Windows 7 Professional x64 SP1: Maus macht sich selbständig

Dope · 15.02.2016, 13:40

Hallo liebe Trojaner-Board Community!
Ich finde ihr leistet super arbeit und würde euch bitten mir zu helfen.
Gestern abend hatte ich ein sehr komisches Erlebnis:
Meine Maus machte sich während des Surfens mit Firefox plötzlich selbstständig. Das ganze zweimal innerhalb von ca. 10 minuten. - Beim ersten mal dachte ich mir dabei noch nichts. - Als dann jedoch die Maus von der Mitte des Bildschirms runter auf das Desktop anzeigen Symbol gefahren ist und dann wieder ganz normal zurück auf die position wo die Maus vorhin war, wusste ich, hier geht etwas nicht mit rechten dingen zu. -> Hab dann den PC neu gestartet, seit dem ist nichts derartiges mehr aufgetreten.

Mein System (Win 7 Professional, SP1, x64) wurde erst neu aufgesetzt. Somit kommt mir das ganze noch viel komischer vor, da ich nur seriöse Software am Rechner habe.
Noch ne Info: während die Maus sich selbständig gemacht hat, hatte ich Cyberghost (VPN Software) am laufen. Hätte das nur gerne noch als Info angemerkt, obwohl ich nicht glaube, dass es etwas damit zu tun hat.
Bitdefender Scan läuft noch. Dieses Logfile werd ich sofort posten wenn er durch ist.

EDIT:
Logfiles sind zu lang. -> Ich hänge diese in einem .zip file an. Ansonsten bitte info wie ich die Logs anders zur verfügung stellen kann.

Dope · 16.02.2016, 15:09

Hier noch das Bitdefender Logfile (kein Fund):

Code:

ATTFilter

<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="C:\Program Files\Bitdefender\Bitdefender 2016\ondemand.xsl"?>
<ScanSession creator="Bitdefender Total Security 2016" name="System-Scan" installPath="C:\Program Files\Bitdefender\Bitdefender 2016\" creationDate="Dienstag, 16. Februar 2016 14:52:22" originalPath="C:\ProgramData\Bitdefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1455538393_1_01.xml" >
	<ScanSettings 
		statisticsRefreshInterval="1000"
		scanSpeed="1.000000"
		lowPriority="0"
		enableExclusions="1"
		enableTaskExclusions="0"
		scanAdware="1"
		scanSpyware="1"
		scanApplications="1"
		scanDialers="1"
		scanKeyloggers="1"
		scanFiles="1"
		scanAllFiles="1"
		scanProgramsOnly="0"
		useCustomPrograms="0"
		customPrograms=""
		scanUserDefined="0"
		scanPacked="1"
		scanArchives="1"
		useSmartScan="1"
		scanEmails="1"
		scanRootkits="0"
		scanAllRootkits="1"
		scanBoot="1"
		scanMemory="1"
		scanRegistry="1"
		quickScan="1"
		quickScanMemory="0"
		quickScanAutoruns="0"
		quickScanPlugins="1"
		scanCookies="1"
		shutdownAfter="0"
		passwordPrompt="0"
		onlyAllowedActions="1"
		deepArchiveScan="1"
		maxArchiveLevel="15"
		maxArchiveSize="0"
		infectedAction1="3"
		infectedAction2="7"
		suspectAction1="7"
		suspectAction2="1"
		rootkitAction="3"
		userDefinedExtensions=""
		scanPua="-1"
	>

		<ScanPaths>
			<path>C:\</path>
			<path>D:\</path>
			<path>F:\</path>
		</ScanPaths>

		<ExcludedPaths>
		</ExcludedPaths>

		<ExcludedExtensions>
		</ExcludedExtensions>

	</ScanSettings>

	<EngineSummary
		totalSignatures="6104377"
		/>

	<ScanSummary
		scannedArchives="112"
		scannedPacked="122"
		startTime="1455538393"
		duration="92346695"
	>

		<TypeSummary type="1"
			scanned="33"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="4"
			scanned="9"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="0"
			scanned="4304866"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="5"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="2"
			scanned="4210"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="3"
			scanned="1728"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="6"
			scanned="1205"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

	</ScanSummary>

	<ScanDetails>
		<UnresolvedDetails>
		</UnresolvedDetails>

		<ResolvedDetails>
		</ResolvedDetails>

		<IgnoredDetails>
		</IgnoredDetails>

		<QuickScanDetails>
		</QuickScanDetails>
		<NotScannedDetails
			skipped="1883472"
			ioerrors="7"
			archiveBombs="0"
			passwordProtected="165"
		>

			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RMHS6DP.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/DIFxAPI.dll" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{7a2faf04-d35e-11e5-bb23-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\core.nfo" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/install.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{0edde1d3-d34e-11e5-bb3d-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part04.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/OpenSourceAnnouncement.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/SamsungRapidFSFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{6bd698ac-d348-11e5-9db0-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/addfilter.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{2cb04384-d358-11e5-bb02-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part08.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Help.pdf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/addfilter.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/LIMITATIONS.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/SamsungRapidFSFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/OpenSourceAnnouncement.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/addfilter.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/RELEASE_NOTES.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/SamsungRapidDiskFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/dp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/amd64/SamsungRapidDiskFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/SamsungRapidDiskFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part05.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/amd64/SamsungRapidFSFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/Tools/RAPIDCollectLogs/RAPIDCollectLogs.bat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/SamsungRapidSvc.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/DIFxAPI.dll" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/rp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/SamsungRapidApp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/CacheFilter/SamsungRapidFSFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part04.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/rp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/OpenSourceAnnouncement.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/rp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/Tools/RAPIDCollectLogs/RAPIDCollectLogs.bat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/SamsungRapidSvc.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/SamsungRapidApp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_amd64/RAPID/Tools/RAPIDCollectLogs/README.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/amd64/SamsungRapidDiskFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/SamsungRapidDiskFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/dp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/DIFxAPI.dll" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/SamsungRapidDiskFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/i386/SamsungRapidDiskFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/SamsungRapidFSFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/i386/SamsungRapidFSFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  003.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/SamsungRapidApp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/rp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/CacheFilter/SamsungRapidFSFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/SamsungRapidDiskFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/amd64/SamsungRapidFSFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/OpenSourceAnnouncement.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win7_i386/RAPID/Tools/RAPIDCollectLogs/README.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/SamsungRapidDiskFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/dp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/SamsungRapidDiskFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/SamsungRapidFSFltr.cat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/dp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/CacheFilter/SamsungRapidFSFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/Tools/RAPIDCollectLogs/RAPIDCollectLogs.bat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/SamsungRapidSvc.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/addfilter.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_amd64/RAPID/Tools/RAPIDCollectLogs/README.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  001.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/DIFxAPI.dll" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/i386/SamsungRapidDiskFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part05.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/i386/SamsungRapidFSFltr.sys" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/SamsungRapidApp.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/SamsungRapidDiskFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/CacheFilter/SamsungRapidFSFltr.inf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/OpenSourceAnnouncement.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/SamsungRapidSvc.exe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part10.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/Tools/RAPIDCollectLogs/RAPIDCollectLogs.bat" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\Program Files (x86)\Samsung\Samsung Magician\Rapid\Rapid.dll=&gt;(ZIP Sfx r)=&gt;Rapid/Win8_i386/RAPID/Tools/RAPIDCollectLogs/README.txt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{08a1321e-d359-11e5-bb2f-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="C:\System Volume Information\{08a13204-d359-11e5-bb2f-0090f5cc98d1}{3808876b-c176-4e48-b7ae-04046e6cc752}" threatType="0" threatName="" action="1" allActions="" initialStatus="0" finalStatus="0" failReason="9" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part07.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RQ24U8T.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RFVX5IV.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part12.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RA4YA40.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Documents\USB - Stick sicherung\Windows 7\1219_bac_1.1_dx11-cr.7z.001=&gt;Binaries/Win32/dfe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RRKU8BD.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RN34KZY.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part04.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Downloads\jd\hanhd-s01e06.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Downloads\jd\Hacking\3645600302_FR-NETWORKHACKING2.7z" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21e.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Documents\USB - Stick sicherung\Windows 7\1219_bac_1.1_dx11-cr.7z=&gt;Binaries/Win32/dfe" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part05.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Downloads\jd\hanhd-s01e06.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Downloads\jd\hanhd-s01e06.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$R4G8U4E.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\Downloads\jd\hanhd-s01e06.part04.rar.part" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$R0IZ4G7.rar=&gt;Asterix der Gallier - 720p, DTS 2.0.mkv" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part06.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RQ6MQIL.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="D:\$RECYCLE.BIN\S-1-5-21-2374812028-3489065733-3600338209-1000\$RQVVM97.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part10.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part09.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part07.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part11.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part06.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part10.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part04.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part06.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part07.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part08.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part04.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part08.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part07.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part09.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part11.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part09.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part10.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part08.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part01.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part11.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part05.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part03.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part10.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part07.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e04.part06.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part09.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e03.part05.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part12.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part06.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e01.part09.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e05.part08.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\Medien\hanhd-s01e02.part02.rar" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  002.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  004.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  005.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  006.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  007.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  008.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  009.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  010.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  011.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  012.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  013.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  014.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  015.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  016.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga219.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21a.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21b.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21c.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21d.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21f.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\acds20219g_spread.dl.am.rar=&gt;stuff\ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\cr-ga21g.zip" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\Data1_1.cab=&gt;WebSearchENU.pdf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\ITM.rar=&gt;ITM=&gt;sem 4=&gt;S-etnwicklung=&gt;C-Pruefung.rar=&gt;Zusammenfassung fuer Mitarbeitsueberpruefung.odt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\ITM.rar=&gt;ITM=&gt;sem 4=&gt;S-etnwicklung=&gt;C-Pruefung.rar=&gt;1mitarbeit.c" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
		</NotScannedDetails>
	</ScanDetails>

