|
Log-Analyse und Auswertung: Werbetab-VirusWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
28.03.2016, 21:49 | #1 |
| Werbetab-Virus Sehr geehrtes Trojaner-Board-Team, ich habe seit einigen Stunden scheinbar einen Virus, der meine Browser alle lahm zu legen scheint. Nach dem Überfliegen einiger Threads hier im Forum ist mir klar geworden, dass das Problem wohl recht häufig auftaucht, die Lösungen allerdings leider sehr individuell ausfallen. Von daher hoffe ich, dass ihr auch mir zur Seite stehen könnt. Webseiten reagieren ständig nicht mehr und müssen wiederhergestellt werden und jeder Link den ich anklicke führt quasi zu einer endlosen Schleife an Werbetabs von Anbietern wie "DNS-Unlocker", "PCKeeper" oder "Reimage Repair". Dies ist in allen meinen Browsern gleich, sodass mir eine Installation von externer Software (die ich zur Behebung zu brauchen scheine...) auch fast unmöglich ist . Avast findet überhaupt nichts. Bitte helft mir diesen Quatsch möglichst schnell wieder loszuwerden! Vielen Dank im Voraus, mit freundlichen Grüßen Jan Hier mal die (zumeist) gewünschten Log-Dateien. FRST: (Part 1) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von Jan (Administrator) auf DESKTOP-D54262M (28-03-2016 22:18:13) Gestartet von C:\Users\Jan\Downloads Geladene Profile: Jan (Verfügbare Profile: Jan) Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\asww10mon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-23] (AVAST Software) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify Web Helper] => C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-28] (Spotify Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify] => C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe [6805616 2016-03-28] (Spotify Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [149504 2015-07-10] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-05] (AVAST Software) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\Parameters: [NameServer] 82.163.143.171 82.163.142.173 Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [NameServer] 82.163.143.171 82.163.142.173 Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-05] (AVAST Software) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-05] (AVAST Software) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH) Toolbar: HKU\S-1-5-21-2281809953-3163866376-3614606004-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-16] [ist nicht signiert] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-03-05] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-03-05] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-05] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-05] (AVAST Software) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4192344 2016-03-09] (INCA Internet Co., Ltd.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-05] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-25] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-23] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-05] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-05] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-23] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-05] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-05] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-05] (AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2016-03-05] (Advanced Micro Devices) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-28 22:18 - 2016-03-28 22:18 - 00008502 _____ C:\Users\Jan\Downloads\FRST.txt 2016-03-28 22:17 - 2016-03-28 22:17 - 02374144 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2016-03-28 22:16 - 2016-03-28 22:16 - 02374144 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe 2016-03-28 22:12 - 2016-03-28 22:12 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_Jan_HistoryPrediction.bin 2016-03-28 21:36 - 2016-03-28 21:37 - 00000000 ____D C:\AdwCleaner 2016-03-28 21:36 - 2016-03-28 21:36 - 01538560 _____ C:\Users\Jan\Downloads\AdwCleaner_5.106.exe 2016-03-28 21:31 - 2016-03-28 22:16 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify 2016-03-28 21:31 - 2016-03-28 21:31 - 00001840 _____ C:\Users\Jan\Desktop\Spotify.lnk 2016-03-28 21:31 - 2016-03-28 21:31 - 00001826 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-03-28 21:31 - 2016-03-28 21:31 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify 2016-03-28 21:29 - 2016-03-28 21:31 - 00350936 _____ (Spotify Ltd) C:\Users\Jan\Downloads\SpotifySetup.exe 2016-03-28 21:23 - 2016-03-28 21:23 - 01475080 _____ C:\Users\Jan\Downloads\Spotify - CHIP-Installer.exe 2016-03-28 20:56 - 2016-03-28 20:55 - 05006864 _____ (AVAST Software) C:\Users\Jan\Downloads\Avast_Setup [1].exe 2016-03-28 20:55 - 2016-03-28 20:55 - 01006024 _____ (Cotuf ) C:\Users\Jan\Downloads\Avast_Setup.exe 2016-03-28 20:08 - 2016-03-28 22:18 - 00000000 ____D C:\FRST 2016-03-28 19:50 - 2016-03-28 19:50 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-03-28 19:50 - 2016-03-28 19:50 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Mozilla 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Local\Mozilla 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-03-28 19:49 - 2016-03-28 19:49 - 00242376 _____ C:\Users\Jan\Downloads\Firefox Setup Stub 45.0.1.exe 2016-03-28 19:47 - 2016-03-28 19:47 - 00000000 ____D C:\Program Files\Adblock Plus for IE 2016-03-28 19:44 - 2016-03-28 19:44 - 06468104 _____ ( ) C:\Users\Jan\Downloads\adblockplusie-1.5.exe 2016-03-28 19:40 - 2016-03-28 19:40 - 06868672 _____ (Piriform Ltd) C:\Users\Jan\Downloads\ccsetup516.exe 2016-03-28 19:40 - 2016-03-28 19:40 - 00002866 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-03-28 19:40 - 2016-03-28 19:40 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-03-28 19:40 - 2016-03-28 19:40 - 00000000 ____D C:\Program Files\CCleaner 2016-03-28 17:25 - 2016-03-28 17:31 - 00000000 ____D C:\ProgramData\245bef91 2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\e5e9eaf1-31b1-0 2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{1b801477-312c-1} 2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{04895d5a-012c-0} 2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{00ff91ce-212c-0} 2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{00519dfc-212c-1} 2016-03-25 20:52 - 2016-03-25 20:52 - 00000000 ____D C:\Windows\system32\SleepStudy 2016-03-25 17:14 - 2016-03-25 17:14 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2016-03-25 17:14 - 2016-03-25 17:14 - 00003200 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458918867 2016-03-25 17:14 - 2016-03-25 17:14 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2016-03-24 00:45 - 2016-03-24 00:45 - 00000000 ____D C:\Users\Jan\AppData\Local\PeerDistRepub 2016-03-23 22:20 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-03-23 22:20 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-03-23 22:20 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2016-03-23 22:20 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2016-03-23 22:20 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2016-03-23 22:20 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-03-23 22:20 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-03-23 22:20 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-03-23 22:20 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-03-23 