit) Version SRWare Iron 45.2400.0 (HKLM\...\{BA85A29D-B48E-4826-BAEE-817024E52E29}_is1) (Version: SRWare Iron 45.2400.0 - SRWare)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Tunngle (HKLM-x32\...\Tunngle_is1) (Version: 5.5 - Tunngle.net GmbH)
TweakMe! (HKLM-x32\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.3.0.0 - pXc-coding.com)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Venice Unleashed (HKLM-x32\...\{71644805-C0D7-486D-B129-415738F0A0A4}) (Version: 1.0.0.0 - Emulator Nexus)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
18-09-2015 21:57:46 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
19-09-2015 21:56:58 Driver Booster : Microsoft Visual C++ 2012 Redistributable (x86)
21-09-2015 14:53:11 Microsoft Visual C++ 2005 Redistributable wird installiert
22-09-2015 17:04:13 JRT Pre-Junkware Removal
23-09-2015 20:19:06 Installiert Battlefield 2(TM)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2015-09-22 22:41 - 00006224 ____A C:\WINDOWS\system32\Drivers\etc\hosts
65.112.87.186 armedass.available.gamespy.com
65.112.87.186 armedass.ms12.gamespy.com
65.112.87.186 armedass.master.gamespy.com
65.112.87.186 battlefield2.available.gamespy.com
65.112.87.186 battlefield2.master.gamespy.com
65.112.87.186 battlefield2.ms14.gamespy.com
63.239.170.53 bf2web.gamespy.com
65.112.87.186 bfvietnam.available.gamespy.com
65.112.87.186 bfvietnam.master.gamespy.com
65.112.87.186 bfvietnam.ms0.gamespy.com
65.112.87.186 bderlandspc.available.gamespy.com
65.112.87.186 bderlandspc.master.gamespy.com
65.112.87.186 bderlandspc.ms18.gamespy.com
65.112.87.186 crysis.available.gamespy.com
65.112.87.186 crysis.master.gamespy.com
65.112.87.186 crysis.ms5.gamespy.com
65.112.87.186 crysiswars.available.gamespy.com
65.112.87.186 crysiswars.master.gamespy.com
65.112.87.186 crysiswars.ms2.gamespy.com
65.112.87.186 gotcha.available.gamespy.com
65.112.87.186 gotcha.ms10.gamespy.com
65.112.87.186 gotcha.master.gamespy.com
65.112.87.188 gamestats.gamespy.com
65.112.87.186 gpcm.gamespy.com
65.112.87.186 gpsp.gamespy.com
65.112.87.186 key.gamespy.com
65.112.87.186 master.gamespy.com
65.112.87.186 master0.gamespy.com
63.239.170.9 natneg1.gamespy.com
63.239.170.10 natneg2.gamespy.com
63.144.111.199 natneg3.gamespy.com
65.112.87.186 halor.available.gamespy.com
65.112.87.186 halor.master.gamespy.com
65.112.87.186 halor.ms6.gamespy.com
65.112.87.186 hd2.available.gamespy.com
65.112.87.186 hd2.master.gamespy.com
65.112.87.186 hd2.ms14.gamespy.com
63.239.170.53 motd.gamespy.com
65.112.87.186 nwn.available.gamespy.com
65.112.87.186 nwn.master.gamespy.com
65.112.87.187 chat.gamespynetwork.com
65.112.87.187 peerchat.gamespy.com
65.112.87.186 painkiller.available.gamespy.com
65.112.87.186 painkiller.ms15.gamespy.com
65.112.87.186 painkiller.master.gamespy.com
65.112.87.186 racedriver3pc.available.gamespy.com
65.112.87.186 racedriver3pc.master.gamespy.com
65.112.87.186 racedriver3pc.ms17.gamespy.com
65.112.87.186 swbfront2pc.available.gamespy.com
65.112.87.186 swbfront2pc.master.gamespy.com
65.112.87.186 swbfront2pc.ms6.gamespy.com
65.112.87.186 titanquest.available.gamespy.com
65.112.87.186 titanquest.master.gamespy.com
65.112.87.186 titanquest.ms18.gamespy.com
65.112.87.186 tribesv.ms15.gamespy.com
65.112.87.186 tribesv.master.gamespy.com
65.112.87.186 tribesv.available.gamespy.com
65.112.87.186 tron20.master.gamespy.com
65.112.87.186 tron20.ms9.gamespy.com
65.112.87.186 vietcong2.available.gamespy.com
65.112.87.186 vietcong2.master.gamespy.com
65.112.87.186 vietcong2.ms1.gamespy.com
65.112.87.186 wolfmaster.idsoftware.com65.112.87.186 armedass.available.gamespy.com
65.112.87.186 armedass.ms12.gamespy.com
65.112.87.186 armedass.master.gamespy.com
65.112.87.186 battlefield2.available.gamespy.com
65.112.87.186 battlefield2.master.gamespy.com
