| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.10.2015, 21:18
| #1 |
| |  Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt Hallo, Ich habe in einem Forum ein Item angeboten, habe von einem "Interessenten" einen Link zugeschickt bekommen, welcher als ScreenshotHoster getarnt war. Ich habe drauf geklickt und es hat sich sofort eine .exe Datei gedownloaded, welche ich aber NICHT geöffnet habe. Ist es nun möglich, dass ich mich alleine durch das herunterladen einer solchen Datei, welche zu 100% ein Virus gewesen wäre, da diese Person auf meine Items aus war, ich mir einen Virus/Keylogger oder sonstige Schadssoftware eingefangen habe?  (Den Download-Ordner habe ich sofort geleert) Malwarebytes hat nichts bedrohliches gefunden |
|
03.10.2015, 10:30
| #2 |
| /// the machine /// TB-Ausbilder    | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
03.10.2015, 14:58
| #3 |
| | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt Vielen dank, dass Sie die Zeit finden mir "schnell" unter die Arme zu greifen! :-)
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:03-10-2015
durchgeführt von Alex (2015-10-03 15:56:13)
Gestartet von C:\Users\Alex\Downloads
Windows 10 Home (X64) (2015-09-15 00:05:44)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3928556769-3423849286-2940898189-500 - Administrator - Disabled)
Alex (S-1-5-21-3928556769-3423849286-2940898189-1001 - Administrator - Enabled) => C:\Users\Alex
DefaultAccount (S-1-5-21-3928556769-3423849286-2940898189-503 - Limited - Disabled)
Gast (S-1-5-21-3928556769-3423849286-2940898189-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3928556769-3423849286-2940898189-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Total Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Armored Warfare MyCom Beta (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Armored Warfare MyCom Beta) (Version: 1.40 - My.com B.V.)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.5.2.34169 - Electronic Arts)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
Company of Heroes (New Steam Version) (HKLM-x32\...\Steam App 228200) (Version: - Relic)
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.02 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
FormatFactory 3.7.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.7.5.0 - Free Time)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
H1Z1 (HKLM-x32\...\Steam App 295110) (Version: - Daybreak Games)
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
Hero Siege (HKLM-x32\...\Steam App 269210) (Version: - Elias Viglione)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{02FECEE0-16B2-43DB-BC3B-C844477FC142}) (Version: 15.0.2.361 - Kaspersky Lab)
Kaspersky Total Security (x32 Version: 15.0.2.361 - Kaspersky Lab) Hidden
L.A. Noire (HKLM-x32\...\Steam App 110800) (Version: - Team Bondi)
Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version: - BioWare)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3 - Mozilla)
My.com Game Center (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\MyComGames) (Version: 3.145 - My.com B.V.)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 344.11 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OnTopReplica (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\OnTopReplica) (Version: 3.4 - Lorenz Cuno Klopfenstein)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenIV (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\OpenIV) (Version: 2.6.4.642 - .black/OpenIV Team)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.89.63.0 - Overwolf Ltd.)
Platform (x32 Version: 1.42 - VIA Technologies, Inc.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.34.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Spotify) (Version: 1.0.14.124.g4dfabc51 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.42 - VIA Technologies, Inc.)
Warhammer 40,000 Space Marine (HKLM-x32\...\Steam App 55150) (Version: - Relic)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
01-10-2015 21:59:02 Windows Update
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {2DC89EF4-928D-4349-8844-F33848E2EA19} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {3E7DA5A1-1647-4598-ACEE-7DEF7879A4BA} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {43CF978C-FBA8-4656-94F0-5C2544356683} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {49B12F4B-3D54-4312-9E6C-0FAB7B21D1F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {733AC4FE-F60C-4CB8-BBD5-8A5EBD343B29} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {736BA001-82F9-4980-8EA2-2A0C10A1764B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {7CAE51A6-77F6-435E-A645-416EDEDD3F43} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {83189B3D-30EA-45EB-BE3A-FADC6E9CEF6E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd)
Task: {A06A2946-EC58-4005-9E80-9C1537F6194E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-03] (Adobe Systems Incorporated)
Task: {D8D30D73-AB8E-4DD5-BE30-3B1120B4F6D2} - System32\Tasks\bandicam_start => C:\Program Files (x86)\Bandicam\bdcam.exe
Task: {E5D7B36D-8F9A-4AEC-BF04-90222144149C} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-09-16] (Overwolf LTD)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-3928556769-3423849286-2940898189-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-09-15 02:41 - 2015-09-15 02:41 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-09-16 18:34 - 2015-09-28 23:51 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-09-15 01:47 - 2015-08-07 02:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-10-01 18:36 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 18:36 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-01 18:35 - 2015-09-17 07:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-01 18:36 - 2015-09-17 07:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 18:35 - 2015-09-17 07:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 18:35 - 2015-09-17 07:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 18:36 - 2015-09-17 07:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-20 21:20 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2015-08-19 19:10 - 2015-08-19 19:10 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 01272616 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\kpcengine.2.3.dll
2014-09-19 13:42 - 2013-09-16 12:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-09-20 21:20 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2015-09-27 01:14 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-09-15 00:32 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-09-15 00:32 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-09-15 00:32 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll
2015-09-15 00:32 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-09-15 00:32 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-09-15 00:32 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-09-15 00:32 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-09-15 00:32 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-09-15 00:32 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-09-15 00:32 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-09-15 00:32 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-09-15 00:32 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-09-15 00:32 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-09-16 15:39 - 2015-09-16 15:39 - 45069312 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\libcef.DLL
2015-09-16 15:39 - 2015-09-16 15:39 - 00025600 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\CoreAudioApi.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 01274655 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\libxml2-2.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00028160 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\libssp-0.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00100352 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\zlib1.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00373657 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\plugins\libmsn.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00021337 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\plugins\libxmpp.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00415553 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\libjabber.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00190464 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\libsasl.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00022832 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\plugins\libyahoo.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00228908 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\libymsg.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00027811 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\plugins\ssl-nss.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00012004 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\plugins\ssl.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00140288 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\sasl2\saslDIGESTMD5.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00102912 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\sasl2\saslPLAIN.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 00425984 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\sqlite3.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 00502056 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 00608040 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 00338216 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