22:20 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL 2016-03-23 22:20 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2016-03-23 22:20 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2016-03-23 22:20 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2016-03-23 22:20 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll 2016-03-23 22:20 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-03-23 22:20 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-03-23 22:20 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe 2016-03-23 22:20 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-03-23 22:20 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-03-23 22:20 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-03-23 22:20 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2016-03-23 22:20 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2016-03-23 22:20 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL 2016-03-23 22:20 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll 2016-03-23 22:20 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll 2016-03-23 22:20 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll 2016-03-23 22:20 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2016-03-23 22:20 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe 2016-03-23 22:20 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll 2016-03-23 22:20 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe 2016-03-23 22:20 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2016-03-23 22:20 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll 2016-03-23 22:20 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll 2016-03-23 22:20 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-03-23 22:20 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-03-23 22:20 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-03-23 22:20 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2016-03-23 22:20 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll 2016-03-23 22:20 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-03-23 22:20 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe 2016-03-23 22:20 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-03-23 22:20 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll 2016-03-23 22:20 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys 2016-03-23 22:20 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll 2016-03-23 22:20 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-03-23 22:20 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-03-23 22:20 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2016-03-23 22:20 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll 2016-03-23 22:20 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-03-23 22:20 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll 2016-03-23 22:20 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe 2016-03-23 22:20 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll 2016-03-23 22:20 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-03-23 22:20 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2016-03-23 22:20 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2016-03-23 22:20 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2016-03-23 22:20 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-03-23 22:20 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2016-03-23 22:20 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2016-03-23 22:20 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll 2016-03-23 22:20 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-03-23 22:20 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2016-03-23 22:20 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-03-23 22:20 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-03-23 22:20 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll 2016-03-23 22:20 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll 2016-03-23 22:20 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2016-03-23 22:20 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2016-03-23 22:20 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe 2016-03-23 22:20 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-03-23 22:20 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll 2016-03-23 22:20 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2016-03-23 22:20 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2016-03-23 22:20 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll 2016-03-23 22:20 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-03-23 22:20 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2016-03-23 22:20 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2016-03-23 22:20 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-03-23 22:20 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2016-03-23 22:20 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2016-03-23 21:42 - 2016-03-23 21:42 - 00003040 _____ C:\Windows\System32\Tasks\avast! Windows 10 Start Menu helper 2016-03-23 21:41 - 2016-03-23 21:41 - 00000000 ____D C:\Program Files\Common Files\INCA Shared 2016-03-23 21:41 - 2016-03-09 12:51 - 04192344 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des 2016-03-23 21:41 - 2004-12-30 14:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys 2016-03-23 21:41 - 2003-07-15 23:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd 2016-03-05 15:53 - 2016-03-05 15:55 - 00000000 ____D C:\Users\Jan\Desktop\CSGO Config 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WinRAR 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-03-05 15:51 - 2016-03-05 15:52 - 00000000 ____D C:\Program Files\WinRAR 2016-03-05 15:51 - 2016-03-05 15:51 - 02114664 _____ C:\Users\Jan\Downloads\winrar-x64-531d.exe 2016-03-05 15:50 - 2016-03-05 15:52 - 00005100 _____ C:\Users\Jan\Downloads\config.rar 2016-03-05 15:12 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2016-03-05 15:12 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2016-03-05 15:12 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2016-03-05 15:12 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2016-03-05 15:12 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2016-03-05 15:12 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2016-03-05 15:12 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2016-03-05 15:12 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2016-03-05 15:12 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2016-03-05 15:12 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2016-03-05 15:12 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2016-03-05 15:12 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2016-03-05 15:12 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2016-03-05 15:12 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2016-03-05 15:12 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2016-03-05 15:12 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2016-03-05 15:12 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2016-03-05 15:12 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2016-03-05 15:12 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2016-03-05 15:12 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2016-03-05 