</ScanSession>

cosinus · 16.02.2016, 15:25

Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Dope · 16.02.2016, 17:56

Hallo Cosinus, danke für die Antwort. Hier wie gewünscht der FRST log gesplittet:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016
durchgeführt von Dominik (Administrator) auf MRLOVE (15-02-2016 13:05:30)
Gestartet von D:\Downloads\exes
Geladene Profile: Dominik (Verfügbare Profile: Dominik)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Locktime Software) C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe
(Bison Inc.) C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Flux Software LLC) C:\Users\Dominik\AppData\Local\FluxSoftware\Flux\flux.exe
(Locktime Software) C:\Program Files\Locktime Software\NetLimiter 4\NLClientApp.exe
(Tresorit) C:\Users\Dominik\AppData\Local\Tresorit\v0.8\Tresorit.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Osiris Development) C:\Program Files\BatteryBar\BatteryBar.exe
(Telegram Messenger LLP) C:\Users\Dominik\AppData\Roaming\Telegram Desktop\Telegram.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AppWork GmbH) C:\Users\Dominik\AppData\Local\JDownloader v2.0\JDownloader2.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [KeepSafe] => C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe [38728 2011-10-21] (Authentec)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1643232 2016-02-01] (Bitdefender)
HKLM\...\Run: [DeLay] => C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe [53248 2008-12-05] (Bison Inc.)
HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2817320 2011-07-28] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-25] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2745544 2016-01-09] (Dominik Reichl)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Run: [f.lux] => C:\Users\Dominik\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Run: [NetLimiter] => C:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe [52656 2015-10-10] (Locktime Software)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 5\CyberGhost.exe [426600 2016-01-11] (CyberGhost S.R.L.)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Run: [Tresorit] => C:\Users\Dominik\AppData\Local\Tresorit\v0.8\Tresorit.exe [14100160 2016-02-08] (Tresorit)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Run: [KeePass Password Safe 2] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2745544 2016-01-09] (Dominik Reichl)
HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\MountPoints2: {ae0ba967-d195-11e5-9d21-0090f5cc98d1} - "G:\Install Navigator.exe"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177600 2015-11-25] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155792 2015-11-25] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {BC6D10E6-AE59-4cef-83DB-FD4C9BC7B7F2} => C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvns.dll [2011-10-21] (Authentec)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {93BB455E-3D52-4fba-9733-E5103B30FC12} => C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvns.dll [2011-10-21] (Authentec)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk [2016-02-12]
ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe ()
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BatteryBar.lnk [2016-02-13]
ShortcutTarget: BatteryBar.lnk -> C:\Program Files\BatteryBar\BatteryBar.exe (Osiris Development)
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2016-02-12]
ShortcutTarget: Telegram.lnk -> C:\Users\Dominik\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram Messenger LLP)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{E9BC033C-72D5-4B9F-8AA5-E9F6969E3FE0}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-01-21] (Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-02-13] (Microsoft Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\AuthenTec TrueSuite\IEBHO.dll [2011-11-03] (AuthenTec Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-02-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-13] (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-01-21] (Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2016-02-13] (Microsoft Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll [2011-11-03] (AuthenTec Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2016-02-13] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-13] (Microsoft Corporation)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-01-21] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-01-21] (Bitdefender)
Toolbar: HKU\S-1-5-21-2374812028-3489065733-3600338209-1000 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-01-21] (Bitdefender)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-02-13] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2016-02-13] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default
FF DefaultSearchEngine: DuckDuckGo
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-02-13] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-02-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2016-02-13] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Extension: KeeFox - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\extensions\keefox@chris.tomlinson [2016-02-12]
FF Extension: NoScript - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-02-14]
FF Extension: Blur - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\Extensions\donottrackplus@abine.com.xpi [2016-02-12]
FF Extension: TrackMeNot - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2016-02-12]
FF Extension: uBlock Origin - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\Extensions\uBlock0@raymondhill.net.xpi [2016-02-14]
FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-02-02]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-02-02] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eioaimhbaiomogmbefipmnbpjmefhhoc] - C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx [2011-09-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2809072 2016-01-20] (Microsoft Corporation)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [299848 2011-11-03] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
R2 nlsvc; C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe [322480 2015-10-10] (Locktime Software)
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35840 2012-06-28] () [Datei ist nicht signiert]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [857288 2015-11-09] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [135176 2016-01-21] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-02-01] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1622512 2016-01-22] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [806344 2016-01-22] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160032 2015-04-29] (BitDefender LLC)
R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [271808 2015-10-22] (Bitdefender)
R2 nldrv; C:\Program Files\Locktime Software\NetLimiter 4\nldrv.sys [120720 2015-10-10] (Locktime Software)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-15 12:56 - 2016-02-15 13:05 - 00000000 ____D C:\FRST
2016-02-14 21:54 - 2016-02-14 21:54 - 00000000 ____D C:\Windows\CheckSur
2016-02-14 21:29 - 2015-07-16 20:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-02-14 21:29 - 2015-07-16 20:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-02-14 21:29 - 2015-07-16 20:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-02-14 21:29 - 2015-07-16 20:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-02-14 21:29 - 2015-07-16 20:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-02-14 21:29 - 2015-07-16 20:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-02-14 21:29 - 2015-07-11 14:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-02-14 21:23 - 2015-12-20 19:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-14 21:23 - 2015-12-20 19:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-14 21:23 - 2015-12-20 15:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-14 21:23 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-02-14 21:20 - 2016-02-14 21:20 - 00000000 ____D C:\Users\Dominik\AppData\Local\GWX
2016-02-14 20:42 - 2016-02-14 20:42 - 00000000 ____D C:\Users\Dominik\AppData\Temp
2016-02-14 20:36 - 2016-02-14 20:36 - 00000000 ____H C:\Users\Dominik\Documents\Default.rdp
2016-02-14 19:22 - 2016-02-14 19:22 - 00003128 _____ C:\Windows\System32\Tasks\Speedfan autostart
2016-02-14 18:29 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-02-14 18:29 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-02-14 18:29 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-02-14 18:29 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2016-02-14 18:29 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2016-02-14 18:29 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-02-14 18:29 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2016-02-14 18:29 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2016-02-14 18:29 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-02-14 18:29 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-02-14 18:23 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-02-14 18:23 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2016-02-14 18:23 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2016-02-14 18:23 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2016-02-14 16:26 - 2016-02-14 16:26 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-02-14 16:26 - 2016-02-14 16:26 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-14 13:00 - 2016-02-14 13:00 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\dvdcss
2016-02-14 11:17 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-14 11:17 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-14 11:17 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-14 11:17 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-14 11:17 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-14 11:17 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-14 11:17 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-14 11:17 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-14 11:17 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-02-14 11:17 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-02-14 11:17 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-14 11:17 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-14 11:17 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-14 11:17 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-14 11:15 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-14 11:15 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-14 11:15 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-14 11:15 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-14 11:15 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-14 11:15 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-14 11:15 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-14 11:15 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-14 11:15 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-14 11:15 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-14 11:15 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-14 11:15 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-14 11:15 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-14 11:15 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-14 11:15 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-14 11:15 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-14 11:15 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-14 11:15 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-14 11:15 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-14 11:15 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-14 11:15 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-14 11:15 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-14 11:15 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-14 11:15 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-14 11:15 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-02-14 11:15 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-14 11:15 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-02-14 11:15 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-14 11:15 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-14 11:15 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-14 11:15 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-02-14 11:15 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-14 11:15 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-14 11:15 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-14 11:15 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-14 11:15 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-14 11:15 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-14 11:15 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-14 11:15 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-02-14 11:15 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-14 11:15 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-14 11:15 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-14 11:15 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-14 11:15 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-02-14 11:15 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-14 11:15 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-14 11:15 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-14 11:15 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-14 11:15 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-02-14 11:15 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-14 11:15 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-14 11:15 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-14 11:08 - 2016-01-16 20:06 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-14 11:08 - 2016-01-16 19:54 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-14 11:08 - 2016-01-11 15:08 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-14 11:08 - 2016-01-11 15:08 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-14 11:08 - 2016-01-11 15:08 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-14 11:08 - 2016-01-11 15:08 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-14 11:08 - 2016-01-11 15:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-14 11:08 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-02-14 11:08 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-02-14 11:08 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-02-14 11:08 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-02-14 11:08 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-02-14 11:08 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-02-14 11:08 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-02-14 11:08 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-02-14 11:08 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-02-14 11:08 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-02-14 11:08 - 2015-12-08 20:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-02-14 11:08 - 2015-12-08 20:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-02-14 11:08 - 2015-12-08 20:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-02-14 11:08 - 2015-12-08 20:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-02-14 11:08 - 2015-12-08 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-02-14 11:08 - 2015-12-08 20:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-02-14 11:08 - 2015-12-08 19:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-02-14 11:08 - 2015-12-08 19:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-02-14 11:08 - 2015-12-08 19:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-02-14 11:08 - 2015-11-16 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-02-14 11:08 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-02-14 11:08 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-02-14 11:08 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-02-14 11:08 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-02-14 11:08 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-02-14 11:08 - 2015-07-30 19:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-02-14 11:08 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-02-14 11:08 - 2015-06-03 21:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-02-14 11:08 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-02-14 11:08 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-02-14 11:08 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-02-14 11:08 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-02-14 11:08 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-02-14 11:08 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-02-14 11:08 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-02-14 11:08 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-02-14 11:08 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-02-14 11:08 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-02-14 11:08 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-02-14 11:08 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-02-14 11:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-02-14 11:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-02-14 11:08 - 2012-07-06 21:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-02-14 11:08 - 2011-04-28 04:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-02-14 11:08 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-02-14 11:08 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-02-14 11:08 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-02-14 11:08 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-02-14 11:08 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-02-14 11:08 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-02-14 11:08 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-02-14 11:08 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-02-14 11:08 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-02-14 11:08 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-02-14 11:07 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-02-14 11:07 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-02-14 10:52 - 2016-02-14 10:52 - 00000000 ____D C:\Users\Dominik\AppData\LocalLow\Adobe
2016-02-14 10:52 - 2016-02-14 10:52 - 00000000 ____D C:\Users\Dominik\AppData\Local\CEF
2016-02-14 00:42 - 2016-02-14 00:43 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-14 00:42 - 2016-02-14 00:42 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-02-14 00:42 - 2016-02-14 00:42 - 00000000 ____D C:\ProgramData\bdch
2016-02-14 00:27 - 2016-02-14 00:29 - 00000000 ____D C:\Windows\system32\MRT
2016-02-14 00:27 - 2016-02-14 00:27 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-14 00:13 - 2015-07-30 14:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 00:13 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 00:11 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2016-02-14 00:06 - 2016-02-14 00:06 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2016-02-14 00:06 - 2016-02-14 00:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-02-14 00:06 - 2016-02-14 00:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-02-14 00:06 - 2016-02-14 00:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-02-14 00:06 - 2016-02-14 00:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-02-14 00:06 - 2016-02-14 00:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-02-14 00:06 - 2016-02-14 00:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-02-13 23:43 - 2016-02-13 23:43 - 00000000 ____D C:\Program Files\AuthenTec
2016-02-13 23:14 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-02-13 23:14 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-02-13 23:14 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-02-13 23:14 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-02-13 23:14 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-02-13 23:14 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-02-13 23:14 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-02-13 23:14 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-02-13 23:02 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-02-13 23:02 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-02-13 23:02 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-02-13 23:02 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-02-13 23:02 - 2013-01-13 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-02-13 23:02 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-02-13 23:02 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-02-13 23:02 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-02-13 23:02 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-02-13 23:02 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-02-13 23:02 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-02-13 23:02 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-02-13 23:02 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-02-13 23:02 - 2013-01-13 20:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-02-13 23:02 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-02-13 23:02 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-02-13 23:02 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-02-13 23:02 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-02-13 23:02 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-02-13 23:02 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-02-13 23:02 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-02-13 23:02 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-02-13 23:02 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-02-13 23:02 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-02-13 22:56 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-02-13 22:56 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-02-13 22:56 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-02-13 22:56 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-02-13 22:56 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-02-13 22:56 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-02-13 22:56 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-02-13 22:56 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-02-13 22:46 - 2015-07-15 19:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-02-13 22:46 - 2015-07-15 19:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-02-13 22:46 - 2015-07-15 19:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-02-13 22:46 - 2015-07-15 04:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-02-13 22:46 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-02-13 22:46 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-02-13 22:46 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-02-13 22:46 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-02-13 22:46 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-02-13 22:46 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-02-13 22:46 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-02-13 22:46 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-02-13 22:45 - 2016-01-11 20:05 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-13 22:45 - 2016-01-11 20:05 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-13 22:45 - 2016-01-11 20:05 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-13 22:45 - 2016-01-11 19:52 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-13 22:45 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-13 22:45 - 2016-01-11 19:26 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-13 22:45 - 2016-01-11 19:24 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-13 22:45 - 2016-01-11 19:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-13 22:45 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-13 22:45 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-13 22:45 - 2016-01-11 19:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-13 22:45 - 2016-01-11 19:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-13 22:45 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-13 22:45 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-13 22:45 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-13 22:45 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-13 22:45 - 2016-01-06 20:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-13 22:45 - 2016-01-06 20:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-13 22:45 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-02-13 22:45 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-02-13 22:45 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-02-13 22:45 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-02-13 22:45 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-02-13 22:45 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-02-13 22:45 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-02-13 22:45 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-02-13 22:45 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-02-13 22:45 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-02-13 22:45 - 2015-08-05 18:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-02-13 22:45 - 2015-08-05 18:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-02-13 22:45 - 2015-06-03 21:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-02-13 22:45 - 2015-06-03 21:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-02-13 22:45 - 2015-06-03 21:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-02-13 22:45 - 2015-05-25 19:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-02-13 22:45 - 2015-05-25 19:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-02-13 22:45 - 2015-05-25 19:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-02-13 22:45 - 2015-05-25 19:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-02-13 22:45 - 2015-05-25 19:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-02-13 22:45 - 2015-05-25 19:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-02-13 22:45 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-02-13 22:45 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-02-13 22:45 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-02-13 22:45 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-02-13 22:45 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-02-13 22:45 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-02-13 22:45 - 2015-04-29 19:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-02-13 22:45 - 2015-04-29 19:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-02-13 22:45 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-02-13 22:45 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-02-13 22:45 - 2015-04-29 19:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-02-13 22:45 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-02-13 22:45 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-02-13 22:45 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-02-13 22:45 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-02-13 22:45 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-02-13 22:45 - 2015-04-18 04:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-02-13 22:45 - 2015-04-18 03:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-02-13 22:45 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-02-13 22:45 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-02-13 22:45 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-02-13 22:45 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-02-13 22:45 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-02-13 22:45 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-02-13 22:45 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-02-13 22:45 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-02-13 22:45 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-02-13 22:45 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-02-13 22:45 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-02-13 22:45 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-02-13 22:45 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-02-13 22:45 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-02-13 22:45 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-02-13 22:45 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-02-13 22:45 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-02-13 22:45 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-02-13 22:45 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-02-13 22:45 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-02-13 22:45 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-02-13 22:45 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-02-13 22:45 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-02-13 22:45 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-02-13 22:45 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-02-13 22:45 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-02-13 22:45 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-02-13 22:45 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-02-13 22:45 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-02-13 22:45 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-02-13 22:45 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-02-13 22:45 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-02-13 22:45 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-02-13 22:45 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-02-13 22:45 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-02-13 22:45 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-02-13 22:45 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-02-13 22:45 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-02-13 22:45 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-02-13 22:45 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-02-13 22:45 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-02-13 22:45 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-02-13 22:45 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-02-13 22:45 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-02-13 22:44 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-13 22:44 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-13 22:44 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-13 22:44 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-13 22:44 - 2015-12-16 19:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-02-13 22:44 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-02-13 22:44 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-02-13 22:44 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-02-13 22:44 - 2015-12-16 19:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-02-13 22:44 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-02-13 22:44 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-02-13 22:44 - 2015-12-16 19:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-02-13 22:44 - 2015-12-16 15:38 - 00419928 _____ C:\Windows\SysWOW64\locale.nls