2015-08-04 09:54 - 2015-09-30 12:36 - 00149480 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\quazip.dll
2015-08-04 09:53 - 2015-09-30 12:36 - 00090088 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2015-08-04 09:53 - 2015-09-30 12:36 - 00103400 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2015-08-04 09:54 - 2015-09-30 12:36 - 00260072 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2015-08-04 09:54 - 2015-09-30 12:36 - 00369640 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2015-07-17 14:37 - 2015-09-30 12:36 - 00270336 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\ssleay32.dll
2015-07-17 14:37 - 2015-09-30 12:36 - 01291776 _____ () C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\LIBEAY32.dll
2015-09-16 15:40 - 2015-09-16 15:40 - 01565128 _____ () C:\Program Files (x86)\Overwolf\0.89.63.0\teamspeak_control_win32.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Alex\OneDrive:ms-properties
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alex\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 155.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\StartupApproved\Run: => "MyComGames"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{8A8C2C66-ED19-43D0-B718-4C8991FE9FE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9278B62F-F796-4C92-86F3-163177556CF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7F079DC8-2183-4FB1-9011-6B4F0D5E3E60}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{29DA4BAC-1F69-44AE-A284-A76012126839}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E5DB0F47-1566-4A36-BE3B-DFF42E0D4FB2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4A824C2F-F9EE-453C-BD89-767AB4F7B3C8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3802BFE1-3BF7-4D76-9098-991101C2C029}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CF0B6ED8-0DD8-4C51-99EF-4607BF3D0673}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1B5A3E9-AB81-4977-AC0F-6E7FD84538E3}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{4F740ED6-E282-4658-95C5-9B0E502B4C04}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{88F42CEB-4BA3-461D-B064-D3F55048C229}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe
FirewallRules: [{3E6722E6-A057-4C23-B3C7-872C37C024D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe
FirewallRules: [{843E8790-6EF7-48FF-B4CF-7EB340F986B6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{07C50A81-7CD3-470C-91DF-81631269F46D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{4582B47D-3C34-4941-84B4-E18B2862FB78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{1FBACD76-B394-46D4-8BBC-7CA7A211D0DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{B40E4E75-8ACC-4710-9EB5-8CFE2152BE91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{33E1F6DF-7CCA-43B4-AA13-87F1F54B0A0E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{1CD99FDF-3C3D-4390-B5D9-2BF997E7A411}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{7FD1FEB3-C16B-472E-A9AA-C18561A60C0E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{43B801EB-68A9-42EB-95E4-5CCC95666CDF}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{186C5BFC-A296-465F-8272-09F3B6BC0BC0}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{92979FA3-3121-4380-95E0-1749CDF0BA74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{8FF80D02-D0A9-47B8-BC2C-8AA009696A47}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{73E03F3E-16BE-4EED-9EFD-C1BE7C2C3486}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{7801BDA0-5785-47B0-85C7-62803206FEAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{717E080B-9A15-470B-BEDC-A09CA915DA5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{148E13EA-3C4D-41DC-89A8-8BDDDEDDBD3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{5D76C7C6-99F6-4018-911E-8F577E45DB8E}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{4D03B4E5-5792-4DA3-98EA-752E0080C849}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{C95C1C6F-BF01-4F3B-846A-A632138C077B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe
FirewallRules: [{32E4769A-04DB-4F05-BF93-B2B6496619A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe
FirewallRules: [{EBB37E8C-0914-4DC6-A9BB-627BC9A0CAD0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{4968BCCE-9E56-42AB-BF9F-122BA33CB083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{E9DAF9FC-20E4-4DE1-9BE9-D0D7D43B350D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{E2BD5E32-8D92-42B3-BED4-1DB196D314BE}] => (Allow) LPort=2869
FirewallRules: [{CA8B5B4F-CDF2-4219-971D-432D60E526AC}] => (Allow) LPort=1900
FirewallRules: [{2A85F5B2-478B-4FA5-A319-811F049669CF}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PFInstOnline.exe
FirewallRules: [{027CE6C5-5F42-4A7D-A888-E06B6CA8CD2F}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{9EF1581F-882E-47DF-B898-BE3DF636E189}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{DAA220D2-DE2F-486F-B829-604840F15F3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{4EE7F68D-78E8-4253-90DD-2515D66CAD3E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{96707D3F-74AD-417B-BC4C-3111AE4637F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{F3FCECFC-718C-4568-8C5E-5E00CF82967F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{16861B41-41C8-4C9C-87D1-206CCD33B1D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{C5B49D32-04D1-4343-A3C6-9AE9DA8426C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\L.A.Noire\LANLauncher.exe
FirewallRules: [{29A7EDA7-5780-4FED-9A9D-D22416C4B63A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\L.A.Noire\LANLauncher.exe
FirewallRules: [{F940D918-0612-468B-ADF6-8D1B6591FF31}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{25428FDB-1C48-4846-9B34-C127FAA68A33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{F4DF6006-28EC-4FB3-A634-896A34D1A691}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FC8BEFB5-A1C1-4288-9900-089B1A665A16}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{90F8925C-D743-4693-9AAD-54FEB485119E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0CEA3FB5-53B9-4F64-BEC3-0956750E0E70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{F6CFCCB8-8C97-41AE-B48E-CE0B0320D2F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{998406A2-D0C5-4D63-B490-865751E6BCBD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AA5F1738-E5EC-4989-B4D8-E5F7FBB44BB6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FD9A3B80-63D8-4A13-9C27-3D20175E26A5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{403D90C1-E4B7-4EB2-889C-C2B4C0F3EB09}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{66805941-9D53-44B6-B5C4-37D65827D8C3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{AA19DCC0-F641-4FF4-95B4-3FAB94AE9EAA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{796FD01C-9E99-46A9-B0F3-CCB93ABE27E3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{D30C32F0-FE1F-400D-8627-FA9A1D53B2AD}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F11170FD-671D-4BCF-81D4-45B2790656D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{34633F2A-0633-4C2D-9860-3D078CBF8A9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{573C9ACC-313F-4481-B119-DC2A527349CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{125F834D-8936-4976-B4ED-33300E18E441}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{46284D73-4B97-4FEE-B328-58B0A82E47C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{C1ABE2CE-7F03-471E-B558-7D44CFBF6837}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Unbekanntes USB-Gerät (Fehler beim Festlegen der Adresse.)
Description: Unbekanntes USB-Gerät (Fehler beim Festlegen der Adresse.)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/03/2015 02:06:18 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Es wird bereits eine Instanz des Dienstes ausgeführt
Error: (10/03/2015 02:06:18 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig
Error: (10/03/2015 02:01:21 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Es wird bereits eine Instanz des Dienstes ausgeführt
Error: (10/03/2015 02:01:21 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig
Error: (10/03/2015 04:49:35 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ALEX)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (10/03/2015 04:14:50 AM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (7352) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.
Error: (10/03/2015 04:14:50 AM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (7352) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
Error: (10/03/2015 04:14:40 AM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (7352) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.
Error: (10/03/2015 04:14:40 AM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (7352) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
Error: (10/03/2015 04:14:30 AM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (7352) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.