65.112.87.186 battlefield2.ms14.gamespy.com
63.239.170.53 bf2web.gamespy.com
65.112.87.186 bfvietnam.available.gamespy.com
65.112.87.186 bfvietnam.master.gamespy.com
65.112.87.186 bfvietnam.ms0.gamespy.com
65.112.87.186 bderlandspc.available.gamespy.com
65.112.87.186 bderlandspc.master.gamespy.com
65.112.87.186 bderlandspc.ms18.gamespy.com
65.112.87.186 crysis.available.gamespy.com
65.112.87.186 crysis.master.gamespy.com
65.112.87.186 crysis.ms5.gamespy.com
65.112.87.186 crysiswars.available.gamespy.com
65.112.87.186 crysiswars.master.gamespy.com
65.112.87.186 crysiswars.ms2.gamespy.com
65.112.87.186 gotcha.available.gamespy.com
65.112.87.186 gotcha.ms10.gamespy.com
65.112.87.186 gotcha.master.gamespy.com
65.112.87.188 gamestats.gamespy.com
65.112.87.186 gpcm.gamespy.com
65.112.87.186 gpsp.gamespy.com
65.112.87.186 key.gamespy.com
65.112.87.186 master.gamespy.com
65.112.87.186 master0.gamespy.com
63.239.170.9 natneg1.gamespy.com
63.239.170.10 natneg2.gamespy.com
63.144.111.199 natneg3.gamespy.com
65.112.87.186 halor.available.gamespy.com
65.112.87.186 halor.master.gamespy.com
65.112.87.186 halor.ms6.gamespy.com
65.112.87.186 hd2.available.gamespy.com
65.112.87.186 hd2.master.gamespy.com
65.112.87.186 hd2.ms14.gamespy.com
63.239.170.53 motd.gamespy.com
65.112.87.186 nwn.available.gamespy.com
65.112.87.186 nwn.master.gamespy.com
65.112.87.187 chat.gamespynetwork.com
65.112.87.187 peerchat.gamespy.com
65.112.87.186 painkiller.available.gamespy.com
65.112.87.186 painkiller.ms15.gamespy.com
65.112.87.186 painkiller.master.gamespy.com
65.112.87.186 racedriver3pc.available.gamespy.com
65.112.87.186 racedriver3pc.master.gamespy.com
65.112.87.186 racedriver3pc.ms17.gamespy.com
65.112.87.186 swbfront2pc.available.gamespy.com
65.112.87.186 swbfront2pc.master.gamespy.com
65.112.87.186 swbfront2pc.ms6.gamespy.com
65.112.87.186 titanquest.available.gamespy.com
65.112.87.186 titanquest.master.gamespy.com
65.112.87.186 titanquest.ms18.gamespy.com
65.112.87.186 tribesv.ms15.gamespy.com
65.112.87.186 tribesv.master.gamespy.com
65.112.87.186 tribesv.available.gamespy.com
65.112.87.186 tron20.master.gamespy.com
65.112.87.186 tron20.ms9.gamespy.com
65.112.87.186 vietcong2.available.gamespy.com
65.112.87.186 vietcong2.master.gamespy.com
65.112.87.186 vietcong2.ms1.gamespy.com
65.112.87.186 wolfmaster.idsoftware.com
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Marvin.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-09-14 14:46 - 2015-08-25 16:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 16:13 - 2014-05-01 16:13 - 00470016 _____ () C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX64.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-09-20 16:32 - 2015-09-21 15:19 - 00066872 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-06-23 21:11 - 2015-06-23 21:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-09-02 13:00 - 2015-09-02 13:00 - 10566352 _____ () C:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe
2015-09-24 13:10 - 2015-08-24 14:10 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2014-05-01 16:15 - 2014-05-01 16:15 - 00463360 _____ () C:\Users\Marvin\AppData\Local\MEGAsync\ShellExtX32.dll
2015-09-13 19:43 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-09-24 13:09 - 2015-08-24 14:10 - 00348960 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2015-09-24 13:09 - 2015-08-24 14:10 - 00183584 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2015-09-24 13:09 - 2015-08-24 14:10 - 00050976 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-09-14 21:58 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-09-14 21:58 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-09-14 21:58 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll
2015-09-14 21:58 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-09-14 21:58 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-09-14 21:57 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-09-14 21:57 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-09-14 21:57 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-09-14 21:57 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-09-14 21:57 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-09-14 21:58 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-09-14 21:57 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-09-14 21:57 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Marvin\OneDrive:ms-properties
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: ) (ConsentPromptBehaviorUser: ) (EnableLUA: )
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\StartupFolder: => "OMSI Addon Manager.lnk"
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\Run: => "MicroUpdate"
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\...\StartupApproved\Run: => "SandboxieControl"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{DC9CD1B2-C92C-4AAC-85F2-14032163DA7C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5FBDF85D-13AA-4CE3-85D1-EAC3A3909890}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E8D6BF8D-E2A8-4C90-AE15-C5C6929AAAEA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9476BB31-DE14-4558-A9B6-E7EC947B9B9F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{374D7C2F-404B-4848-9B60-BA0956431444}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5EB1EB4E-EBE8-4CB3-AD15-58F26AAA6CCB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D2E168F4-1B56-4FBE-A4F0-7E490B396EFB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{39141C7C-D691-446E-B058-B6D664D0D7E2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DEAFD0DC-5B35-4EDE-B6DD-1FFE4C421B05}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1351B65D-2947-4E83-B1E7-C8C82CF89099}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{64216D7B-E850-4EA3-A557-69475865C132}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8342606B-D47E-4C6E-BC8E-443FA8FFFACF}] => (Allow) C:\Program Files (x86)\Deutsche Telekom AG\Browser 7\Browser7.exe
FirewallRules: [{43C11AAF-BC4B-41EA-BF74-B9427C824367}] => (Allow) C:\Program Files (x86)\Deutsche Telekom AG\Browser 7\Browser7.exe
FirewallRules: [{E93E7904-CA1C-4740-A9E7-EE7D19BD25E0}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{66291472-946F-43DD-955D-0C9086B2B7B0}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{FF99C039-1757-4059-8B3A-2F1B824C83D0}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{4109D9A9-049A-47AE-A517-5A931282CA6C}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{B8A8BB6E-8155-4368-B2BA-3D695AB22751}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{35DDF256-FD48-46A0-A316-1BD9F65233CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{627BF49A-0C22-43A6-95B4-8063CEEA5C71}] => (Allow) C:\Users\Marvin\AppData\Roaming\Andy_45_Online\Setup.exe
FirewallRules: [{0C3130C4-7A41-419A-983E-4D0B89DD3E6C}] => (Allow) C:\Users\Marvin\AppData\Roaming\Andy_45_Online\Setup.exe
FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
FirewallRules: [{EBD1EC5B-6428-4A40-8B13-407B83DF9280}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{6B2E21F0-C3A4-4080-A3F8-A54207A522A0}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{243D2C73-2361-4CEF-8B99-B821A4978C5B}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{77C3BB95-8226-464A-9C98-4A39171AC8E1}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [TCP Query User{EE4917DA-4A6F-4FAC-9B07-B3660ACBF891}C:\program files (x86)\java\jre1.8.0_60\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\java.exe
FirewallRules: [UDP Query User{7B019748-D3E8-4AFF-A3C9-F987E32B8F40}C:\program files (x86)\java\jre1.8.0_60\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\java.exe