Dope · 16.02.2016, 17:57

FRST log part 2:

Code:

ATTFilter

2016-02-13 22:44 - 2015-12-16 15:37 - 00419928 _____ C:\Windows\system32\locale.nls
2016-02-13 22:44 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-02-13 22:44 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-02-13 22:44 - 2015-11-14 00:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-02-13 22:44 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-02-13 22:44 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-02-13 22:44 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-02-13 22:44 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-02-13 22:44 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-02-13 22:44 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-02-13 22:44 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-02-13 22:44 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-02-13 22:44 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-02-13 22:44 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-02-13 22:44 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-02-13 22:44 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-02-13 22:44 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-02-13 22:44 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-02-13 22:44 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-02-13 22:44 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-02-13 22:44 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-02-13 22:44 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-02-13 22:44 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-02-13 22:44 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-02-13 22:44 - 2015-08-05 18:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-02-13 22:44 - 2015-07-23 01:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-02-13 22:44 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-02-13 22:44 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-02-13 22:44 - 2015-07-22 17:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-02-13 22:44 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-02-13 22:44 - 2015-07-09 18:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-02-13 22:44 - 2015-07-09 18:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-02-13 22:44 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-02-13 22:44 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-02-13 22:44 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-02-13 22:44 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-02-13 22:44 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-02-13 22:44 - 2015-07-01 21:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-02-13 22:44 - 2015-07-01 21:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-02-13 22:44 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-02-13 22:44 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-02-13 22:44 - 2015-06-25 11:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-02-13 22:44 - 2015-06-25 11:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-02-13 22:44 - 2015-06-15 22:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-02-13 22:44 - 2015-06-15 22:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-02-13 22:44 - 2015-06-15 22:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-02-13 22:44 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-02-13 22:44 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-02-13 22:44 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-02-13 22:44 - 2015-06-15 22:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-02-13 22:44 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-02-13 22:44 - 2015-06-02 01:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-02-13 22:44 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-02-13 22:44 - 2015-04-27 20:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-02-13 22:44 - 2015-04-27 20:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-02-13 22:44 - 2015-04-27 20:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-02-13 22:44 - 2015-04-27 20:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-02-13 22:44 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-02-13 22:44 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-02-13 22:44 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-02-13 22:44 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-02-13 22:44 - 2015-04-13 04:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-02-13 22:44 - 2015-02-18 08:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-02-13 22:44 - 2015-02-18 08:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-02-13 22:44 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-02-13 22:44 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-02-13 22:44 - 2015-01-29 04:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-02-13 22:44 - 2015-01-29 04:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-02-13 22:44 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-02-13 22:44 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-02-13 22:44 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-02-13 22:44 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-02-13 22:44 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-02-13 22:44 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-02-13 22:44 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-02-13 22:44 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-02-13 22:44 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-02-13 22:44 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-02-13 22:44 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-02-13 22:44 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-02-13 22:44 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-02-13 22:44 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-02-13 22:44 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-02-13 22:44 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-02-13 22:44 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-02-13 22:44 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-02-13 22:44 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-02-13 22:44 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-02-13 22:44 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-02-13 22:44 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-02-13 22:44 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-02-13 22:44 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-02-13 22:44 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-02-13 22:44 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-02-13 22:44 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-02-13 22:44 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-02-13 22:44 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-02-13 22:44 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-02-13 22:44 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-02-13 22:44 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-02-13 22:44 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-02-13 22:44 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-02-13 22:44 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-02-13 22:44 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-02-13 22:44 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-02-13 22:44 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-02-13 22:44 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-02-13 22:44 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-02-13 22:44 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-02-13 22:44 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-02-13 22:44 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-02-13 22:44 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-02-13 22:44 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-02-13 22:44 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-02-13 22:44 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-02-13 22:44 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-02-13 22:44 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-02-13 22:44 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-02-13 22:44 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-02-13 22:44 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-02-13 22:44 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-02-13 22:44 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-02-13 22:44 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-02-13 22:44 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-02-13 22:44 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-02-13 22:44 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-02-13 22:44 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-02-13 22:44 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-02-13 22:44 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-02-13 22:44 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-02-13 22:44 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-02-13 22:44 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-02-13 22:44 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-02-13 22:44 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-02-13 22:44 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-02-13 22:44 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-02-13 22:44 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-02-13 22:44 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-02-13 22:44 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-02-13 22:44 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-02-13 22:44 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-02-13 22:44 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-02-13 22:44 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-02-13 22:44 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-02-13 22:44 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-02-13 22:44 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-02-13 22:44 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-02-13 22:44 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-02-13 22:44 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-02-13 22:44 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-02-13 22:44 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-02-13 22:44 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-02-13 22:44 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-02-13 22:44 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-02-13 22:44 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-02-13 22:44 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-02-13 22:44 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-02-13 22:44 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-02-13 22:44 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-02-13 22:44 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-02-13 22:44 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-02-13 22:44 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-02-13 22:44 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-02-13 22:43 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-13 22:43 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-13 22:43 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-13 22:43 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-13 22:43 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-02-13 22:43 - 2016-01-22 07:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-13 22:43 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-13 22:43 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-13 22:43 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-13 22:43 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-13 22:43 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-13 22:43 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-02-13 22:43 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-13 22:43 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-13 22:43 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-13 22:43 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-13 22:43 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-13 22:43 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-13 22:43 - 2016-01-22 07:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-13 22:43 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-13 22:43 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-13 22:43 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-13 22:43 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-13 22:43 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-13 22:43 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-13 22:43 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-13 22:43 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-02-13 22:43 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-02-13 22:43 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-13 22:43 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-13 22:43 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-02-13 22:43 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-13 22:43 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-13 22:43 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-02-13 22:43 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 06:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-13 22:43 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-13 22:43 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-02-13 22:43 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-13 22:43 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-02-13 22:43 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-13 22:43 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-13 22:43 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-13 22:43 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-13 22:43 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-13 22:43 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-13 22:43 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-02-13 22:43 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-02-13 22:43 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-02-13 22:43 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-02-13 22:43 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-02-13 22:43 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-13 22:43 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-13 22:43 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-02-13 22:43 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-02-13 22:43 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-02-13 22:43 - 2015-04-11 04:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-02-13 22:43 - 2015-02-25 04:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-02-13 22:43 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-02-13 22:43 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-02-13 22:43 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-02-13 22:43 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-02-13 22:43 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-02-13 22:43 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-02-13 22:43 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-02-13 22:43 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-02-13 22:43 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-02-13 22:43 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-02-13 22:43 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-02-13 22:43 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-02-13 22:43 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-02-13 22:43 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-02-13 22:43 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-02-13 22:43 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-02-13 22:43 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-02-13 22:43 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-02-13 22:42 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-02-13 22:42 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-02-13 22:42 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-02-13 22:42 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-02-13 22:42 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-02-13 22:42 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-02-13 22:42 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-02-13 22:42 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-02-13 22:42 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-02-13 22:42 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-02-13 22:42 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-02-13 22:42 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-02-13 22:42 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-02-13 22:42 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-02-13 22:42 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-02-13 22:42 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-02-13 22:42 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-02-13 22:42 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-02-13 22:42 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-02-13 22:42 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-02-13 22:42 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-02-13 22:42 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-02-13 22:42 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-02-13 22:42 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-02-13 22:42 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-02-13 22:42 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-02-13 22:42 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-02-13 22:42 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-02-13 22:42 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-02-13 22:42 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-02-13 22:42 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-02-13 22:42 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-02-13 22:42 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-02-13 22:42 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-02-13 22:42 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-02-13 22:42 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-02-13 22:42 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-02-13 22:42 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-02-13 22:42 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-02-13 22:42 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-02-13 22:41 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-02-13 22:41 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-02-13 22:41 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-02-13 22:41 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-02-13 22:41 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-02-13 22:41 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-02-13 22:41 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-02-13 22:41 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-02-13 22:41 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-02-13 22:39 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-02-13 22:39 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-02-13 22:38 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-02-13 22:37 - 2015-12-08 22:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-02-13 22:37 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-02-13 22:37 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-02-13 22:37 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-02-13 22:37 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-02-13 22:37 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-02-13 22:37 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-02-13 22:37 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-02-13 22:37 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-02-13 22:37 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-02-13 22:37 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-02-13 22:37 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-02-13 22:37 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-02-13 22:37 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-02-13 22:37 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-02-13 22:37 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-02-13 22:37 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-02-13 22:37 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-02-13 22:37 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-02-13 22:29 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-02-13 22:29 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-02-13 22:29 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-02-13 22:29 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-02-13 22:28 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-02-13 22:28 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-02-13 22:28 - 2015-12-08 20:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-02-13 22:28 - 2015-12-08 20:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-02-13 22:28 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-02-13 22:28 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-02-13 22:28 - 2015-08-27 19:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-02-13 22:28 - 2015-08-27 19:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-02-13 22:28 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-02-13 22:28 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-02-13 22:28 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-02-13 22:28 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-02-13 22:28 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-02-13 22:28 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-02-13 22:28 - 2015-03-04 05:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-02-13 22:28 - 2015-03-04 05:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-02-13 22:28 - 2015-03-04 05:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-02-13 22:25 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-02-13 22:25 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-02-13 22:25 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-02-13 22:25 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-13 22:25 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-02-13 22:24 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-02-13 22:24 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-02-13 22:24 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-02-13 22:24 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-02-13 22:23 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-02-13 22:23 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-02-13 22:23 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-02-13 22:23 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-02-13 22:23 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-02-13 22:23 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-02-13 22:23 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-02-13 22:23 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-02-13 22:23 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-02-13 22:23 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-02-13 22:23 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-02-13 22:23 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-02-13 21:05 - 2016-02-13 21:05 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-02-13 20:37 - 2016-02-13 20:37 - 00000000 ____D C:\Program Files\BatteryBar
2016-02-13 18:28 - 2016-02-13 21:06 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-13 18:28 - 2016-02-13 18:28 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-13 18:25 - 2016-02-13 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-02-13 18:12 - 2015-09-02 04:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-02-13 18:12 - 2015-09-02 04:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-02-13 18:12 - 2015-09-02 04:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-02-13 18:12 - 2015-09-02 04:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-02-13 18:12 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-02-13 18:12 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-02-13 18:12 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-02-13 18:12 - 2015-09-02 03:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-02-13 18:12 - 2015-09-02 02:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-02-13 18:12 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-02-13 18:12 - 2015-04-24 19:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-02-13 18:12 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-02-13 18:09 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-02-13 18:09 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-02-13 18:09 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-02-12 17:42 - 2016-02-12 17:42 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-02-12 17:35 - 2016-02-13 18:21 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-02-12 17:29 - 2016-02-12 17:29 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-02-12 17:29 - 2016-02-12 17:29 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-12 17:29 - 2016-02-12 17:29 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-02-12 17:29 - 2016-02-12 17:29 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Telegram Desktop
2016-02-12 17:29 - 2016-02-12 17:29 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2016-02-12 17:28 - 2016-02-12 19:47 - 00000000 ____D C:\ProgramData\Adobe
2016-02-12 17:28 - 2016-02-12 17:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-12 17:15 - 2016-02-14 13:00 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\vlc
2016-02-12 17:14 - 2016-02-12 17:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-02-12 17:14 - 2016-02-12 17:14 - 00000000 ____D C:\Program Files\VideoLAN
2016-02-12 17:04 - 2016-02-12 17:04 - 00000000 ___HD C:\Users\Dominik\.tresorit
2016-02-12 17:02 - 2016-02-12 17:02 - 00000000 ____D C:\Users\Dominik\My Tresors
2016-02-12 16:59 - 2016-02-12 16:59 - 00002147 _____ C:\Users\Dominik\Desktop\Tresorit.lnk