Systemfehler:
=============
Error: (10/03/2015 03:32:32 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}
Error: (10/03/2015 01:47:53 PM) (Source: DCOM) (EventID: 10016) (User: ALEX)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}AlexAlexS-1-5-21-3928556769-3423849286-2940898189-1001LocalHost (unter Verwendung von LRPC)Microsoft.WindowsStore_2015.9.25.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157
Error: (10/03/2015 04:49:35 AM) (Source: DCOM) (EventID: 10010) (User: ALEX)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca
Error: (10/03/2015 04:49:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/03/2015 04:49:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/03/2015 04:49:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/03/2015 04:49:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/03/2015 04:09:44 AM) (Source: DCOM) (EventID: 10010) (User: ALEX)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (10/03/2015 12:46:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session3" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/03/2015 12:46:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session3" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 8148.51 MB
Verfügbarer physikalischer RAM: 4278.59 MB
Summe virtueller Speicher: 11547.4 MB
Verfügbarer virtueller Speicher: 6196.27 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:916.15 GB) (Free:590.1 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 88218443)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
04.10.2015, 07:10
| #4 |
| /// the machine /// TB-Ausbilder | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt FRST.txt fehlt noch 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.10.2015, 12:55
| #5 |
| | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführtFRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:03-10-2015 durchgeführt von Alex (Administrator) auf ALEX (03-10-2015 15:55:27) Gestartet von C:\Users\Alex\Downloads Geladene Profile: Alex (Verfügbare Profile: Alex) Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe\Video.UI.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\0.89.63.0\OverwolfBrowser.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\0.89.63.0\OverwolfBrowser.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.89.63.0\OverwolfHelper.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.89.63.0\OverwolfHelper64.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\0.89.63.0\Purplizer\Purplizer.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe (TeamSpeak Systems GmbH) C:\Users\Alex\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\0.89.63.0\OverwolfTSHelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation) HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16174328 2015-09-27] (Realtek Semiconductor) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [55349888 2015-09-04] (Skype Technologies S.A.) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-07-10] (Microsoft Corporation) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638768 2015-09-30] (Electronic Arts) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [Spotify Web Helper] => C:\Users\Alex\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2025016 2015-09-21] (Spotify Ltd) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [Spotify] => C:\Users\Alex\AppData\Roaming\Spotify\Spotify.exe [7571000 2015-09-21] (Spotify Ltd) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [MyComGames] => C:\Users\Alex\AppData\Local\MyComGames\MyComGames.exe [4205000 2015-10-02] (MY.COM B.V.) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-19] (Piriform Ltd) HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [43760 2015-09-16] (Overwolf LTD) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 155.168.1.1 Tcpip\..\Interfaces\{3a1b8d49-a004-444c-bc61-f80127b2ba61}: [DhcpNameServer] 155.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-3928556769-3423849286-2940898189-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de SearchScopes: HKU\S-1-5-21-3928556769-3423849286-2940898189-1001 -> DefaultScope {D6B099C1-7ADA-45DF-B0FC-5EE4D791532D} URL = BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-23] (Oracle Corporation) BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-23] (Oracle Corporation) BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) FireFox: ======== FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\r448spo2.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-10-03] () FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-23] (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-10-03] () FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-09-15] () FF Plugin-x32: @kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-09-15] () FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-09-15] () FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin HKU\S-1-5-21-3928556769-3423849286-2940898189-1001: @my.com/Games -> C:\Users\Alex\AppData\Local\MyComGames\NPMyComDetector.dll [2015-10-01] (My.com, Inc) FF user.js: detected! => C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\r448spo2.default\user.js [2015-09-15] FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\r448spo2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-15] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-09-15] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-09-15] FF HKLM-x32\...\Firefox\Extensions: [online_banking_08806E753BE44495B44E90AA2513BDC5@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-09-15] Chrome: ======= CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe [194000 2015-07-09] (Kaspersky Lab ZAO) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2078216 2015-09-30] (Electronic Arts) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1006320 2015-09-16] (Overwolf LTD) R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-09-27] () R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-09-28] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-07-09] (Kaspersky Lab UK Ltd) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-07-09] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [64368 2015-07-09] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [159960 2015-07-09] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [226480 2015-07-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [831664 2015-07-09] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39792 2015-07-09] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [40304 2015-07-09] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [39792 2015-07-09] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-07-09] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [77680 2015-07-09] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [85360 2015-07-09] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [190648 2015-07-09] (Kaspersky Lab ZAO) S3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-03] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) R3 WinRing0_1_2_0; C:\Program Files (x86)\Overwolf\0.89.63.0\OverwolfBenchmarking.sys [14544 2015-10-02] (OpenLibSys.org) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-03 15:55 - 2015-10-03 15:55 - 00019582 _____ C:\Users\Alex\Downloads\FRST.txt 2015-10-03 15:55 - 2015-10-03 15:55 - 00000000 ____D C:\FRST 2015-10-03 15:54 - 2015-10-03 15:55 - 02193408 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe 2015-10-03 15:44 - 2015-10-03 15:44 - 00016148 _____ C:\WINDOWS\system32\ALEX_Alex_HistoryPrediction.bin 2015-10-03 14:06 - 2015-10-03 15:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-10-03 14:06 - 2015-10-03 14:06 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-10-03 14:04 - 2015-10-03 14:04 - 00001165 _____ C:\Users\Alex\Desktop\Cheat Engine.lnk 2015-10-03 14:04 - 2015-10-03 14:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 2015-10-03 14:04 - 2015-10-03 14:04 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.4 2015-10-03 14:03 - 2015-10-03 14:03 - 09052432 _____ (Cheat Engine ) C:\Users\Alex\Downloads\CheatEngine64.exe 2015-10-03 13:47 - 2015-10-03 15:29 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2015-10-02 15:06 - 2015-10-02 15:06 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\23F25C44.sys 2015-10-02 13:59 - 2015-10-02 13:59 - 00045329 _____ C:\Users\Alex\AppData\Local\recently-used.xbel 2015-10-01 18:36 - 2015-09-25 01:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-10-01 18:36 - 2015-09-25 01:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-10-01 18:36 - 2015-09-17 08:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-10-01 18:36 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-10-01 18:36 - 2015-09-17 08:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-10-01 18:36 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2015-10-01 18:36 - 2015-09-17 08:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2015-10-01 18:36 - 2015-09-17 08:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-01 18:36 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2015-10-01 18:36 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-10-01 18:36 - 2015-09-17 08:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-10-01 18:36 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2015-10-01 18:36 - 2015-09-17 08:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-10-01 18:36 - 2015-09-17 08:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-10-01 18:36 - 2015-09-17 08:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2015-10-01 18:36 - 2015-09-17 08:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-10-01 18:36 - 2015-09-17 08:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-10-01 18:36 - 2015-09-17 08:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-10-01 18:36 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-10-01 18:36 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-10-01 18:36 - 2015-09-17 08:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-10-01 18:36 - 2015-09-17 08:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-10-01 18:36 - 2015-09-17 08:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-10-01 18:36 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2015-10-01 18:36 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-10-01 18:36 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-10-01 18:36 - 2015-09-17 07:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-10-01 18:36 - 2015-09-17 07:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-10-01 18:36 - 2015-09-17 07:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-10-01 