FirewallRules: [TCP Query User{B800105B-3792-486D-8EB6-0FEEB57296B8}C:\users\marvin\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\marvin\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4A864D16-6458-4C1F-B8FE-AED1CA3FF4AE}C:\users\marvin\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\marvin\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{00F594E7-16EF-48F5-A873-1CE286135456}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{77EFFCE1-3879-4894-9260-BF6B619DAB77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [TCP Query User{A2B5E383-AB92-488E-AC2F-0E5060888A0B}C:\program files (x86)\ea games\battlefield 1942\bf1942.exe] => (Allow) C:\program files (x86)\ea games\battlefield 1942\bf1942.exe
FirewallRules: [UDP Query User{89F933C5-5E36-4F3D-84F0-828312C076BD}C:\program files (x86)\ea games\battlefield 1942\bf1942.exe] => (Allow) C:\program files (x86)\ea games\battlefield 1942\bf1942.exe
FirewallRules: [{F103B3DE-CCFE-49BB-802A-F56B7BB87277}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{32DA6FCD-D1C5-4FC6-AC37-AD76934332CC}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{17333AA8-AAC7-4AAE-AEAC-69BA2D30C16C}D:\games\battlefield 3™\zlobf3launcher.exe] => (Allow) D:\games\battlefield 3™\zlobf3launcher.exe
FirewallRules: [UDP Query User{0AE2EDB1-A781-44B8-93FC-12D472C9C8BD}D:\games\battlefield 3™\zlobf3launcher.exe] => (Allow) D:\games\battlefield 3™\zlobf3launcher.exe
FirewallRules: [TCP Query User{C32C286A-B57C-4B89-B28A-776BDE656388}D:\games\battlefield 3™\launcherserver.exe] => (Allow) D:\games\battlefield 3™\launcherserver.exe
FirewallRules: [UDP Query User{01E9A715-7B0D-4851-8C89-C62BDE8AC80F}D:\games\battlefield 3™\launcherserver.exe] => (Allow) D:\games\battlefield 3™\launcherserver.exe
FirewallRules: [TCP Query User{A3588C5E-5021-4A56-BF0F-63089A3ECCDE}D:\games\battlefield 3™\zlofulllauncher.exe] => (Allow) D:\games\battlefield 3™\zlofulllauncher.exe
FirewallRules: [UDP Query User{FAF0751A-5D89-4F5B-BF33-4CD3C8A2142B}D:\games\battlefield 3™\zlofulllauncher.exe] => (Allow) D:\games\battlefield 3™\zlofulllauncher.exe
FirewallRules: [{1675E2EC-AB82-4D6E-8B4B-43CC6E657E26}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe
FirewallRules: [{A87736E0-67EA-4EC6-BE2F-EB78301A7AD8}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe
FirewallRules: [{386D2FEA-139B-4034-B297-9F034B4B231C}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe
FirewallRules: [{7CCA2D13-0B33-4D6D-A4BF-18C66D5BA04D}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe
FirewallRules: [{D5E89A33-EA13-4315-9FD3-939FD55ED4B8}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe
FirewallRules: [{068FC625-EB7C-4A90-8C63-68B785BB3F18}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe
FirewallRules: [{3A0E9884-2396-448F-9646-87251F5B896F}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe
FirewallRules: [{6772ED51-D9A7-4284-BB08-39C6359BC277}] => (Allow) C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe
FirewallRules: [{2F11093F-6399-463A-BEC5-2C93B7C0861D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EB82FDBB-3C16-404F-B37C-C8BB20182CA5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{41FBF4E7-A107-4AF0-ADE4-61F78F477E42}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8D0B2AE2-199C-4257-ABA5-49FAC4A22783}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{765E1C74-53E5-4F62-961A-CD392D3C2CAD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B01E916B-11AE-4845-A39C-72F450C67356}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F86EE5D7-5E2A-4326-86EB-5D8D6609F852}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0FDD02FF-28F1-49AE-9B6D-CE36E72504C3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{76BC906B-98A9-4AC9-BB23-0C50FA0FBCB3}] => (Allow) C:\Program Files (x86)\EA GAMES\Battlefield 2\BF2.exe