2016-02-12 16:59 - 2016-02-12 16:59 - 00002094 _____ C:\Users\Dominik\Desktop\JDownloader 2.lnk
2016-02-12 16:59 - 2016-02-12 16:59 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tresorit
2016-02-12 16:59 - 2016-02-12 16:59 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2016-02-12 16:59 - 2016-02-12 16:59 - 00000000 ____D C:\Users\Dominik\AppData\Local\Tresorit
2016-02-12 16:57 - 2016-02-15 12:51 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Notepad++
2016-02-12 16:57 - 2016-02-15 11:44 - 00000000 ____D C:\Users\Dominik\AppData\Local\JDownloader v2.0
2016-02-12 16:57 - 2016-02-12 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-02-12 16:57 - 2016-02-12 16:57 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-02-12 16:54 - 2016-02-14 10:52 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Adobe
2016-02-12 16:54 - 2016-02-12 16:54 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Macromedia
2016-02-12 16:54 - 2016-02-12 16:54 - 00000000 ____D C:\Users\Dominik\AppData\Local\Macromedia
2016-02-12 16:54 - 2016-02-12 16:54 - 00000000 ____D C:\Users\Dominik\AppData\Local\Geckofx
2016-02-12 16:53 - 2016-02-12 19:33 - 00000000 ____D C:\Users\Dominik\AppData\Local\CyberGhost
2016-02-12 16:53 - 2016-02-12 16:53 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-12 16:53 - 2016-02-12 16:53 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-12 16:53 - 2016-02-12 16:53 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-02-12 16:53 - 2016-02-12 16:53 - 00000000 ____D C:\Windows\system32\Macromed
2016-02-12 16:53 - 2016-02-12 16:53 - 00000000 ____D C:\Program Files\TAP-Windows
2016-02-12 16:52 - 2016-02-14 10:52 - 00000000 ____D C:\Users\Dominik\AppData\Local\Adobe
2016-02-12 16:52 - 2016-02-12 16:53 - 00000000 ____D C:\Program Files\CyberGhost 5
2016-02-12 16:52 - 2016-02-12 16:52 - 00001728 _____ C:\Users\Dominik\Desktop\CyberGhost 5.lnk
2016-02-12 16:52 - 2016-02-12 16:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2016-02-12 16:47 - 2016-02-12 16:47 - 00000000 ____D C:\Users\Dominik\AppData\Local\KeePass
2016-02-12 16:34 - 2016-02-12 19:44 - 00001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-12 16:34 - 2016-02-12 16:42 - 00000000 ____D C:\Users\Dominik\AppData\Local\Mozilla
2016-02-12 16:34 - 2016-02-12 16:35 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Mozilla
2016-02-12 16:34 - 2016-02-12 16:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-12 16:34 - 2016-02-12 16:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-12 16:32 - 2016-02-12 16:32 - 00000131 _____ C:\Users\Dominik\AppData\Roaming\.Amarillion.cfg
2016-02-12 16:32 - 2016-02-12 16:32 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amarillion
2016-02-12 16:32 - 2016-02-12 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amarillion
2016-02-12 16:32 - 2016-02-12 16:32 - 00000000 ____D C:\Program Files (x86)\Amarillion
2016-02-12 16:30 - 2016-02-12 16:30 - 00000000 ____D C:\Users\Dominik\AppData\Local\NVIDIA
2016-02-12 16:29 - 2016-02-12 16:29 - 00000000 ____D C:\Windows\SysWOW64\NV
2016-02-12 16:29 - 2016-02-12 16:29 - 00000000 ____D C:\Windows\system32\NV
2016-02-12 16:29 - 2016-02-12 16:29 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-12 16:28 - 2016-02-12 16:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-12 16:28 - 2016-02-12 16:28 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-12 16:28 - 2015-11-24 19:40 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 02983032 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 00938616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-02-12 16:28 - 2015-11-24 19:40 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 00385144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-02-12 16:28 - 2015-11-23 11:38 - 06049858 _____ C:\Windows\system32\nvcoproc.bin
2016-02-12 16:27 - 2016-02-12 16:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-12 16:27 - 2016-02-12 16:27 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2016-02-12 16:27 - 2016-02-12 16:27 - 00000000 ____D C:\Program Files\Synaptics
2016-02-12 16:27 - 2015-11-25 00:10 - 42913912 _____ C:\Windows\system32\nvcompiler.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 22310008 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 18363696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 17516040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 16553568 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 15717672 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 15122296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 14835872 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 13527248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 12770752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 12034248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 11131184 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-02-12 16:27 - 2015-11-25 00:10 - 03579696 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 03159248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 02870392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 02490488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 01905272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435906.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 01564792 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435906.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00877360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00689272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00177600 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00033607 _____ C:\Windows\system32\nvinfo.pb
2016-02-12 16:27 - 2015-11-25 00:10 - 00031352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2016-02-12 16:26 - 2016-02-12 16:26 - 00019020 _____ C:\Windows\system32\results.xml
2016-02-12 16:25 - 2012-10-22 17:40 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-02-12 16:25 - 2012-10-22 17:40 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-02-12 16:24 - 2012-10-22 17:40 - 27664896 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 27643904 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 27418112 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 21810688 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 12854272 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 12615168 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 11594240 _____ (Intel Corporation) C:\Windows\system32\ig7icd64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 11171840 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 11049472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 05332896 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-02-12 16:24 - 2012-10-22 17:40 - 03580928 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 03510784 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 02898944 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 01981696 _____ C:\Windows\system32\iglhxa64.cpa
2016-02-12 16:24 - 2012-10-22 17:40 - 00755048 _____ C:\Windows\SysWOW64\igcodeckrng700.bin
2016-02-12 16:24 - 2012-10-22 17:40 - 00755048 _____ C:\Windows\system32\igcodeckrng700.bin
2016-02-12 16:24 - 2012-10-22 17:40 - 00640512 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00598780 _____ C:\Windows\SysWOW64\igvpkrng700.bin
2016-02-12 16:24 - 2012-10-22 17:40 - 00598780 _____ C:\Windows\system32\igvpkrng700.bin
2016-02-12 16:24 - 2012-10-22 17:40 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00518656 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00513056 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2016-02-12 16:24 - 2012-10-22 17:40 - 00483840 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00459264 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00441888 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2016-02-12 16:24 - 2012-10-22 17:40 - 00441344 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00330240 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2016-02-12 16:24 - 2012-10-22 17:40 - 00277024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2016-02-12 16:24 - 2012-10-22 17:40 - 00252448 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-02-12 16:24 - 2012-10-22 17:40 - 00241664 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00216064 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00195584 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00180224 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00171040 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2016-02-12 16:24 - 2012-10-22 17:40 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2016-02-12 16:24 - 2012-10-22 17:40 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2875.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00080384 _____ C:\Windows\system32\igdde64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00059425 _____ C:\Windows\system32\iglhxo64.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00059398 _____ C:\Windows\system32\iglhxg64.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00059230 _____ C:\Windows\system32\iglhxc64.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00059104 _____ C:\Windows\system32\iglhxc64_dev.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00058796 _____ C:\Windows\system32\iglhxg64_dev.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00058109 _____ C:\Windows\system32\iglhxo64_dev.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00056832 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00017154 _____ C:\Windows\system32\iglhxs64.vp
2016-02-12 16:24 - 2012-10-22 17:40 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2016-02-12 16:24 - 2012-10-22 17:40 - 00001074 _____ C:\Windows\system32\iglhxa64.vp
2016-02-12 16:24 - 2012-10-22 17:39 - 08579584 _____ (Intel Corporation) C:\Windows\SysWOW64\ig7icd32.dll
2016-02-12 16:24 - 2012-10-22 17:39 - 05903392 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2016-02-12 16:24 - 2012-10-22 17:39 - 00399392 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2016-02-12 16:24 - 2012-10-22 17:39 - 00223233 _____ C:\Windows\system32\Gfxres.th-TH.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00209727 _____ C:\Windows\system32\Gfxres.el-GR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00193862 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00185376 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-02-12 16:24 - 2012-10-22 17:39 - 00173568 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2016-02-12 16:24 - 2012-10-22 17:39 - 00165865 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00163120 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00158727 _____ C:\Windows\system32\Gfxres.he-IL.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00149390 _____ C:\Windows\system32\Gfxres.it-IT.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00147759 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00147101 _____ C:\Windows\system32\Gfxres.de-DE.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00147010 _____ C:\Windows\system32\Gfxres.es-ES.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00145715 _____ C:\Windows\system32\Gfxres.ro-RO.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00145211 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00144378 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00143976 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00143730 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00143657 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00142990 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00142617 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00142423 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00142008 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00141739 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00141574 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00140779 _____ C:\Windows\system32\Gfxres.hr-HR.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00137621 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00137534 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00136873 _____ C:\Windows\system32\Gfxres.da-DK.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00132360 _____ C:\Windows\system32\Gfxres.en-US.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00126035 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00124403 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2016-02-12 16:24 - 2012-10-22 17:39 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2016-02-12 16:24 - 2012-10-22 17:39 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-02-12 16:24 - 2012-10-22 17:39 - 00000259 _____ C:\Windows\system32\GfxUI.exe.config
2016-02-12 16:24 - 2012-06-19 07:40 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-02-12 16:24 - 2012-06-19 07:40 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2016-02-12 16:19 - 2016-02-12 16:19 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Locktime
2016-02-12 16:18 - 2016-02-12 16:18 - 00001196 _____ C:\Users\Public\Desktop\NetLimiter 4 (x64).lnk
2016-02-12 16:18 - 2016-02-12 16:18 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2016-02-12 16:18 - 2016-02-12 16:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2016-02-12 16:18 - 2016-02-12 16:18 - 00000000 ____D C:\ProgramData\Locktime
2016-02-12 16:18 - 2016-02-12 16:18 - 00000000 ____D C:\Program Files\Locktime Software
2016-02-12 16:17 - 2016-02-14 18:22 - 01592784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-02-12 16:15 - 2016-02-12 16:18 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Locktime Software
2016-02-12 16:14 - 2016-02-14 18:46 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-02-12 16:14 - 2016-02-12 16:14 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2016-02-12 16:14 - 2016-02-12 16:14 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-02-12 16:13 - 2016-02-14 00:41 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\BatteryBar
2016-02-12 16:13 - 2016-02-12 16:13 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2016-02-12 16:13 - 2016-02-12 16:13 - 00000000 ____D C:\Users\Dominik\AppData\Local\FluxSoftware
2016-02-12 16:12 - 2016-02-12 16:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-02-12 16:12 - 2016-02-12 16:12 - 00000000 ____D C:\Program Files\7-Zip
2016-02-12 16:09 - 2016-02-12 16:09 - 00000000 ____D C:\Program Files (x86)\Hotkey
2016-02-12 16:03 - 2016-02-12 16:03 - 00000000 ____D C:\Users\Dominik\AppData\Local\AuthenTec
2016-02-12 16:02 - 2016-02-12 16:02 - 00000000 ____D C:\ProgramData\FLEXnet
2016-02-12 16:01 - 2016-02-12 16:02 - 00000000 ____D C:\ProgramData\Creative
2016-02-12 16:01 - 2016-02-12 16:01 - 00000219 ___RH C:\Windows\ctfile.rfc
2016-02-12 16:01 - 2012-01-27 10:05 - 00057601 _____ C:\Windows\MBSpkrEQ.cfg
2016-02-12 16:01 - 2010-11-12 12:38 - 00241152 _____ C:\Windows\system32\APOMgr64.DLL
2016-02-12 16:01 - 2010-11-12 12:36 - 00185856 _____ C:\Windows\SysWOW64\APOMngr.DLL
2016-02-12 16:01 - 2010-11-02 16:01 - 00001313 ____N C:\Windows\THXCfg_SP_APOIM.ini
2016-02-12 16:01 - 2010-11-02 16:00 - 00001212 ____N C:\Windows\THXCfg_HP_APOIM.ini
2016-02-12 16:01 - 2010-11-02 15:59 - 00001212 ____N C:\Windows\THXCfg_APOIM.ini
2016-02-12 16:01 - 2010-09-14 13:53 - 00025600 ____N (Creative Technology Ltd.) C:\Windows\system32\THXCfg64.dll
2016-02-12 16:01 - 2010-07-21 16:51 - 00011264 ____N (Creative Technology Ltd.) C:\Windows\SysWOW64\ResDefA.exe
2016-02-12 16:01 - 2010-06-07 19:24 - 00006772 ____N C:\Windows\system32\THXCfg64.ini
2016-02-12 16:01 - 2010-06-01 11:59 - 00006985 ____N C:\Windows\system32\THXCfgUninstall64.ini
2016-02-12 16:01 - 2009-12-29 16:53 - 00089088 _____ C:\Windows\system32\CmdRtr64.DLL
2016-02-12 16:01 - 2009-12-29 16:52 - 00073728 _____ C:\Windows\SysWOW64\CmdRtr.DLL
2016-02-12 16:01 - 2009-10-01 16:42 - 00141312 ____N (Creative Technology Ltd.) C:\Windows\system32\THXCfg64.exe
2016-02-12 16:01 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE
2016-02-12 16:00 - 2016-02-12 16:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-02-12 16:00 - 2016-02-12 16:00 - 00000000 ____D C:\Program Files (x86)\Creative
2016-02-12 15:58 - 2016-02-12 15:58 - 00000000 ____D C:\Windows\Snapshot
2016-02-12 15:58 - 2016-02-12 15:58 - 00000000 ____D C:\Program Files (x86)\BisonCam
2016-02-12 15:58 - 2011-04-13 17:51 - 00000101 _____ C:\Windows\OEM.ini
2016-02-12 15:58 - 2009-11-19 11:07 - 00000020 _____ C:\Windows\Bison.ini
2016-02-12 15:57 - 2016-02-12 15:57 - 00000385 _____ C:\Users\Dominik\AppData\Roaminguser_gensett.xml
2016-02-12 15:56 - 2016-02-14 22:14 - 00020361 _____ C:\bdlog.txt
2016-02-12 15:55 - 2016-02-14 22:14 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\KeePass
2016-02-12 15:53 - 2016-02-12 15:53 - 00452137 _____ C:\ProgramData\1455288581.bdinstall.bin
2016-02-12 15:53 - 2016-02-12 15:53 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-02-12 15:52 - 2016-02-12 15:52 - 00003274 _____ C:\Windows\System32\Tasks\SamsungMagician
2016-02-12 15:52 - 2016-02-12 15:52 - 00002195 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk
2016-02-12 15:52 - 2016-02-12 15:52 - 00000684 ____H C:\bdr-cf02
2016-02-12 15:52 - 2016-02-12 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016
2016-02-12 15:52 - 2016-02-12 15:52 - 00000000 ____D C:\ProgramData\BDLogging
2016-02-12 15:52 - 2016-01-22 08:12 - 00806344 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2016-02-12 15:52 - 2016-01-22 08:11 - 01622512 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2016-02-12 15:52 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2016-02-12 15:52 - 2015-10-22 14:02 - 00271808 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys
2016-02-12 15:52 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-02-12 15:51 - 2016-02-12 19:34 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-02-12 15:51 - 2016-02-12 15:56 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Bitdefender
2016-02-12 15:51 - 2016-02-12 15:52 - 00253404 ____H C:\bdr-ld02
2016-02-12 15:51 - 2016-02-12 15:52 - 00009216 ____H C:\bdr-ld02.mbr
2016-02-12 15:51 - 2016-02-12 15:51 - 00000000 ____D C:\ProgramData\Samsung
2016-02-12 15:51 - 2016-02-12 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2016-02-12 15:51 - 2015-12-15 21:35 - 49760229 ____H C:\bdr-im02.gz
2016-02-12 15:51 - 2013-08-13 12:38 - 03271472 ____H C:\bdr-bz02
2016-02-12 15:50 - 2016-02-12 17:06 - 00000000 ____D C:\ProgramData\Bitdefender
2016-02-12 15:50 - 2015-04-29 13:32 - 00160032 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2016-02-12 15:49 - 2016-02-12 15:50 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-02-12 15:49 - 2016-02-12 15:49 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-02-12 15:49 - 2016-02-12 15:49 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-02-12 15:49 - 2016-02-12 15:49 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\QuickScan
2016-02-12 15:49 - 2016-02-12 15:49 - 00000000 ____D C:\Program Files\Realtek
2016-02-12 15:49 - 2016-02-12 15:49 - 00000000 ____D C:\Program Files\Bitdefender
2016-02-12 15:49 - 2015-06-02 14:21 - 00477272 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2016-02-12 15:49 - 2011-12-13 18:27 - 04718952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-02-12 15:49 - 2011-12-13 16:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-02-12 15:49 - 2011-12-13 16:25 - 00200468 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-02-12 15:49 - 2011-12-13 11:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2016-02-12 15:49 - 2011-12-12 17:20 - 00100456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-02-12 15:49 - 2011-12-12 16:24 - 00626264 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2016-02-12 15:49 - 2011-12-12 16:24 - 00561752 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2016-02-12 15:49 - 2011-12-08 17:28 - 01969768 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-02-12 15:49 - 2011-12-08 16:27 - 03744872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2016-02-12 15:49 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-02-12 15:49 - 2011-11-22 11:36 - 02615400 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-02-12 15:49 - 2011-10-18 13:55 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-02-12 15:49 - 2011-07-28 00:55 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2016-02-12 15:49 - 2011-07-28 00:55 - 02132824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2016-02-12 15:49 - 2011-07-22 19:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-02-12 15:49 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-02-12 15:49 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-02-12 15:49 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-02-12 15:49 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-02-12 15:49 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-02-12 15:49 - 2010-07-02 19:40 - 00080984 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2016-02-12 15:49 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-02-12 15:49 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-02-12 15:49 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-02-12 15:49 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-02-12 15:49 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-02-12 15:46 - 2016-02-14 00:45 - 00111448 _____ C:\Users\Dominik\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-12 15:45 - 2016-02-12 16:47 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2016-02-12 15:45 - 2016-02-12 15:45 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2016-02-12 15:43 - 2016-02-12 15:43 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\NetSpeedMonitor
2016-02-12 15:43 - 2016-02-12 15:43 - 00000000 ____D C:\Program Files\NetSpeedMonitor
2016-02-12 15:42 - 2016-02-15 12:40 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-02-12 15:42 - 2016-02-12 15:42 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-02-12 15:42 - 2016-02-12 15:42 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-02-12 15:37 - 2016-02-12 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Intel
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ____D C:\ProgramData\Intel.sav
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-02-12 15:37 - 2016-02-12 15:37 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-02-12 15:35 - 2016-02-12 16:25 - 00000000 ____D C:\ProgramData\Intel
2016-02-12 15:35 - 2016-02-12 15:37 - 00000000 ____D C:\Program Files\Intel
2016-02-12 15:35 - 2012-03-06 15:28 - 00015128 _____ C:\Windows\system32\Drivers\IntelMEFWVer.dll
2016-02-12 15:33 - 2016-02-12 15:33 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-02-12 15:33 - 2012-03-27 01:13 - 00789272 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2016-02-12 15:33 - 2012-03-27 01:13 - 00356632 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2016-02-12 15:33 - 2012-03-27 01:13 - 00019224 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2016-02-12 15:33 - 2012-03-27 01:12 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2016-02-12 15:32 - 2016-02-12 15:32 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-02-12 15:32 - 2012-05-09 13:06 - 09888872 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll
2016-02-12 15:32 - 2012-05-09 13:06 - 00293992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2016-02-12 15:30 - 2016-02-14 22:16 - 00000000 ____D C:\Users\Dominik\AppData\LocalLow\AuthenTec
2016-02-12 15:30 - 2016-02-12 16:04 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\KeepSafe
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____D C:\Windows\system32\upeksce
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AuthenTec TrueSuite
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____D C:\Program Files\Protector Suite
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2016-02-12 15:30 - 2016-02-12 15:30 - 00000000 ____D C:\Program Files\AuthenTec TrueSuite
2016-02-12 15:29 - 2016-02-12 15:29 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-02-12 15:27 - 2016-02-12 16:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-12 15:27 - 2016-02-12 15:49 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-02-12 15:27 - 2012-03-09 20:41 - 00685160 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-02-12 15:27 - 2012-03-09 20:41 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2016-02-12 15:27 - 2012-03-09 20:41 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-02-12 15:25 - 2016-02-12 16:25 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-12 15:25 - 2016-02-12 16:24 - 00000000 ____D C:\Intel
2016-02-12 15:25 - 2012-01-16 11:06 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2016-02-12 15:24 - 2016-02-14 00:45 - 00001425 _____ C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-12 15:24 - 2016-02-12 19:33 - 00000000 ____D C:\Users\Dominik\AppData\Local\VirtualStore
2016-02-12 15:24 - 2016-02-12 17:04 - 00000000 ____D C:\Users\Dominik
2016-02-12 15:24 - 2016-02-12 15:24 - 00000020 ___SH C:\Users\Dominik\ntuser.ini
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Vorlagen
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Startmenü
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Netzwerkumgebung
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Lokale Einstellungen
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Eigene Dateien
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Druckumgebung
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Documents\Eigene Videos
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Documents\Eigene Musik
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Documents\Eigene Bilder
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\AppData\Local\Verlauf
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\AppData\Local\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Dominik\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Programme
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-02-12 15:24 - 2016-02-12 15:24 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-02-12 15:24 - 2011-04-12 08:54 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Media Center Programs
2016-02-12 15:20 - 2016-02-12 15:20 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-12 15:20 - 2016-02-12 15:20 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-12 15:19 - 2016-02-12 15:19 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-02-12 15:18 - 2016-02-12 15:24 - 00000000 ____D C:\Windows\Panther