18:36 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-10-01 18:36 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2015-10-01 18:36 - 2015-09-17 07:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-10-01 18:36 - 2015-09-17 07:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-10-01 18:36 - 2015-09-17 07:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-10-01 18:36 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-10-01 18:36 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-10-01 18:36 - 2015-09-17 07:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-10-01 18:36 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-10-01 18:36 - 2015-09-17 07:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-10-01 18:36 - 2015-09-17 07:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-10-01 18:36 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-10-01 18:36 - 2015-09-17 07:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-10-01 18:36 - 2015-09-17 07:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2015-10-01 18:36 - 2015-09-17 07:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-10-01 18:36 - 2015-09-17 07:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-10-01 18:35 - 2015-09-25 02:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll 2015-10-01 18:35 - 2015-09-25 02:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll 2015-10-01 18:35 - 2015-09-25 02:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-10-01 18:35 - 2015-09-25 01:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2015-10-01 18:35 - 2015-09-25 01:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll 2015-10-01 18:35 - 2015-09-25 01:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2015-10-01 18:35 - 2015-09-25 01:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-01 18:35 - 2015-09-25 01:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-10-01 18:35 - 2015-09-25 01:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-10-01 18:35 - 2015-09-25 01:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-10-01 18:35 - 2015-09-25 01:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-10-01 18:35 - 2015-09-25 01:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2015-10-01 18:35 - 2015-09-25 01:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-10-01 18:35 - 2015-09-25 01:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2015-10-01 18:35 - 2015-09-25 01:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2015-10-01 18:35 - 2015-09-25 01:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2015-10-01 18:35 - 2015-09-25 01:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll 2015-10-01 18:35 - 2015-09-25 00:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-10-01 18:35 - 2015-09-25 00:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2015-10-01 18:35 - 2015-09-25 00:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-01 18:35 - 2015-09-25 00:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-10-01 18:35 - 2015-09-25 00:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-10-01 18:35 - 2015-09-25 00:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-10-01 18:35 - 2015-09-25 00:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2015-10-01 18:35 - 2015-09-25 00:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2015-10-01 18:35 - 2015-09-25 00:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2015-10-01 18:35 - 2015-09-25 00:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll 2015-10-01 18:35 - 2015-09-25 00:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-10-01 18:35 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2015-10-01 18:35 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2015-10-01 18:35 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-10-01 18:35 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-10-01 18:35 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2015-10-01 18:35 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2015-10-01 18:35 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-10-01 18:35 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2015-10-01 18:35 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2015-10-01 18:35 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2015-10-01 18:35 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-10-01 18:35 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2015-10-01 18:35 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2015-10-01 18:35 - 2015-09-17 08:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-10-01 18:35 - 2015-09-17 08:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2015-10-01 18:35 - 2015-09-17 08:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-10-01 18:35 - 2015-09-17 08:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-10-01 18:35 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2015-10-01 18:35 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-10-01 18:35 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-10-01 18:35 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2015-10-01 18:35 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-10-01 18:35 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-10-01 18:35 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2015-10-01 18:35 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2015-10-01 18:35 - 2015-09-17 08:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-10-01 18:35 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-10-01 18:35 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2015-10-01 18:35 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-10-01 18:35 - 2015-09-17 08:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2015-10-01 18:35 - 2015-09-17 08:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-10-01 18:35 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-10-01 18:35 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2015-10-01 18:35 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-10-01 18:35 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-10-01 18:35 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-10-01 18:35 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll 2015-10-01 18:35 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-10-01 18:35 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-10-01 18:35 - 2015-09-17 08:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-10-01 18:35 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-10-01 18:35 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2015-10-01 18:35 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2015-10-01 18:35 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2015-10-01 18:35 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2015-10-01 18:35 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-10-01 18:35 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-10-01 18:35 - 2015-09-17 08:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2015-10-01 18:35 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2015-10-01 18:35 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-10-01 18:35 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2015-10-01 18:35 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-10-01 18:35 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll 2015-10-01 18:35 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2015-10-01 18:35 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-10-01 18:35 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2015-10-01 18:35 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-10-01 18:35 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-10-01 18:35 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-10-01 18:35 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2015-10-01 18:35 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2015-10-01 18:35 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-10-01 18:35 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-10-01 18:35 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-10-01 18:35 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-10-01 18:35 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-10-01 18:35 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-10-01 18:35 - 2015-09-17 07:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-10-01 18:35 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-10-01 18:35 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2015-10-01 18:35 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-10-01 18:35 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2015-10-01 18:35 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-10-01 18:35 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll 2015-10-01 18:35 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll 2015-10-01 18:35 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys 2015-10-01 18:35 - 2015-09-17 07:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll 2015-10-01 18:35 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll 2015-10-01 18:35 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2015-10-01 18:35 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2015-10-01 18:35 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2015-10-01 18:35 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2015-10-01 18:35 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-10-01 18:35 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2015-10-01 18:35 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2015-10-01 18:35 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2015-10-01 18:35 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2015-10-01 18:35 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll 2015-10-01 18:35 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-10-01 18:35 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-10-01 18:35 - 2015-09-17 07:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-10-01 18:35 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2015-10-01 18:35 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2015-10-01 18:35 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-10-01 18:35 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2015-10-01 18:35 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll 2015-10-01 18:35 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-10-01 18:35 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-10-01 18:35 - 2015-09-17 07:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-10-01 18:35 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2015-10-01 18:35 