FirewallRules: [{A260F04C-55E3-45E8-9FC2-927D5526E157}] => (Allow) C:\Program Files (x86)\EA GAMES\Battlefield 2\BF2.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/24/2015 02:55:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: skydrive.exe, Version: 6.3.9600.17484, Zeitstempel: 0x545d76bd
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0x00000000
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x108
Startzeit der fehlerhaften Anwendung: 0xskydrive.exe0
Pfad der fehlerhaften Anwendung: skydrive.exe1
Pfad des fehlerhaften Moduls: skydrive.exe2
Berichtskennung: skydrive.exe3
Vollständiger Name des fehlerhaften Pakets: skydrive.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: skydrive.exe5
Error: (09/24/2015 02:54:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: skydrive.exe, Version: 6.3.9600.17484, Zeitstempel: 0x545d76bd
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0x00000000
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1300
Startzeit der fehlerhaften Anwendung: 0xskydrive.exe0
Pfad der fehlerhaften Anwendung: skydrive.exe1
Pfad des fehlerhaften Moduls: skydrive.exe2
Berichtskennung: skydrive.exe3
Vollständiger Name des fehlerhaften Pakets: skydrive.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: skydrive.exe5
Error: (09/24/2015 02:51:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: skydrive.exe, Version: 6.3.9600.17484, Zeitstempel: 0x545d76bd
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0x00000000
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x15f0
Startzeit der fehlerhaften Anwendung: 0xskydrive.exe0
Pfad der fehlerhaften Anwendung: skydrive.exe1
Pfad des fehlerhaften Moduls: skydrive.exe2
Berichtskennung: skydrive.exe3
Vollständiger Name des fehlerhaften Pakets: skydrive.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: skydrive.exe5
Error: (09/24/2015 02:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: skydrive.exe, Version: 6.3.9600.17484, Zeitstempel: 0x545d76bd
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0x00000000
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x574
Startzeit der fehlerhaften Anwendung: 0xskydrive.exe0
Pfad der fehlerhaften Anwendung: skydrive.exe1
Pfad des fehlerhaften Moduls: skydrive.exe2
Berichtskennung: skydrive.exe3
Vollständiger Name des fehlerhaften Pakets: skydrive.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: skydrive.exe5
Error: (09/24/2015 02:44:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_iphlpsvc, Version: 6.3.9600.17415, Zeitstempel: 0x54504177
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.18007, Zeitstempel: 0x55c4c16b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003d86e
ID des fehlerhaften Prozesses: 0x390
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_iphlpsvc0
Pfad der fehlerhaften Anwendung: svchost.exe_iphlpsvc1
Pfad des fehlerhaften Moduls: svchost.exe_iphlpsvc2
Berichtskennung: svchost.exe_iphlpsvc3
Vollständiger Name des fehlerhaften Pakets: svchost.exe_iphlpsvc4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe_iphlpsvc5
Error: (09/24/2015 02:25:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 23.9.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2124
Startzeit: 01d0f6bc9a54f0f0
Endzeit: 4294967295
Anwendungspfad: C:\Users\Marvin\Desktop\FRST64.exe
Berichts-ID: 42980ee2-62b7-11e5-8281-0030678c4569
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (09/23/2015 08:03:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BF1942.exe, Version: 0.0.0.0, Zeitstempel: 0x417564c4
Name des fehlerhaften Moduls: d3d8.dll, Version: 6.3.9600.17415, Zeitstempel: 0x5450488f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00046e48