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-15 11:55 - 2009-07-14 05:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-15 11:55 - 2009-07-14 05:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-15 11:41 - 2011-04-12 08:43 - 00699168 _____ C:\Windows\system32\perfh007.dat
2016-02-15 11:41 - 2011-04-12 08:43 - 00149276 _____ C:\Windows\system32\perfc007.dat
2016-02-15 11:41 - 2009-07-14 06:13 - 01618576 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-15 11:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-02-14 22:14 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-14 19:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2016-02-14 19:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-02-14 19:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2016-02-14 19:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-02-14 18:14 - 2009-07-14 05:45 - 00437440 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-14 16:26 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-02-14 16:26 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-02-14 16:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-02-14 16:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2016-02-14 13:58 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-02-14 00:43 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-02-14 00:42 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-14 00:42 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-13 21:05 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-02-12 16:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2016-02-12 16:14 - 2009-07-14 06:08 - 00010206 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-12 15:58 - 2009-07-14 04:20 - 00000000 __RSD C:\Windows\Media
2016-02-12 15:41 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-12 15:30 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-02-12 15:24 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2016-02-12 15:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-12 15:18 - 2011-04-12 08:55 - 00000000 ____D C:\Windows\CSC
2016-02-12 15:18 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-02-12 16:32 - 2016-02-12 16:32 - 0000131 _____ () C:\Users\Dominik\AppData\Roaming\.Amarillion.cfg
2016-02-12 15:53 - 2016-02-12 15:53 - 0452137 _____ () C:\ProgramData\1455288581.bdinstall.bin