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2015-10-01 18:35 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-10-01 18:35 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-01 18:35 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2015-10-01 18:35 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-10-01 18:35 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll 2015-10-01 18:35 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-10-01 18:35 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-10-01 18:35 - 2015-09-17 07:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2015-10-01 18:35 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2015-10-01 18:35 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2015-10-01 18:35 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2015-10-01 18:35 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2015-10-01 18:35 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2015-10-01 18:35 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-10-01 18:35 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-10-01 18:35 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-10-01 18:35 - 2015-09-17 07:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-10-01 18:35 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-10-01 18:35 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2015-10-01 18:35 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2015-10-01 18:35 - 2015-09-13 04:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2015-10-01 18:35 - 2015-09-13 03:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-10-01 14:56 - 2015-10-01 14:56 - 00000128 _____ C:\Users\Alex\Desktop\Armored Warfare Open Beta.url 2015-09-29 10:49 - 2015-09-29 10:49 - 00000000 ____D C:\Users\Alex\AppData\Local\Logitech 2015-09-29 10:49 - 2015-09-29 10:49 - 00000000 ____D C:\ProgramData\LogiShrd 2015-09-29 10:47 - 2015-09-30 14:15 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2015-09-29 10:43 - 2015-09-29 10:43 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Logitech 2015-09-29 10:43 - 2015-09-29 10:43 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Logishrd 2015-09-28 23:46 - 2015-09-28 23:51 - 00348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr 2015-09-28 16:53 - 2015-09-28 23:46 - 00000000 ____D C:\Users\Alex\Documents\Battlefield 3 2015-09-28 16:53 - 2015-09-28 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2015-09-28 16:53 - 2015-09-28 16:53 - 00000000 ____D C:\ProgramData\EA Core 2015-09-28 00:53 - 2015-09-28 00:53 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2015-09-27 23:40 - 2015-09-27 23:40 - 00076152 _____ C:\WINDOWS\system32\PnkBstrA.exe 2015-09-27 16:58 - 2015-09-27 16:58 - 00000000 ____D C:\Users\Alex\Documents\My Cheat Tables 2015-09-27 13:09 - 2015-09-27 13:09 - 00000752 _____ C:\Users\Alex\Desktop\Shadowplay - Shortcut.lnk 2015-09-27 01:46 - 2015-09-27 01:46 - 00000000 ____D C:\Program Files\Realtek 2015-09-27 01:45 - 2015-09-27 01:44 - 04585728 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2015-09-27 01:45 - 2015-09-27 01:44 - 03019040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2015-09-27 01:45 - 2015-09-27 01:44 - 00422424 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll 2015-09-27 01:45 - 2015-09-27 01:44 - 00032400 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 03653631 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2015-09-27 01:44 - 2015-09-27 01:44 - 03309264 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 03270464 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 02955008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 02720000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2015-09-27 01:44 - 2015-09-27 01:44 - 02058880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 01768192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 01351688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00930848 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00784312 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO32.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00659872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00588624 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00545824 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00399456 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00355496 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00342280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00232712 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00225504 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00220136 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00205640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00176480 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00131024 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00128504 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00120712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00097976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00084056 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBppld64.dll 2015-09-27 01:44 - 2015-09-27 01:44 - 00079304 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBPPCn64.dll 2015-09-27 01:44 - 2015-05-27 17:38 - 02825944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll 2015-09-27 01:38 - 2015-09-27 01:38 - 00002846 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2015-09-27 01:38 - 2015-09-27 01:38 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk 2015-09-27 01:38 - 2015-09-27 01:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-09-27 01:38 - 2015-09-27 01:38 - 00000000 ____D C:\Program Files\CCleaner 2015-09-27 01:15 - 2015-09-27 01:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-09-27 01:15 - 2015-08-27 02:37 - 01423120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2015-09-27 01:15 - 2015-08-27 02:37 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2015-09-27 01:15 - 2015-08-27 02:36 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2015-09-27 01:15 - 2015-08-27 02:36 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2015-09-27 01:14 - 2015-08-11 06:52 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2015-09-27 01:14 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2015-09-27 01:14 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2015-09-27 00:55 - 2015-09-27 01:40 - 00000000 ____D C:\WINDOWS\Minidump 2015-09-27 00:48 - 2015-09-27 00:48 - 00003022 _____ C:\WINDOWS\System32\Tasks\bandicam_start 2015-09-26 18:21 - 2015-09-26 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2015-09-26 18:21 - 2015-09-26 18:21 - 00000000 ____D C:\Program Files\7-Zip 2015-09-26 17:42 - 2015-09-26 17:42 - 00000000 ____D C:\Users\Alex\Documents\Lightshot 2015-09-26 14:23 - 2015-09-26 14:23 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Notepad++ 2015-09-26 14:23 - 2015-09-26 14:23 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2015-09-26 14:23 - 2015-09-26 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2015-09-26 14:23 - 2015-09-26 14:23 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2015-09-26 00:58 - 2015-09-26 00:55 - 471740893 ____R C:\Users\Alex\Desktop\RusMap_v1.5.2.7z 2015-09-25 23:25 - 2015-09-25 23:21 - 756124278 ____R C:\Users\Alex\Desktop\ProMods-v197 (ETS2).7z 2015-09-25 22:00 - 2015-10-03 15:15 - 00000000 ____D C:\Users\Alex\Documents\Euro Truck Simulator 2 2015-09-25 14:28 - 2015-10-01 14:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Armored Warfare MyCom Beta 2015-09-25 12:54 - 2015-10-01 14:23 - 00000000 ____D C:\MyGames 2015-09-25 12:54 - 2015-09-25 12:54 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games 2015-09-25 12:53 - 2015-10-02 19:25 - 00000000 ____D C:\Users\Alex\AppData\Local\MyComGames 2015-09-24 20:57 - 2015-09-24 20:57 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2015-09-24 20:56 - 2015-09-24 20:56 - 00000000 ____D C:\Users\Alex\AppData\Local\PackageAware 2015-09-23 22:15 - 2015-09-23 22:15 - 00000000 ____D C:\Users\Alex\Documents\BioWare 2015-09-23 22:15 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2015-09-23 22:15 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2015-09-23 22:15 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2015-09-23 22:15 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2015-09-23 22:15 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2015-09-23 22:15 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2015-09-23 21:41 - 2015-09-23 21:41 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Sun 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Sun 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\Users\Alex\.oracle_jre_usage 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\ProgramData\Oracle 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-09-23 21:41 - 2015-09-23 21:41 - 00000000 ____D C:\Program Files\Java 2015-09-23 21:40 - 2015-09-23 21:40 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Oracle 2015-09-23 20:47 - 2015-09-23 20:47 - 00000000 ____D C:\Users\Alex\AppData\Roaming\7DaysToDie 2015-09-23 20:37 - 2015-10-03 13:53 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-09-23 20:37 - 2015-09-23 20:37 - 00001182 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-09-23 20:37 - 2015-09-23 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-09-23 20:37 - 2015-09-23 20:37 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-09-23 20:37 - 2015-09-23 20:37 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-09-23 20:37 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-09-23 20:37 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-09-23 20:37 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-09-22 21:04 - 2015-09-22 21:04 - 01840471 _____ C:\Users\Alex\Desktop\12312312.xcf 2015-09-21 20:12 - 2015-09-21 20:12 - 00000000 ____D C:\HammerAutosave 2015-09-21 11:41 - 2015-09-21 11:41 - 00000000 __SHD C:\WINDOWS\ftpcache 2015-09-20 23:59 - 2015-10-02 13:41 - 00000000 ____D C:\Users\Alex\AppData\Local ==================== Ende von FRST.txt ============================ |
|
04.10.2015, 12:56
| #6 |
| | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführtCode:
ATTFilter \Spotify
2015-09-20 23:59 - 2015-09-20 23:59 - 00001873 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-09-20 23:58 - 2015-10-02 13:41 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Spotify
2015-09-20 23:55 - 2015-09-20 23:56 - 00000000 ____D C:\Users\Alex\Desktop\YouTube Zeug
2015-09-20 23:38 - 2015-09-20 23:38 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Temp
2015-09-20 21:54 - 2015-09-23 21:56 - 00000000 ___RD C:\Users\Alex\Desktop\Desktop Verknüpfungen