ID des fehlerhaften Prozesses: 0x15b0
Startzeit der fehlerhaften Anwendung: 0xBF1942.exe0
Pfad der fehlerhaften Anwendung: BF1942.exe1
Pfad des fehlerhaften Moduls: BF1942.exe2
Berichtskennung: BF1942.exe3
Vollständiger Name des fehlerhaften Pakets: BF1942.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BF1942.exe5
Error: (09/23/2015 07:47:49 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: ASP.NET_1.1.4322
Error: (09/23/2015 07:47:49 PM) (Source: Perflib) (EventID: 1021) (User: )
Description: ASP.NET_1.1.43228
Error: (09/23/2015 06:16:39 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 98c
Startzeit: 01d0f61a83020d33
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 73c41b2b-620e-11e5-827c-0030678c4569
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Systemfehler:
=============
Error: (09/24/2015 03:07:18 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 03:04:14 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 03:01:47 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:59:29 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:58:00 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:56:52 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:55:59 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:55:52 PM) (Source: DCOM) (EventID: 10010) (User: MARVIN-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (09/24/2015 02:55:25 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
Error: (09/24/2015 02:54:58 PM) (Source: Schannel) (EventID: 4120) (User: MARVIN-PC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 80. Der Windows-SChannel-Fehlerstatus lautet: 551.
CodeIntegrity:
===================================
Date: 2015-09-24 13:55:11.034
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:54:01.389
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:54:01.030
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:54:00.712
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:54:00.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:53:59.941
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:53:59.549
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:53:59.128
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:53:58.762
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-24 13:53:58.366
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: AMD Athlon(tm) II X2 220 Processor
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 4095.36 MB
Verfügbarer physikalischer RAM: 2271.47 MB
Summe virtueller Speicher: 8447.36 MB
Verfügbarer virtueller Speicher: 5711.07 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:228.34 GB) (Free:103.64 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:237.32 GB) (Free:203.22 GB) NTFS
Drive e: (BF2 DVD) (CDROM) (Total:1.93 GB) (Free:0 GB) UDF
Drive f: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 74400503)
Partition 1: (Not Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.3 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=228.3 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
24.09.2015, 14:21
| #19 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbarZitat:
 Aber erstmal Konstrollscans. Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte  Malwarebytes Anti-Malware
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.09.2015, 17:48
| #20 |