Einige Dateien in TEMP:
====================
C:\Users\Dominik\AppData\Local\Temp\130997660989609523.exe
C:\Users\Dominik\AppData\Local\Temp\13099766120687195071.exe
C:\Users\Dominik\AppData\Local\Temp\proxy_vole4246034709314504476.dll
C:\Users\Dominik\AppData\Local\Temp\proxy_vole6495917474956575339.dll
C:\Users\Dominik\AppData\Local\Temp\proxy_vole657799448717759081.dll
C:\Users\Dominik\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Dominik\AppData\Local\Temp\sfextra.dll
C:\Users\Dominik\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Dominik\AppData\Local\Temp\_is626A.exe
C:\Users\Dominik\AppData\Local\Temp\_is6621.exe
C:\Users\Dominik\AppData\Local\Temp\_is814F.exe
C:\Users\Dominik\AppData\Local\Temp\_is88AF.exe
C:\Users\Dominik\AppData\Local\Temp\_is902D.exe
C:\Users\Dominik\AppData\Local\Temp\_is979D.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-14 13:50

==================== Ende von FRST.txt ============================

Dope · 16.02.2016, 18:01

Addition log:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-02-2016
durchgeführt von Dominik (2016-02-15 13:05:47)
Gestartet von D:\Downloads\exes
Windows 7 Professional Service Pack 1 (X64) (2016-02-12 14:24:00)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2374812028-3489065733-3600338209-500 - Administrator - Disabled)
Dominik (S-1-5-21-2374812028-3489065733-3600338209-1000 - Administrator - Enabled) => C:\Users\Dominik
Gast (S-1-5-21-2374812028-3489065733-3600338209-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2374812028-3489065733-3600338209-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Amarillion 0.9.5 (HKLM-x32\...\Amarillion) (Version: 0.9.5 - Lukas Maas)
AuthenTec TrueSuite (HKLM\...\{C76FAAED-E66D-488A-9E15-6082B527814A}) (Version: 5.2.0.642 - AuthenTec, Inc.)
BatteryBar (remove only) (HKLM\...\BatteryBar) (Version:  - )
BisonCam (HKLM-x32\...\{5BBC4803-C96E-4D3E-9D1D-2E43774C4062}) (Version:  - BisonCam)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)
Bitdefender Total Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.25.1378 - Bitdefender)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)
f.lux (HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\Flux) (Version:  - )
Hotkey 6.0100 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 6.0100 - NoteBook)
Hotkey 6.0100 (x32 Version: 6.0100 - NoteBook) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2875 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.31 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.31 - Dominik Reichl)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4797.1002 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 en-US)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2 - Mozilla)
NetLimiter 4 (HKLM-x32\...\NetLimiter 4 4.0.15.0) (Version: 4.0.15.0 - Locktime Software)
NetLimiter 4 (Version: 4.0.15.0 - Locktime Software) Hidden
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team)
NVIDIA Grafiktreiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.06 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4797.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4797.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4797.1002 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27020 - Realtek Semiconductor Corp.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.18.0 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Telegram Desktop Version 0.9.18 (HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.9.18 - Telegram Messenger LLP)
THX TruStudio Pro (HKLM-x32\...\{82F99DC9-389A-4528-940C-88248731A620}) (Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)
Tresorit (HKLM-x32\...\{CD0A00DB-66D3-4085-AEE5-2FB19D49380E}) (Version: 2.1.672.422 - Tresorit)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.2 - VideoLAN)
WebCam Installer (HKLM-x32\...\InstallShield_{2A14D7BC-1876-4B38-830B-18856C27F550}) (Version: 4.04 - WebCam)
WebCam Installer (x32 Version: 4.04 - WebCam) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2374812028-3489065733-3600338209-1000_Classes\CLSID\{822B4859-CCDD-476C-ABDF-7F7A894A3CB7}\InprocServer32 -> C:\Users\Dominik\AppData\Local\Tresorit\v0.8\TresoritExt64_2.dll ()
CustomCLSID: HKU\S-1-5-21-2374812028-3489065733-3600338209-1000_Classes\CLSID\{822B485A-CCDD-476C-ABDF-7F7A894A3CB7}\InprocServer32 -> C:\Users\Dominik\AppData\Local\Tresorit\v0.8\TresoritExt64_2.dll ()
CustomCLSID: HKU\S-1-5-21-2374812028-3489065733-3600338209-1000_Classes\CLSID\{822B485B-CCDD-476C-ABDF-7F7A894A3CB7}\InprocServer32 -> C:\Users\Dominik\AppData\Local\Tresorit\v0.8\TresoritExt64_2.dll ()

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {26C9A0E0-F02F-4F6D-882D-4A437551A920} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {2C8131F6-F2FC-4FE7-AB3B-F999DBB30FEC} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {3A8EBAD5-C54C-427F-B3DF-12660CFAFE3D} - System32\Tasks\Speedfan autostart => C:\Program Files (x86)\SpeedFan\speedfan.exe [2015-02-20] (Almico Software (almico.com))
Task: {5E8295AA-0331-4E51-A5F7-DB0D44313B58} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2015-11-09] (Bitdefender)
Task: {A4FB00A6-D792-408F-97B1-D8E94F70A7CD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-02-13] (Microsoft Corporation)
Task: {A6BCA396-EA61-447A-A579-4CF748F722F8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {B3C956E7-C867-48F2-B89D-3911B5B741FF} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-01-12] (Microsoft Corporation)
Task: {E8574196-57BA-4E98-9E37-1EFA116E6CE5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {FD45155F-93A7-41EF-B68E-2E0F16BC95F8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-02-13] (Microsoft Corporation)
Task: {FF583551-0DBA-4A74-BF4F-7FFD4B61E751} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-01-12] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-02-12 15:52 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-02-12 15:52 - 2016-01-25 19:51 - 01119064 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-02-12 15:52 - 2016-01-25 19:51 - 00794832 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-02-12 15:52 - 2016-01-25 19:51 - 03038112 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-02-12 15:52 - 2016-01-25 19:51 - 01648408 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2016-02-12 16:27 - 2015-11-25 00:10 - 00012080 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2016-02-12 16:28 - 2015-11-24 19:40 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-02-13 18:20 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-02-12 15:35 - 2012-03-15 12:48 - 00127320 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2012-06-28 16:44 - 2012-06-28 16:44 - 00035840 _____ () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
2011-11-03 03:09 - 2011-11-03 03:09 - 00087880 _____ () C:\Program Files\AuthenTec TrueSuite\ssutil.dll
2011-11-03 03:08 - 2011-11-03 03:08 - 00556360 _____ () C:\Program Files\AuthenTec TrueSuite\DataManager.dll
2016-02-12 16:01 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2016-02-12 16:24 - 2012-10-22 17:39 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-04 13:35 - 2013-02-04 13:35 - 04839936 _____ () C:\Program Files (x86)\Hotkey\Hotkey.exe
2016-02-15 11:43 - 2016-02-15 11:43 - 00566439 _____ () C:\Users\Dominik\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2016-02-15 11:43 - 2016-02-15 11:43 - 04078962 _____ () C:\Users\Dominik\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2016-02-12 16:27 - 2015-11-25 00:10 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2016-02-12 16:28 - 2015-11-25 00:10 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-02-12 16:59 - 2016-02-12 16:59 - 00603648 _____ () C:\Users\Dominik\AppData\Local\Tresorit\v0.8\TresoritExt86_2.dll
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2016-02-12 16:00 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2016-02-12 15:51 - 2014-09-28 17:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll
2016-02-12 15:35 - 2012-03-06 15:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2016-02-15 12:40 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2374812028-3489065733-3600338209-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{C58DCBD2-2A81-4F35-A079-9C507594FDCC}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{4A333FE7-D329-4539-9839-54380D53C6F7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7367077E-F594-4470-9C27-3839048C229C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{15E908EE-6EFE-486F-81E9-516386516EFC}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{875F4B3B-0C66-4DBF-B76E-39C05CD2D278}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9554480C-53F3-4337-A858-8200E25CB005}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{BBE7EB65-0800-4A49-B71F-EB1B6DC76B54}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{DF73F8EB-D6B0-4B22-B478-236B2CCF4E0C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

==================== Wiederherstellungspunkte =========================

14-02-2016 18:21:30 Windows Update
14-02-2016 19:31:16 Windows Update
14-02-2016 20:45:56 Windows Update
14-02-2016 21:23:48 Windows Update
14-02-2016 21:29:33 Windows Update
14-02-2016 21:54:04 Windows Update
14-02-2016 22:06:26 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: TAP-Windows Adapter V9
Description: TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/14/2016 10:14:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 10:04:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 09:25:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 09:19:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 08:06:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 07:26:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 06:15:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 06:14:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 10:44:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2016 12:45:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (02/14/2016 10:14:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (02/14/2016 10:06:36 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: Intel Corporation - Graphics Adapter WDDM1.0, Graphics Adapter WDDM1.1, Graphics Adapter WDDM1.2, Graphics Adapter WDDM1.3 - Intel(R) HD Graphics 4000

Error: (02/14/2016 10:04:13 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (02/14/2016 09:25:16 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (02/14/2016 09:24:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3075226)

Error: (02/14/2016 09:19:08 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (02/14/2016 08:51:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3075226)

Error: (02/14/2016 08:49:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2965788)

Error: (02/14/2016 08:48:41 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3126446)

Error: (02/14/2016 08:47:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2923545)


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 8083.97 MB
Verfügbarer physikalischer RAM: 4889.24 MB
Summe virtueller Speicher: 16166.15 MB
Verfügbarer virtueller Speicher: 12615.17 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:419.09 GB) (Free:362.59 GB) NTFS
Drive d: (Daten) (Fixed) (Total:465.76 GB) (Free:252.39 GB) NTFS
Drive f: (Dope) (Fixed) (Total:931.51 GB) (Free:69.71 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: EF00F346)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=419.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 8DC03FF2)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A0B66D90)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus · 16.02.2016, 18:32

Zitat:

ACDSee.Pro.2.v2.0.219.German.Incl.Keymaker-CORE_spread.dl.am\core.nfo"

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Dope · 16.02.2016, 21:35

Oh ja. Garnicht gewussst, dass ich den noch drauf hab. (war von 2009)
Hab die Datei gelöscht:

Code:

ATTFilter

<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="C:\Program Files\Bitdefender\Bitdefender 2016\ondemand.xsl"?>
<ScanSession creator="Bitdefender Total Security 2016" name="Kontext-Scan" installPath="C:\Program Files\Bitdefender\Bitdefender 2016\" creationDate="Dienstag, 16. Februar 2016 21:29:35" originalPath="C:\Users\Dominik\AppData\Roaming\Bitdefender\Desktop\Profiles\Logs\2ab858ed-450b-4bb6-b67c-8e3c45ec13ac\1455650169_1_01.xml" >
	<ScanSettings 
		statisticsRefreshInterval="1000"
		scanSpeed="1.000000"
		lowPriority="0"
		enableExclusions="0"
		enableTaskExclusions="0"
		scanAdware="1"
		scanSpyware="1"
		scanApplications="1"
		scanDialers="1"
		scanKeyloggers="1"
		scanFiles="1"
		scanAllFiles="1"
		scanProgramsOnly="0"
		useCustomPrograms="0"
		customPrograms=""
		scanUserDefined="0"
		scanPacked="1"
		scanArchives="1"
		useSmartScan="1"
		scanEmails="1"
		scanRootkits="0"
		scanAllRootkits="0"
		scanBoot="0"
		scanMemory="0"
		scanRegistry="0"
		quickScan="0"
		quickScanMemory="0"
		quickScanAutoruns="0"
		quickScanPlugins="0"
		scanCookies="0"
		shutdownAfter="0"
		passwordPrompt="1"
		onlyAllowedActions="1"
		deepArchiveScan="1"
		maxArchiveLevel="15"
		maxArchiveSize="0"
		infectedAction1="1"
		infectedAction2="1"
		suspectAction1="1"
		suspectAction2="1"
		rootkitAction="1"
		userDefinedExtensions=""
		scanPua="-1"
	>