2015-09-20 21:32 - 2015-10-02 13:59 - 00000000 ____D C:\Users\Alex\AppData\Local\gtk-2.0
2015-09-20 21:31 - 2015-09-20 21:31 - 00000000 ____D C:\Users\Alex\.thumbnails
2015-09-20 21:20 - 2015-09-20 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
2015-09-20 21:20 - 2015-09-20 21:20 - 00000000 ____D C:\Program Files (x86)\RocketDock
2015-09-20 21:19 - 2015-09-20 21:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-09-20 21:19 - 2015-09-20 21:19 - 00000000 ____D C:\Program Files (x86)\FormatFactory
2015-09-20 21:19 - 2015-09-20 21:19 - 00000000 ____D C:\FFOutput
2015-09-20 21:09 - 2015-09-20 21:09 - 00001454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-09-20 21:09 - 2015-09-20 21:09 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-09-20 21:09 - 2015-09-20 21:09 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-09-20 21:09 - 2015-09-20 21:09 - 00000000 ____D C:\WINDOWS\de
2015-09-20 21:09 - 2015-09-20 21:09 - 00000000 ____D C:\Program Files\Windows Live
2015-09-20 21:09 - 2015-09-20 21:09 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-20 21:08 - 2015-09-20 21:09 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-09-20 21:07 - 2015-09-20 21:12 - 00000000 ____D C:\Users\Alex\AppData\Local\Windows Live
2015-09-20 21:07 - 2015-09-20 21:08 - 00002284 _____ C:\Users\Alex\Desktop\Bandicam Videos.lnk
2015-09-20 20:42 - 2015-09-21 18:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Audacity
2015-09-20 20:42 - 2015-09-20 20:42 - 00001099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-09-20 20:42 - 2015-09-20 20:42 - 00000000 ____D C:\Program Files (x86)\Audacity
2015-09-20 20:39 - 2015-09-20 20:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\avidemux
2015-09-20 18:37 - 2015-09-23 22:00 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft
2015-09-20 18:37 - 2015-09-20 18:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\java
2015-09-19 18:18 - 2015-10-03 15:10 - 00000396 _____ C:\WINDOWS\Tasks\update-sys.job
2015-09-19 18:18 - 2015-09-19 18:18 - 00003322 _____ C:\WINDOWS\System32\Tasks\update-sys
2015-09-19 18:18 - 2015-09-19 18:18 - 00000424 _____ C:\Users\Alex\AppData\Local\UserProducts.xml
2015-09-19 18:18 - 2015-09-19 18:18 - 00000396 _____ C:\WINDOWS\Tasks\update-S-1-5-21-3928556769-3423849286-2940898189-1001.job
2015-09-19 18:18 - 2015-09-19 18:18 - 00000003 _____ C:\Users\Alex\AppData\Local\updater.log
2015-09-19 18:18 - 2015-09-19 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2015-09-19 18:18 - 2015-09-19 18:18 - 00000000 ____D C:\Program Files (x86)\Skillbrains
2015-09-19 18:07 - 2015-10-02 13:59 - 00000000 ____D C:\Users\Alex\.gimp-2.8
2015-09-19 18:07 - 2015-09-19 18:07 - 00000000 ____D C:\Users\Alex\AppData\Local\gegl-0.2
2015-09-19 18:06 - 2015-09-19 18:06 - 00000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-09-19 18:05 - 2015-09-19 18:06 - 00000000 ____D C:\Program Files\GIMP 2
2015-09-19 15:09 - 2015-09-19 15:09 - 00000000 ____D C:\Users\Alex\AppData\Local\THQ
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WinRAR
2015-09-17 23:14 - 2015-09-17 23:14 - 00001347 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk
2015-09-17 23:14 - 2015-09-17 23:14 - 00000000 ____D C:\Users\Alex\AppData\Roaming\New Technology Studio
2015-09-17 23:14 - 2015-09-17 23:14 - 00000000 ____D C:\Users\Alex\AppData\Local\New Technology Studio
2015-09-17 22:16 - 2015-09-24 21:04 - 00000000 ____D C:\Users\Alex\Documents\Rockstar Games
2015-09-17 22:16 - 2015-09-22 22:54 - 00000080 _____ C:\Users\Alex\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-09-17 22:16 - 2015-09-17 22:17 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-09-17 22:16 - 2015-09-17 22:16 - 00000000 ____D C:\Users\Alex\AppData\Local\Rockstar Games
2015-09-17 22:08 - 2015-09-17 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-09-17 20:11 - 2015-09-17 22:17 - 00000000 ____D C:\Program Files\Rockstar Games
2015-09-17 01:53 - 2015-09-17 01:56 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Daybreak Game Company
2015-09-17 01:53 - 2015-09-17 01:53 - 00000000 ____D C:\Users\Alex\AppData\Local\SCE
2015-09-17 01:53 - 2015-09-17 01:53 - 00000000 ____D C:\Users\Alex\AppData\Local\Daybreak Game Company
2015-09-17 01:41 - 2015-09-17 01:41 - 00000000 ____D C:\Users\Alex\AppData\Local\Macromedia
2015-09-17 01:40 - 2015-09-17 01:40 - 00000000 ____D C:\Users\Alex\AppData\Local\Adobe
2015-09-17 00:41 - 2015-09-23 20:46 - 00217848 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2015-09-17 00:41 - 2015-09-17 00:41 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Facepunch Studios LTD
2015-09-16 21:14 - 2015-09-28 23:46 - 00000000 ____D C:\Users\Alex\AppData\Local\PunkBuster
2015-09-16 21:12 - 2015-09-16 21:12 - 00000000 ____D C:\Users\Alex\Documents\Battlefield 4
2015-09-16 21:12 - 2015-09-16 21:12 - 00000000 ____D C:\Users\Alex\AppData\Local\ESN
2015-09-16 18:34 - 2015-10-02 22:37 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-09-16 18:34 - 2015-10-02 14:29 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-09-16 18:34 - 2015-09-28 23:51 - 00076152 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-09-16 18:34 - 2015-09-20 20:48 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2015-09-16 18:34 - 2015-09-16 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2015-09-16 15:15 - 2015-09-16 15:15 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-09-16 15:06 - 2015-09-16 15:06 - 00000000 ___RD C:\Users\Alex\3D Objects
2015-09-15 23:11 - 2015-09-15 23:11 - 00000000 ____D C:\Users\Alex\AppData\Local\DunDefLauncher
2015-09-15 20:31 - 2015-09-16 23:34 - 00000000 ____D C:\Users\Alex\Documents\My Games
2015-09-15 20:31 - 2015-09-15 20:31 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2015-09-15 20:16 - 2015-09-15 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\Lorenz_Cuno_Klopfenstein
2015-09-15 20:15 - 2015-09-15 20:16 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OnTopReplica
2015-09-15 20:15 - 2015-09-15 20:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\OnTopReplica
2015-09-15 20:15 - 2015-09-15 20:15 - 00000000 ____D C:\Users\Alex\AppData\Local\OnTopReplica
2015-09-15 20:05 - 2015-09-27 02:40 - 00000000 ____D C:\Users\Alex\AppData\Roaming\HandBrake
2015-09-15 20:05 - 2015-09-15 20:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake
2015-09-15 20:05 - 2015-09-15 20:05 - 00000000 ____D C:\Program Files\Handbrake
2015-09-15 20:02 - 2015-09-15 20:09 - 00000000 ____D C:\Fraps
2015-09-15 19:45 - 2015-09-30 23:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\OBS
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\Program Files\OBS
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\Program Files (x86)\OBS
2015-09-15 19:32 - 2015-09-28 15:26 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-09-15 19:31 - 2015-09-28 17:07 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Origin
2015-09-15 19:31 - 2015-09-16 21:12 - 00000000 ____D C:\Users\Alex\AppData\Local\Origin
2015-09-15 19:30 - 2015-10-03 00:46 - 00000000 ____D C:\ProgramData\Origin
2015-09-15 19:30 - 2015-09-30 15:06 - 00000000 ____D C:\Program Files (x86)\Origin
2015-09-15 19:30 - 2015-09-16 21:12 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-09-15 19:30 - 2015-09-16 18:34 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-15 19:30 - 2015-09-15 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-09-15 17:07 - 2015-10-03 15:28 - 00000000 ____D C:\Users\Alex\AppData\Local\Purplizer
2015-09-15 17:05 - 2015-09-21 21:07 - 00000000 ____D C:\Program Files (x86)\Overwolf
2015-09-15 17:05 - 2015-09-15 17:05 - 00003804 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task
2015-09-15 17:05 - 2015-09-15 17:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2015-09-15 17:04 - 2015-10-03 14:01 - 00000000 ____D C:\Users\Alex\AppData\Local\Overwolf
2015-09-15 17:04 - 2015-09-15 17:06 - 00000000 ____D C:\ProgramData\Overwolf
2015-09-15 16:58 - 2015-09-15 16:58 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-09-15 16:58 - 2015-09-15 16:58 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-09-15 16:58 - 2015-09-15 16:58 - 00000000 ____D C:\Program Files\MSBuild
2015-09-15 16:58 - 2015-09-15 16:58 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-09-15 16:58 - 2015-09-15 16:58 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-09-15 16:55 - 2015-09-15 16:55 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-09-15 15:16 - 2015-09-15 15:16 - 00000000 ____D C:\Users\Alex\AppData\Local\Hero_Siege
2015-09-15 14:04 - 2015-09-27 00:47 - 00000000 ____D C:\Users\Alex\Documents\Bandicam
2015-09-15 14:04 - 2015-09-15 23:11 - 00000000 ____D C:\Users\Alex\AppData\Roaming\NVIDIA
2015-09-15 14:04 - 2015-09-15 14:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\BANDISOFT
2015-09-15 14:01 - 2015-06-17 18:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-09-15 14:01 - 2015-06-17 18:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-15 14:01 - 2015-06-17 18:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-09-15 14:01 - 2015-05-29 21:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-09-15 14:01 - 2015-05-29 21:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-09-15 14:01 - 2015-05-29 21:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-09-15 14:00 - 2015-10-03 15:43 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2015-09-15 14:00 - 2015-09-30 12:36 - 00000000 ____D C:\Users\Alex\AppData\Local\TeamSpeak 3 Client
2015-09-15 14:00 - 2015-09-15 14:00 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-09-15 13:40 - 2015-10-02 14:43 - 00000000 ____D C:\Program Files (x86)\Bandicam