| | Chrome Erweiterung nicht löschbar Hi Arne, MBAM Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 24.09.2015 Suchlaufzeit: 15:22 Protokolldatei: MBAM.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.09.24.03 Rootkit-Datenbank: v2015.09.22.01 Lizenz: Premium-Version Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Aktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Marvin Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 372321 Abgelaufene Zeit: 19 Min., 27 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 3 PUP.Optional.Vonteera.ChrPRST, HKCU\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXT\CLSID|{437B9306-2FDE-4054-A3C9-6B49507C12D0}, 1, In Quarantäne, [397a3003b7d490a61e94f340d42fe61a] PUP.Optional.Vonteera.ChrPRST, HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXT\CLSID|{437B9306-2FDE-4054-A3C9-6B49507C12D0}, 1, In Quarantäne, [4271092acfbc51e53779fc371ee5e719] PUP.Optional.Vonteera.ChrPRST, HKU\S-1-5-21-2840623005-2840827860-1408477528-1001\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXT\CLSID|{437B9306-2FDE-4054-A3C9-6B49507C12D0}, 1, In Quarantäne, [92212b080289a096614f1b1861a24ab6] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) SecurityCheck: Code:
ATTFilter Results of screen317's Security Check version 1.008 lange x64 Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 60 ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSMpEng.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` LG ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=1a934c18b2056f4ca3a004374e6fdf0b
# end=init
# utc_time=2015-09-24 01:58:26
# local_time=2015-09-24 03:58:26 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.3.9600 NT
Update Init
Update Download
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 25925
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=1a934c18b2056f4ca3a004374e6fdf0b
# end=updated
# utc_time=2015-09-24 02:04:59
# local_time=2015-09-24 04:04:59 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.3.9600 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=1a934c18b2056f4ca3a004374e6fdf0b
# engine=25925
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-09-24 04:38:36
# local_time=2015-09-24 06:38:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.3.9600 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 16134 6902286 0 0
# scanned=252845
# found=9
# cleaned=0
# scan_time=9217
sh=802CDF2DE91A67AD56BC4C66DE0669904972BD33 ft=0 fh=0000000000000000 vn="Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\FRST\Quarantine.7z"
sh=7F3321A6DA179DE96B66EEC640F9A1DBBF423A73 ft=0 fh=0000000000000000 vn="Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa\1.3.2_0\js\background.js"
sh=860EFD5893E4DD4E820227B7DEAD144F974456AC ft=1 fh=c0b9ed8dfe12ffb8 vn="Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Cheat Engine 6.4\standalonephase1.dat"
sh=7F3321A6DA179DE96B66EEC640F9A1DBBF423A73 ft=0 fh=0000000000000000 vn="Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\Users\Marvin\AppData\Local\Chromium\User Data\Default\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa\1.3.2_0\js\background.js"
sh=7F3321A6DA179DE96B66EEC640F9A1DBBF423A73 ft=0 fh=0000000000000000 vn="Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa\1.3.2_0\js\background.js"
sh=F6AF9C8FB0F956E1109BF0B46BF92476EF40AC53 ft=1 fh=8473b905325eedbf vn="Win32/SecurityXploded.P potenziell unsichere Anwendung" ac=I fn="C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\3FOE3I78\Setup_VirusTotalScanner[1].exe"
sh=FEC095E2AE0B73166FB201FC6D740A6BF58476F2 ft=1 fh=a94c32f91dfb0807 vn="Win32/InstallMonetizer.AW evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\USKZH4IK\Bing_Real_Bar_195[1].exe"
sh=2F7E6FAD8E033495459E2449083C480DEB54A4AF ft=0 fh=0000000000000000 vn="Win32/Fynloski.AA Trojaner" ac=I fn="C:\Users\Marvin\Downloads\Compressed\MinecraftObsidian.rar"
sh=7F11D4BF32645BCEB1AF042265EC5F1A5C6B98F9 ft=1 fh=1e5a48917e162548 vn="Variante von Win32/OpenCandy.C potenziell unsichere Anwendung" ac=I fn="C:\Users\Marvin\Downloads\Programs\CheatEngine64.exe"
Geändert von DieKakao (24.09.2015 um 18:20 Uhr) |
|
24.09.2015, 20:47
| #21 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbar Ist dein Google Chrome Profil immer noch oder schon wieder versaut?