		<ScanPaths>
			<path>F:\sicherung von g</path>
		</ScanPaths>

		<ExcludedPaths>
		</ExcludedPaths>

		<ExcludedExtensions>
		</ExcludedExtensions>

	</ScanSettings>

	<EngineSummary
		totalSignatures="6106197"
		/>

	<ScanSummary
		scannedArchives="86"
		scannedPacked="0"
		startTime="1455650169"
		duration="4233914"
	>

		<TypeSummary type="1"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="4"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="0"
			scanned="479826"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="5"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="2"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="3"
			scanned="0"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

		<TypeSummary type="6"
			scanned="950"
			infected="0"
			suspicious="0"
			disinfected="0"
			deleted="0"
			moved="0"
			moved_reboot="0"
			delete_reboot="0"
			renamed="0"
			hidden="0"
		/>

	</ScanSummary>

	<ScanDetails>
		<UnresolvedDetails>
		</UnresolvedDetails>

		<ResolvedDetails>
		</ResolvedDetails>

		<IgnoredDetails>
		</IgnoredDetails>

		<QuickScanDetails>
		</QuickScanDetails>
		<NotScannedDetails
			skipped="56"
			ioerrors="0"
			archiveBombs="0"
			passwordProtected="19"
		>

			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  001.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  007.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  002.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  003.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  004.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  005.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  006.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  008.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  009.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  010.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\ITM.rar=&gt;ITM=&gt;sem 4=&gt;S-etnwicklung=&gt;C-Pruefung.rar=&gt;Zusammenfassung fuer Mitarbeitsueberpruefung.odt" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  011.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  012.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\ITM.rar=&gt;ITM=&gt;sem 4=&gt;S-etnwicklung=&gt;C-Pruefung.rar=&gt;1mitarbeit.c" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  013.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  014.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  015.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\HM010.part1.rar=&gt;Henning Mankell - Hunde von Riga\Hunde von Riga  016.mp3" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
			<Item type="0" objectType="0" path="F:\sicherung von g\Data1_1.cab=&gt;WebSearchENU.pdf" threatType="0" threatName="" action="1" allActions="" initialStatus="10" finalStatus="10" failReason="5" />
		</NotScannedDetails>
	</ScanDetails>

</ScanSession>

cosinus · 16.02.2016, 22:42

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Dope · 17.02.2016, 11:44

Hab Combofix aufsgeführt. Scan scheint normal durchgelaufen zu sein. Dannach wurde die .txt geöffnet.
Ich hab daraufhin den PC mal neu gestartet. -> Bluescreen.
PC nochmal im normalen Modus neu gestartet. -> PC hat sich von selbst wieder ausgeschaltet.
Hab dann Windows nochmal gestartet im Analyse Modus (glaub der Modus hat so geheißen).
Auf einen wiederherstellungspunkt zurückgesetzt. -> einige Programme haben ihre Konfigurationen verloren, soweit ich es bis jetzt aber beurteilen kann gehtwieder alles.
Combofix scheint jedoch nicht mehr installiert zu sein. Das Logfile ist jedenfalls noch da:

Code:

ATTFilter

ComboFix 16-02-15.01 - Dominik 17.02.2016  10:46:19.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8084.5871 [GMT 1:00]
ausgeführt von:: c:\users\Dominik\Desktop\ComboFix.exe
AV: Bitdefender Antivirus *Disabled/Updated* {3FB17364-4FCC-0FA7-6BBF-973897395371}
FW: Bitdefender Firewall *Enabled* {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
SP: Bitdefender Spyware-Schutz *Disabled/Updated* {84D09280-69F6-0029-510F-AC4AECBE19CC}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1455288581.bdinstall.bin
c:\programdata\1455632607.bdinstall.bin
c:\programdata\Roaming
.
.
(((((((((((((((((((((((   Dateien erstellt von 2016-01-17 bis 2016-02-17  ))))))))))))))))))))))))))))))
.
.
2016-02-17 09:51 . 2016-02-17 09:51	--------	d-----w-	c:\users\Default\AppData\Local\temp
2016-02-16 20:46 . 2016-02-16 20:48	--------	d-----w-	c:\program files (x86)\TunnelBear
2016-02-16 19:31 . 2016-02-16 19:44	--------	d-----w-	c:\program files (x86)\Google
2016-02-16 16:02 . 2016-02-16 16:02	--------	d-----w-	c:\windows\SysWow64\NV
2016-02-16 16:02 . 2016-02-16 16:02	--------	d-----w-	c:\windows\system32\NV
2016-02-16 16:01 . 2016-02-09 08:39	38336	----a-w-	c:\windows\system32\drivers\nvpciflt.sys
2016-02-16 16:01 . 2016-02-09 08:39	18758400	----a-w-	c:\windows\system32\nvwgf2umx.dll
2016-02-16 16:01 . 2016-02-09 08:39	16327896	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2016-02-16 16:01 . 2016-02-09 08:39	21193032	----a-w-	c:\windows\system32\nvopencl.dll
2016-02-15 13:37 . 2016-02-15 13:37	--------	d--h--w-	c:\program files (x86)\Common Files\EAInstaller
2016-02-15 13:15 . 2016-02-15 13:16	--------	d-----w-	c:\program files (x86)\Origin Games
2016-02-15 13:02 . 2016-02-16 17:55	--------	d-----w-	c:\programdata\Origin
2016-02-15 13:02 . 2016-02-15 13:44	--------	d-----w-	c:\programdata\Electronic Arts
2016-02-15 13:01 . 2016-02-15 13:11	--------	d-----w-	c:\program files (x86)\Origin
2016-02-15 11:56 . 2016-02-15 12:06	--------	d-----w-	C:\FRST
2016-02-14 20:54 . 2016-02-14 20:54	--------	d-----w-	c:\windows\CheckSur
2016-02-14 20:29 . 2015-07-16 19:12	6131200	----a-w-	c:\windows\SysWow64\mstscax.dll
2016-02-14 20:29 . 2015-07-16 19:11	7077376	----a-w-	c:\windows\system32\mstscax.dll
2016-02-14 20:29 . 2015-07-11 13:15	429568	----a-w-	c:\windows\system32\wksprt.exe
2016-02-14 20:29 . 2015-07-16 19:12	856064	----a-w-	c:\windows\SysWow64\rdvidcrl.dll
2016-02-14 20:29 . 2015-07-16 19:12	53248	----a-w-	c:\windows\SysWow64\tsgqec.dll
2016-02-14 20:29 . 2015-07-16 19:11	62976	----a-w-	c:\windows\system32\tsgqec.dll
2016-02-14 20:29 . 2015-07-16 19:11	1057792	----a-w-	c:\windows\system32\rdvidcrl.dll
2016-02-14 20:23 . 2015-12-20 18:50	3180544	----a-w-	c:\windows\system32\rdpcorets.dll
2016-02-14 20:23 . 2015-12-20 18:50	16384	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2016-02-14 20:23 . 2015-12-20 14:08	243200	----a-w-	c:\windows\system32\rdpudd.dll
2016-02-14 20:23 . 2014-12-11 17:47	87040	----a-w-	c:\windows\system32\TSWbPrxy.exe
2016-02-14 17:29 . 2013-10-02 04:51	3584	----a-w-	c:\windows\system32\drivers\de-DE\tsusbflt.sys.mui
2016-02-14 17:29 . 2013-10-02 01:10	44544	----a-w-	c:\windows\system32\TsUsbGDCoInstaller.dll
2016-02-14 17:29 . 2013-10-02 02:22	56832	----a-w-	c:\windows\system32\drivers\TsUsbFlt.sys
2016-02-14 17:29 . 2013-10-02 02:11	13824	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-02-14 17:29 . 2013-10-02 02:08	12800	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-02-14 17:29 . 2013-10-02 01:48	56832	----a-w-	c:\windows\system32\MsRdpWebAccess.dll
2016-02-14 17:29 . 2013-10-02 01:48	18944	----a-w-	c:\windows\system32\wksprtPS.dll
2016-02-14 17:29 . 2013-10-02 00:14	50176	----a-w-	c:\windows\SysWow64\MsRdpWebAccess.dll
2016-02-14 17:29 . 2013-10-02 00:14	17920	----a-w-	c:\windows\SysWow64\wksprtPS.dll
2016-02-14 17:29 . 2013-10-01 23:31	1147392	----a-w-	c:\windows\system32\mstsc.exe
2016-02-14 17:29 . 2013-10-01 22:34	1068544	----a-w-	c:\windows\SysWow64\mstsc.exe
2016-02-14 17:23 . 2012-08-23 14:10	19456	----a-w-	c:\windows\system32\drivers\rdpvideominiport.sys
2016-02-14 17:23 . 2012-08-23 14:08	30208	----a-w-	c:\windows\system32\drivers\TsUsbGD.sys
2016-02-14 17:23 . 2012-08-23 11:12	192000	----a-w-	c:\windows\SysWow64\rdpendp_winip.dll
2016-02-14 17:23 . 2012-08-23 10:51	228864	----a-w-	c:\windows\system32\rdpendp_winip.dll
2016-02-14 15:26 . 2016-02-14 15:26	--------	d-s---w-	c:\windows\system32\CompatTel
2016-02-14 15:26 . 2016-02-14 15:26	--------	d-----w-	c:\windows\system32\appraiser
2016-02-14 10:23 . 2012-07-26 07:46	2560	----a-w-	c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2016-02-14 10:15 . 2016-01-22 06:48	49664	----a-w-	c:\program files\Internet Explorer\DiagnosticsHub_is.dll
2016-02-14 10:08 . 2014-07-09 02:03	7168	----a-w-	c:\windows\system32\KBDTAT.DLL
2016-02-14 10:07 . 2015-02-04 03:16	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2016-02-14 10:07 . 2015-02-04 02:54	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-----w-	c:\programdata\bdch
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-----w-	c:\windows\system32\wbem\en-US
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-----w-	c:\windows\SysWow64\Wat
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-----w-	c:\windows\system32\Wat
2016-02-13 23:42 . 2016-02-13 23:43	--------	d-s---w-	c:\windows\system32\GWX
2016-02-13 23:42 . 2016-02-13 23:42	--------	d-s---w-	c:\windows\SysWow64\GWX
2016-02-13 23:27 . 2016-02-13 23:29	--------	d-----w-	c:\windows\system32\MRT
2016-02-13 23:13 . 2015-07-30 13:13	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2016-02-13 23:13 . 2015-07-30 13:13	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-13 23:11 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2016-02-13 22:43 . 2016-02-13 22:43	--------	d-----w-	c:\program files\AuthenTec
2016-02-13 22:14 . 2012-07-26 03:08	229888	----a-w-	c:\windows\system32\WUDFHost.exe
2016-02-13 22:14 . 2012-07-26 03:08	84992	----a-w-	c:\windows\system32\WUDFSvc.dll
2016-02-13 22:14 . 2012-07-26 03:08	744448	----a-w-	c:\windows\system32\WUDFx.dll
2016-02-13 22:14 . 2012-07-26 03:08	45056	----a-w-	c:\windows\system32\WUDFCoinstaller.dll
2016-02-13 22:14 . 2012-07-26 03:08	194048	----a-w-	c:\windows\system32\WUDFPlatform.dll
2016-02-13 22:14 . 2012-07-26 02:26	87040	----a-w-	c:\windows\system32\drivers\WUDFPf.sys
2016-02-13 22:14 . 2012-07-26 02:26	198656	----a-w-	c:\windows\system32\drivers\WUDFRd.sys
2016-02-13 22:05 . 2016-02-13 22:05	--------	d-----w-	c:\windows\Migration
2016-02-13 21:56 . 2014-06-30 22:24	8856	----a-w-	c:\windows\system32\icardres.dll
2016-02-13 21:56 . 2014-06-30 22:14	8856	----a-w-	c:\windows\SysWow64\icardres.dll
2016-02-13 21:56 . 2014-03-09 21:48	171160	----a-w-	c:\windows\system32\infocardapi.dll
2016-02-13 21:56 . 2014-03-09 21:48	1389208	----a-w-	c:\windows\system32\icardagt.exe
2016-02-13 21:56 . 2014-03-09 21:47	99480	----a-w-	c:\windows\SysWow64\infocardapi.dll
2016-02-13 21:56 . 2014-03-09 21:47	619672	----a-w-	c:\windows\SysWow64\icardagt.exe
2016-02-13 21:56 . 2014-06-06 06:16	35480	----a-w-	c:\windows\SysWow64\TsWpfWrp.exe
2016-02-13 21:56 . 2014-06-06 06:12	35480	----a-w-	c:\windows\system32\TsWpfWrp.exe
2016-02-13 21:45 . 2015-05-25 18:19	113664	----a-w-	c:\windows\system32\sechost.dll
2016-02-13 21:44 . 2014-08-01 11:53	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2016-02-13 21:43 . 2014-06-16 02:10	985536	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2016-02-13 21:42 . 2013-05-10 05:49	30720	----a-w-	c:\windows\system32\cryptdlg.dll
2016-02-13 21:41 . 2014-03-04 09:44	722944	----a-w-	c:\windows\system32\objsel.dll
2016-02-13 21:39 . 2012-06-06 06:05	495616	----a-w-	c:\program files\Common Files\System\ado\msadox.dll
2016-02-13 21:39 . 2012-06-06 06:05	61440	----a-w-	c:\program files\Common Files\System\ado\msador15.dll
2016-02-13 21:39 . 2012-06-06 06:05	466944	----a-w-	c:\program files\Common Files\System\ado\msadomd.dll
2016-02-13 21:39 . 2012-06-06 06:05	1499136	----a-w-	c:\program files\Common Files\System\ado\msado15.dll
2016-02-13 21:39 . 2012-06-06 06:05	258048	----a-w-	c:\program files\Common Files\System\msadc\msadco.dll
2016-02-13 21:39 . 2012-06-06 06:02	1133568	----a-w-	c:\windows\system32\cdosys.dll
2016-02-13 21:39 . 2012-06-06 05:05	143360	----a-w-	c:\program files (x86)\Common Files\System\ado\msjro.dll
2016-02-13 21:39 . 2012-06-06 05:05	372736	----a-w-	c:\program files (x86)\Common Files\System\ado\msadox.dll
2016-02-13 21:39 . 2012-06-06 05:05	57344	----a-w-	c:\program files (x86)\Common Files\System\ado\msador15.dll
2016-02-13 21:39 . 2012-06-06 05:05	352256	----a-w-	c:\program files (x86)\Common Files\System\ado\msadomd.dll
2016-02-13 21:39 . 2012-06-06 05:05	212992	----a-w-	c:\program files (x86)\Common Files\System\msadc\msadco.dll
2016-02-13 21:39 . 2012-06-06 05:05	1019904	----a-w-	c:\program files (x86)\Common Files\System\ado\msado15.dll
2016-02-13 21:39 . 2012-06-06 05:03	805376	----a-w-	c:\windows\SysWow64\cdosys.dll
2016-02-13 21:38 . 2013-08-28 01:12	461312	----a-w-	c:\windows\system32\scavengeui.dll
2016-02-13 21:29 . 2014-01-29 02:32	484864	----a-w-	c:\windows\system32\wer.dll
2016-02-13 21:29 . 2014-01-29 02:06	381440	----a-w-	c:\windows\SysWow64\wer.dll
2016-02-13 21:29 . 2011-02-18 10:51	31232	----a-w-	c:\windows\system32\prevhost.exe
2016-02-13 21:29 . 2011-02-18 05:39	31232	----a-w-	c:\windows\SysWow64\prevhost.exe
2016-02-13 21:25 . 2015-11-05 19:05	17408	----a-w-	c:\windows\system32\wshrm.dll
2016-02-13 21:25 . 2015-11-05 19:02	14848	----a-w-	c:\windows\SysWow64\wshrm.dll
2016-02-13 21:25 . 2015-11-05 09:53	146944	----a-w-	c:\windows\system32\drivers\rmcast.sys
2016-02-13 21:25 . 2015-01-17 02:48	1067520	----a-w-	c:\windows\system32\msctf.dll
2016-02-13 21:25 . 2015-01-17 02:30	828928	----a-w-	c:\windows\SysWow64\msctf.dll
2016-02-13 21:24 . 2013-05-13 05:50	52224	----a-w-	c:\windows\system32\certenc.dll
2016-02-13 21:24 . 2013-05-13 03:43	1192448	----a-w-	c:\windows\system32\certutil.exe
2016-02-13 21:24 . 2013-05-13 03:08	903168	----a-w-	c:\windows\SysWow64\certutil.exe
2016-02-13 21:24 . 2013-05-13 03:08	43008	----a-w-	c:\windows\SysWow64\certenc.dll
2016-02-13 21:23 . 2014-12-08 03:09	406528	----a-w-	c:\windows\system32\scesrv.dll
2016-02-13 21:23 . 2014-12-08 02:46	308224	----a-w-	c:\windows\SysWow64\scesrv.dll
2016-02-13 21:23 . 2013-10-12 02:30	830464	----a-w-	c:\windows\system32\nshwfp.dll
2016-02-13 21:23 . 2013-10-12 02:29	859648	----a-w-	c:\windows\system32\IKEEXT.DLL
2016-02-13 21:23 . 2013-10-12 02:29	324096	----a-w-	c:\windows\system32\FWPUCLNT.DLL
2016-02-13 21:23 . 2013-10-12 02:03	656896	----a-w-	c:\windows\SysWow64\nshwfp.dll
2016-02-13 21:23 . 2013-10-12 02:01	216576	----a-w-	c:\windows\SysWow64\FWPUCLNT.DLL
2016-02-13 21:23 . 2012-07-04 22:16	73216	----a-w-	c:\windows\system32\netapi32.dll
2016-02-13 21:23 . 2012-07-04 22:13	59392	----a-w-	c:\windows\system32\browcli.dll
2016-02-13 21:23 . 2012-07-04 22:13	136704	----a-w-	c:\windows\system32\browser.dll
2016-02-13 21:23 . 2012-07-04 21:14	41984	----a-w-	c:\windows\SysWow64\browcli.dll
2016-02-13 20:05 . 2016-02-13 20:05	--------	d-----w-	c:\program files\Common Files\DESIGNER
2016-02-13 19:37 . 2016-02-13 19:37	--------	d-----w-	c:\program files\BatteryBar
2016-02-13 17:28 . 2016-02-13 20:06	--------	d-----w-	c:\programdata\regid.1991-06.com.microsoft
2016-02-13 17:28 . 2016-02-13 17:28	--------	d-----w-	c:\program files\Microsoft Office
2016-02-13 17:12 . 2015-04-24 18:17	633856	----a-w-	c:\windows\system32\comctl32.dll
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-01-22 05:59 . 2016-02-13 21:43	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-12-08 19:07 . 2009-07-14 00:22	1393152	----a-w-	c:\windows\system32\WMALFXGFXDSP.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-02-13 17:32	1741104	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-02-13 17:32	1741104	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-02-13 17:32	1741104	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"f.lux"="c:\users\Dominik\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224]
"NetLimiter"="c:\program files\Locktime Software\NetLimiter 4\nlclientapp.exe" [2015-10-10 52656]
"CyberGhost"="c:\program files\CyberGhost 5\CyberGhost.exe" [2016-01-11 426600]
"Tresorit"="c:\users\Dominik\AppData\Local\Tresorit\v0.8\Tresorit.exe" [2016-02-08 14100160]
"KeePass Password Safe 2"="c:\program files (x86)\KeePass Password Safe 2\KeePass.exe" [2016-01-09 2745544]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-03-27 291608]
"KeePass 2 PreLoad"="c:\program files (x86)\KeePass Password Safe 2\KeePass.exe" [2016-01-09 2745544]
"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" [2010-11-01 1374720]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
.
c:\users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
BatteryBar.lnk - c:\program files\BatteryBar\BatteryBar.exe [2015-1-20 74928]
Telegram.lnk - c:\users\Dominik\AppData\Roaming\Telegram Desktop\Telegram.exe -autostart [2016-2-12 31784288]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Hotkey.lnk - c:\program files (x86)\Hotkey\Hotkey.exe [2013-2-4 4839936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 ignis;ignis Service;c:\windows\system32\DRIVERS\ignis.sys;c:\windows\SYSNATIVE\DRIVERS\ignis.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 BDVEDISK;BDVEDISK;c:\windows\system32\DRIVERS\bdvedisk.sys;c:\windows\SYSNATIVE\DRIVERS\bdvedisk.sys [x]
S2 CGVPNCliService;CyberGhost 5 Client Service;c:\program files\CyberGhost 5\Service.exe;c:\program files\CyberGhost 5\Service.exe [x]
S2 ClickToRunSvc;Microsoft Office-Klick-und-Los-Dienst;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 FPLService;TrueSuiteService;c:\program files\AuthenTec TrueSuite\TrueSuiteService.exe;c:\program files\AuthenTec TrueSuite\TrueSuiteService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 nldrv;nldrv;c:\program files\Locktime Software\NetLimiter 4\nldrv.sys;c:\program files\Locktime Software\NetLimiter 4\nldrv.sys [x]
S2 PowerBiosServer;PowerBiosServer;c:\program files (x86)\Hotkey\PowerBiosServer.exe;c:\program files (x86)\Hotkey\PowerBiosServer.exe [x]
S2 ProductAgentService;Product Agent Service;c:\program files\Bitdefender Agent\ProductAgentService.exe;c:\program files\Bitdefender Agent\ProductAgentService.exe [x]
S2 TunnelBearMaintenance;TunnelBear Maintenance;c:\program files (x86)\TunnelBear\TBear.Maintenance.exe;c:\program files (x86)\TunnelBear\TBear.Maintenance.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2016\updatesrv.exe;c:\program files\Bitdefender\Bitdefender 2016\updatesrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 RSBASTOR;Realtek PCIE CardReader Driver - BA;c:\windows\system32\DRIVERS\RtsBaStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsBaStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 tap-tb-0901;TunnelBear Adapter V9;c:\windows\system32\DRIVERS\tap-tb-0901.sys;c:\windows\SYSNATIVE\DRIVERS\tap-tb-0901.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-02-13 17:32	2348336	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-02-13 17:32	2348336	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-02-13 17:32	2348336	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
@="{BC6D10E6-AE59-4cef-83DB-FD4C9BC7B7F2}"
[HKEY_CLASSES_ROOT\CLSID\{BC6D10E6-AE59-4cef-83DB-FD4C9BC7B7F2}]
2011-10-21 13:00	4014408	----a-w-	c:\program files\AuthenTec TrueSuite\KeepSafe\fvns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
@="{93BB455E-3D52-4fba-9733-E5103B30FC12}"
[HKEY_CLASSES_ROOT\CLSID\{93BB455E-3D52-4fba-9733-E5103B30FC12}]
2011-10-21 13:00	4014408	----a-w-	c:\program files\AuthenTec TrueSuite\KeepSafe\fvns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KeepSafe"="c:\program files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe" [2011-10-21 38728]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-13 13374568]
"Bdagent"="c:\program files\Bitdefender\Bitdefender 2016\bdagent.exe" [2016-02-01 1643232]
"DeLay"="c:\program files (x86)\BisonCam\PID_0361\DeLay.exe" [2008-12-05 53248]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-22 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-22 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-22 441888]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2016-01-23 2787264]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\589v0see.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2016-02-17  10:53:04
ComboFix-quarantined-files.txt  2016-02-17 09:53
.
Vor Suchlauf: 8 Verzeichnis(se), 376.222.785.536 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 376.699.527.168 Bytes frei
.
- - End Of File - - F6991F2247ED2508CA7C169D54543A32
A36C5E4F47E84449FF07ED3517B43A31

cosinus · 17.02.2016, 12:02

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Windows 7 Professional x64 SP1: Maus macht sich selbständig

Log-Analyse und Auswertung: Windows 7 Professional x64 SP1: Maus macht sich selbständig