2015-09-15 13:40 - 2015-09-15 13:40 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2015-09-15 13:40 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-09-15 13:40 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-09-15 13:40 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2015-09-15 13:40 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2015-09-15 13:40 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-09-15 13:40 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-09-15 13:40 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-09-15 13:40 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-09-15 13:40 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2015-09-15 13:40 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2015-09-15 13:40 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2015-09-15 13:40 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2015-09-15 13:40 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2015-09-15 13:40 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2015-09-15 13:40 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2015-09-15 13:40 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2015-09-15 13:40 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2015-09-15 13:40 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2015-09-15 13:40 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2015-09-15 13:40 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2015-09-15 13:40 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2015-09-15 13:40 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2015-09-15 13:40 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2015-09-15 13:40 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2015-09-15 13:40 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2015-09-15 13:40 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2015-09-15 13:40 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2015-09-15 13:40 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2015-09-15 13:40 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2015-09-15 13:40 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2015-09-15 13:40 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2015-09-15 13:40 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2015-09-15 13:40 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2015-09-15 13:40 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2015-09-15 13:40 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2015-09-15 13:40 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2015-09-15 13:40 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2015-09-15 13:40 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2015-09-15 13:40 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2015-09-15 13:40 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2015-09-15 13:40 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2015-09-15 13:40 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2015-09-15 13:40 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2015-09-15 13:40 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2015-09-15 13:40 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2015-09-15 13:40 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2015-09-15 13:40 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2015-09-15 13:40 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2015-09-15 13:40 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2015-09-15 13:40 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2015-09-15 13:40 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2015-09-15 13:40 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2015-09-15 13:40 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2015-09-15 13:40 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2015-09-15 13:40 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2015-09-15 13:40 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2015-09-15 13:40 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2015-09-15 13:40 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2015-09-15 13:40 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2015-09-15 13:40 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2015-09-15 13:40 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2015-09-15 13:40 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2015-09-15 13:40 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2015-09-15 13:40 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2015-09-15 13:40 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2015-09-15 13:40 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2015-09-15 13:40 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2015-09-15 13:40 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2015-09-15 13:40 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2015-09-15 13:40 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2015-09-15 13:40 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2015-09-15 13:40 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2015-09-15 13:40 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2015-09-15 13:40 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2015-09-15 13:40 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2015-09-15 13:40 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2015-09-15 13:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-09-15 13:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-09-15 13:40 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2015-09-15 13:40 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2015-09-15 13:40 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2015-09-15 13:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2015-09-15 13:40 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2015-09-15 13:40 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2015-09-15 13:40 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2015-09-15 13:40 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2015-09-15 13:40 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2015-09-15 13:40 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2015-09-15 13:40 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2015-09-15 13:40 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2015-09-15 13:40 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2015-09-15 13:40 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2015-09-15 13:40 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2015-09-15 13:40 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2015-09-15 13:40 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2015-09-15 13:40 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2015-09-15 13:40 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2015-09-15 13:40 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2015-09-15 13:40 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2015-09-15 13:40 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2015-09-15 13:40 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2015-09-15 13:40 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2015-09-15 13:40 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2015-09-15 13:40 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2015-09-15 13:40 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2015-09-15 13:40 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2015-09-15 13:40 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2015-09-15 13:40 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2015-09-15 13:40 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2015-09-15 13:40 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2015-09-15 13:40 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2015-09-15 13:40 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2015-09-15 13:37 - 2015-09-15 13:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-15 13:37 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-09-15 13:34 - 2015-09-15 13:34 - 00000000 ____D C:\Users\Alex\Tracing
2015-09-15 02:43 - 2015-09-27 01:40 - 00000000 ___DC C:\WINDOWS\Panther
2015-09-15 02:43 - 2015-09-15 01:48 - 00000000 __SHD C:\Recovery
2015-09-15 02:41 - 2015-09-15 02:41 - 22324656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 04048808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 03527168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-09-15 02:41 - 2015-09-15 02:41 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01087296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-09-15 02:41 - 2015-09-15 02:41 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00993104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-09-15 02:41 - 2015-09-15 02:41 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00918320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00609592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00442208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00413184 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00404480 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00373072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-09-15 02:41 - 2015-09-15 02:41 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00292856 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00247296 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00243800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPermissions.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00080720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-09-15 02:41 - 2015-09-15 02:41 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-09-15 02:41 - 2015-09-15 02:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-09-15 02:41 - 2015-09-15 02:41 - 00008847 _____ C:\WINDOWS\system32\ResPriHMImageList
2015-09-15 02:41 - 2015-09-15 02:41 - 00000000 ____D C:\Windows.old
2015-09-15 02:38 - 2015-09-15 02:38 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-09-15 02:09 - 2015-09-16 15:01 - 00002397 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-09-15 02:09 - 2015-09-15 02:09 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-09-15 02:07 - 2015-09-15 02:07 - 00000000 ____D C:\Users\Alex\AppData\Local\Publishers
2015-09-15 02:06 - 2015-09-15 02:08 - 00000000 ____D C:\Users\Alex\AppData\Local\Comms
2015-09-15 02:06 - 2015-09-15 02:06 - 00000020 ___SH C:\Users\Alex\ntuser.ini
2015-09-15 02:06 - 2015-09-15 02:06 - 00000000 ____D C:\Users\Alex\AppData\Local\TileDataLayer
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-09-15 01:58 - 2015-09-15 01:58 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-09-15 01:56 - 2015-10-01 23:04 - 01793546 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-15 01:56 - 2015-09-15 01:56 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-09-15 01:51 - 2015-09-15 01:51 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-09-15 01:49 - 2015-10-01 22:56 - 00000000 ____D C:\Users\Alex
2015-09-15 01:49 - 2015-09-15 02:06 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Vorlagen
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Startmenü
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Netzwerkumgebung
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Lokale Einstellungen
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Eigene Dateien
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Druckumgebung
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Musik
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Bilder
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Verlauf
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Anwendungsdaten