__________________ --> Chrome Erweiterung nicht löschbar |
|
24.09.2015, 21:20
| #22 |
| | Chrome Erweiterung nicht löschbar Hi, Ich habe Google Chrome nicht mehr auf mein PC, sondern SRware Iron, was auf Chromium basiert. Ich habe nun aber ein neues Problem. Windows lässt sich nicht mehr Updaten und der Windows Defender öffnet sich nicht mehr. |
|
24.09.2015, 21:33
| #23 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbar Machen wir erstmal nen Reste-Fix FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files (x86)\Cheat Engine 6.4\standalonephase1.dat
C:\Users\Marvin\AppData\Local\Chromium\User Data\Default\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa
C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\3FOE3I78
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\USKZH4IK
C:\Users\Marvin\Downloads\Compressed\MinecraftObsidian.rar
C:\Users\Marvin\Downloads\Programs\CheatEngine64.exe
EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.09.2015, 21:42
| #24 |
| | Chrome Erweiterung nicht löschbar Hi, Fixlog: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:23-09-2015
durchgeführt von Marvin (2015-09-24 22:35:18) Run:5
Gestartet von C:\Users\Marvin\Desktop
Geladene Profile: Marvin (Verfügbare Profile: Marvin)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
C:\Program Files (x86)\Cheat Engine 6.4\standalonephase1.dat
C:\Users\Marvin\AppData\Local\Chromium\User Data\Default\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa
C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\3FOE3I78
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\USKZH4IK
C:\Users\Marvin\Downloads\Compressed\MinecraftObsidian.rar
C:\Users\Marvin\Downloads\Programs\CheatEngine64.exe
EmptyTemp:
*****************
C:\Program Files (x86)\Cheat Engine 6.4\standalonephase1.dat => erfolgreich verschoben
C:\Users\Marvin\AppData\Local\Chromium\User Data\Default\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa => erfolgreich verschoben
C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ooabkmkhabkahcjbgpiajffckeibpdoa => erfolgreich verschoben
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\3FOE3I78 => erfolgreich verschoben
C:\Users\Marvin\AppData\Local\Microsoft\Windows\INetCache\IE\USKZH4IK => erfolgreich verschoben
"C:\Users\Marvin\Downloads\Compressed\MinecraftObsidian.rar" => Datei/Ordner nicht gefunden.
C:\Users\Marvin\Downloads\Programs\CheatEngine64.exe => erfolgreich verschoben
EmptyTemp: => 191.3 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden..
==== Ende von Fixlog 22:35:38 ====
LG |
|
24.09.2015, 21:58
| #25 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbar Ok, für die Windows-Reparatur => Windows reparieren - so geht's - Anleitungen
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.09.2015, 22:38
| #26 |
| | Chrome Erweiterung nicht löschbar Hi, Danke, jetzt kann ich wieder nach Updates suchen und den Defender deaktivieren! LG |
|
25.09.2015, 08:11
| #27 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbar Dasging ja einfach Findet MBAM noch was oder ist jetzt alles ruhig?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.09.2015, 12:40
| #28 |
| | Chrome Erweiterung nicht löschbar Hi, MBAM: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 25.09.2015 Suchlaufzeit: 13:10 Protokolldatei: Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.09.25.01 Rootkit-Datenbank: v2015.09.22.01 Lizenz: Premium-Version Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Aktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Marvin Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 373441 Abgelaufene Zeit: 24 Min., 42 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Danke Arne, für die Hilfe! LG |
|
25.09.2015, 12:50
| #29 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Chrome Erweiterung nicht löschbar Sieht soweit ok aus  Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) empfehle ich die Erweiterung Ghostery, diese verhindert weitgehend Usertracking bzw. das Anzeigen von Werbebannern. Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.09.2015, 12:55
| #30 |
| | Chrome Erweiterung nicht löschbar Hi, muss ich noch irgend ein Log posten z.B von FRST? LG |
|
| Themen zu Chrome Erweiterung nicht löschbar |
| administrator, chrome erweiterung, defender, desktop, explorer, geforce, google, homepage, malware.trace, mozilla, nvidia, prozesse, pup.optional.adtech, pup.optional.vonteera.chrprst, pup.optional.webpick, realtek, registry, rundll, software, sweet-page, sweet-page entfernen, system, unternehmensrichtlinie, win10, windows |
Linear-Darstellung