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 _SHDL C:\Users\Alex\Anwendungsdaten
2015-09-15 01:49 - 2015-09-15 01:49 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-09-15 01:49 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-09-15 01:49 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-15 01:49 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-09-15 01:49 - 2015-07-10 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-09-15 01:47 - 2015-09-27 01:46 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-09-15 01:47 - 2015-09-27 01:15 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-09-15 01:47 - 2015-09-27 01:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-09-15 01:47 - 2015-09-27 01:15 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-09-15 01:47 - 2015-09-15 01:50 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-15 01:47 - 2015-08-07 02:24 - 06873904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-09-15 01:47 - 2015-08-07 02:24 - 03492984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-09-15 01:47 - 2015-08-07 02:24 - 02558768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-09-15 01:47 - 2015-08-07 02:24 - 00937592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-09-15 01:47 - 2015-08-07 02:24 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-09-15 01:47 - 2015-08-07 02:24 - 00062584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-09-15 01:47 - 2015-08-03 12:04 - 05133709 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-09-15 01:47 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-09-15 01:46 - 2015-09-15 01:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-09-15 01:44 - 2015-09-15 01:45 - 00022831 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-09-15 01:30 - 2015-09-15 01:58 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-09-15 01:30 - 2015-09-15 01:58 - 00009528 _____ C:\WINDOWS\diagerr.xml
2015-09-15 01:04 - 2015-09-15 01:04 - 00000000 _____ C:\Recovery.txt
2015-09-15 00:39 - 2015-10-03 13:45 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-09-15 00:39 - 2015-09-15 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2015-09-15 00:39 - 2015-09-15 00:39 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2015-09-15 00:39 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2015-09-15 00:38 - 2015-07-09 19:11 - 00831664 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2015-09-15 00:38 - 2015-07-09 19:11 - 00226480 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klhk.sys
2015-09-15 00:38 - 2015-07-09 19:11 - 00159960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2015-09-15 00:35 - 2015-09-26 18:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-09-15 00:35 - 2015-09-15 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-09-15 00:35 - 2015-09-15 00:35 - 00000000 ____D C:\Program Files\WinRAR
2015-09-15 00:32 - 2015-10-03 15:46 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2015-09-15 00:32 - 2015-09-15 01:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-15 00:32 - 2015-09-15 00:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-15 00:32 - 2015-09-15 00:32 - 00000000 ____D C:\Users\Alex\AppData\Local\Steam
2015-09-15 00:32 - 2015-09-15 00:32 - 00000000 ____D C:\Users\Alex\AppData\Local\Skype
2015-09-15 00:32 - 2015-09-15 00:32 - 00000000 ____D C:\Users\Alex\AppData\Local\CEF
2015-09-15 00:32 - 2015-09-15 00:32 - 00000000 ____D C:\ProgramData\Skype
2015-09-15 00:31 - 2015-10-03 15:28 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-15 00:31 - 2015-09-15 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-09-15 00:30 - 2015-10-03 14:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-15 00:30 - 2015-10-03 14:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-15 00:30 - 2015-09-15 00:36 - 00000000 ____D C:\Users\Alex\AppData\Local\Mozilla
2015-09-15 00:30 - 2015-09-15 00:30 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-15 00:30 - 2015-09-15 00:30 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Mozilla
2015-09-15 00:29 - 2015-09-15 00:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Macromedia
2015-09-15 00:28 - 2015-09-15 00:28 - 00000000 __SHD C:\Users\Alex\AppData\LocalLow\EmieUserList
2015-09-15 00:28 - 2015-09-15 00:28 - 00000000 __SHD C:\Users\Alex\AppData\LocalLow\EmieSiteList
2015-09-15 00:28 - 2015-09-15 00:28 - 00000000 __SHD C:\Users\Alex\AppData\Local\EmieUserList
2015-09-15 00:28 - 2015-09-15 00:28 - 00000000 __SHD C:\Users\Alex\AppData\Local\EmieSiteList
2015-09-15 00:27 - 2015-09-15 00:27 - 00000000 ____D C:\Users\Alex\AppData\Local\GWX
2015-09-15 00:25 - 2015-09-15 01:56 - 00003710 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3928556769-3423849286-2940898189-1001
2015-09-15 00:22 - 2015-09-27 01:42 - 00000000 ____D C:\Users\Alex\OneDrive
2015-09-15 00:22 - 2015-09-15 01:55 - 00000000 ____D C:\WINDOWS\system32\NETGEAR
2015-09-15 00:21 - 2015-09-15 00:21 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Intel Corporation
2015-09-15 00:19 - 2015-09-27 01:17 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA Corporation
2015-09-15 00:19 - 2015-09-21 11:41 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore
2015-09-15 00:19 - 2015-09-18 02:23 - 00000000 ____D C:\Users\Alex\AppData\Local\Packages
2015-09-15 00:19 - 2015-09-18 01:44 - 00000000 ____D C:\Users\Alex\AppData\Local\PackageStaging
2015-09-15 00:19 - 2015-09-17 00:56 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA
2015-09-15 00:19 - 2015-09-15 00:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Adobe
2015-09-15 00:13 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Programme
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-09-15 00:07 - 2015-09-15 00:07 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-09-15 00:04 - 2015-09-15 00:04 - 00002324 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3928556769-3423849286-2940898189-500
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-03 15:47 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-03 13:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-03 04:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-10-02 19:37 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-10-02 19:36 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-10-01 23:05 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-01 23:04 - 2015-07-10 18:34 - 00772138 _____ C:\WINDOWS\system32\perfh007.dat
2015-10-01 23:04 - 2015-07-10 18:34 - 00154500 _____ C:\WINDOWS\system32\perfc007.dat
2015-10-01 22:56 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-01 22:55 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-01 22:54 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-09-27 01:46 - 2014-09-19 13:45 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-09-27 01:43 - 2015-07-10 14:20 - 00208744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-21 12:09 - 2014-09-19 12:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-20 21:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-09-18 20:11 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-09-15 18:12 - 2015-07-10 13:06 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-09-15 18:12 - 2015-07-10 13:06 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-15 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-09-15 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-09-15 13:36 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-09-15 13:34 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-09-15 02:43 - 2015-07-10 13:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-09-15 02:41 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-15 02:41 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-15 02:41 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-15 02:41 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-09-15 02:41 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-09-15 02:41 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-09-15 02:07 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-09-15 02:07 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-09-15 02:06 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-09-15 01:58 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Registration
2015-09-15 01:58 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT
2015-09-15 01:58 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default
2015-09-15 01:56 - 2015-07-10 13:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-09-15 01:56 - 2014-09-19 13:43 - 01699356 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-09-15 01:51 - 2015-07-10 11:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-09-15 01:51 - 2014-09-19 13:43 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-09-15 01:51 - 2014-09-19 12:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 10
2015-09-15 01:51 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-09-15 01:50 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\InputMethod
2015-09-15 01:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-09-15 01:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-09-15 01:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-09-15 01:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-09-15 01:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-09-15 01:49 - 2014-09-19 13:42 - 00000000 ____D C:\Program Files\Intel
2015-09-15 01:48 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-09-15 01:47 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Help
2015-09-15 01:30 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT
2015-09-15 00:35 - 2014-09-19 12:58 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2015-09-15 00:21 - 2014-09-19 12:58 - 00000000 ____D C:\ProgramData\Norton
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-10-02 13:59 - 2015-10-02 13:59 - 0045329 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2015-09-19 18:18 - 2015-09-19 18:18 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log
2015-09-19 18:18 - 2015-09-19 18:18 - 0000424 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-09-26 17:34
|
|
04.10.2015, 15:51
| #7 |
| /// the machine /// TB-Ausbilder | Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt sieht gut aus
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Auf einen Link geklickt, .exe Datei gedownloaded ABER nicht ausgeführt |
| .exe, .exe datei, 100%, angeboten, ausgeführt, datei, eingefangen, forum, gefangen, gefunde, geklickt, geleert, gen, getarnt, herunterladen, heulen, interesse, link, link geklickt, nichts, person, sofort, sonstige, virus |
Linear-Darstellung