15:12 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2016-03-05 15:12 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2016-03-05 15:12 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2016-03-05 15:12 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2016-03-05 15:12 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2016-03-05 15:12 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2016-03-05 15:12 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2016-03-05 15:12 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2016-03-05 15:12 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2016-03-05 15:12 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2016-03-05 15:12 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2016-03-05 15:12 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2016-03-05 15:12 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2016-03-05 15:12 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2016-03-05 15:12 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2016-03-05 15:12 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2016-03-05 15:12 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2016-03-05 15:12 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2016-03-05 15:12 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2016-03-05 15:12 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2016-03-05 15:12 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2016-03-05 15:12 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2016-03-05 15:12 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2016-03-05 15:12 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2016-03-05 15:12 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2016-03-05 15:12 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2016-03-05 15:12 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2016-03-05 15:12 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2016-03-05 15:12 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2016-03-05 15:12 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2016-03-05 15:12 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2016-03-05 15:12 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2016-03-05 15:12 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2016-03-05 15:12 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2016-03-05 15:12 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2016-03-05 15:12 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2016-03-05 15:12 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2016-03-05 15:12 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2016-03-05 15:12 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2016-03-05 14:57 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files\Google 2016-03-05 14:56 - 2016-03-05 14:56 - 00987728 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleToolbarSetup.exe 2016-03-05 13:25 - 2016-03-05 13:25 - 00001509 _____ C:\Users\Public\Desktop\Flyff.lnk 2016-03-05 13:25 - 2016-03-05 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flyff 2016-03-05 13:21 - 2016-03-05 13:21 - 00000000 ____D C:\Program Files\Webzen 2016-03-05 13:12 - 2016-03-05 13:12 - 05810184 _____ C:\Users\Jan\Downloads\Flyff_de_Downloader.exe 2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\ProgramData\WEBZEN 2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\download 2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\Steam 2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\CEF 2016-03-05 13:06 - 2016-03-28 19:41 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-05 13:06 - 2016-03-05 13:06 - 01380712 _____ C:\Users\Jan\Downloads\SteamSetup.exe 2016-03-05 13:06 - 2016-03-05 13:06 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk 2016-03-05 13:06 - 2016-03-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-03-05 12:38 - 2016-03-28 17:27 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8C350B2D-D49C-4624-8373-F9A16C366C9A} 2016-03-05 12:27 - 2016-03-05 12:27 - 00000000 ____D C:\Users\Jan\AppData\Roaming\dlg 2016-03-05 12:26 - 2016-03-28 17:26 - 00000000 ____D C:\ProgramData\974b174d-77c1-0 2016-03-05 12:26 - 2016-03-28 17:26 - 00000000 ____D C:\ProgramData\974b174d-4113-1 2016-03-05 12:26 - 2016-03-05 12:26 - 00000000 ____D C:\Users\Jan\AppData\Local\securityutility 2016-03-05 12:25 - 2016-03-24 00:52 - 00000000 ____D C:\Windows\system32\MRT 2016-03-05 12:25 - 2016-03-24 00:51 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-03-05 12:25 - 2016-03-05 12:25 - 00540096 _____ C:\Users\Jan\Downloads\internet_explorer.exe 2016-03-05 12:25 - 2016-03-05 12:25 - 00000000 ____D C:\Users\Jan\AppData\Local\SearchProtect 2016-03-05 12:25 - 2016-03-05 12:25 - 00000000 _____ C:\END 2016-03-05 12:24 - 2016-03-28 19:47 - 00000000 ____D C:\Users\Jan\AppData\LocalLow\Adblock Plus for IE |
28.03.2016, 21:49 | #2 |
| Werbetab-Virus FRST: (Part 2)
__________________Code:
ATTFilter 2016-03-05 12:19 - 2016-01-31 08:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2016-03-05 12:19 - 2016-01-31 08:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2016-03-05 12:19 - 2016-01-31 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll 2016-03-05 12:19 - 2016-01-31 07:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2016-03-05 12:19 - 2016-01-31 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll 2016-03-05 12:19 - 2016-01-31 07:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-03-05 12:19 - 2016-01-31 07:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2016-03-05 12:19 - 2016-01-31 07:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys 2016-03-05 12:19 - 2016-01-31 07:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-03-05 12:19 - 2016-01-31 07:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2016-03-05 12:19 - 2016-01-31 07:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-03-05 12:19 - 2016-01-05 05:07 - 02463704 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2016-03-05 12:19 - 2016-01-05 05:06 - 01063504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-03-05 12:19 - 2016-01-05 05:06 - 00119800 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-03-05 12:19 - 2016-01-05 05:04 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00779928 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00233992 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00090912 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 02152744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 00882208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 00100712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2016-03-05 12:19 - 2016-01-05 04:29 - 00208688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 02445128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00645144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00635312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00082096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2016-03-05 12:19 - 2016-01-05 04:09 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2016-03-05 12:19 - 2016-01-05 04:02 - 01672192 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-03-05 12:19 - 2016-01-05 04:02 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-03-05 12:19 - 2016-01-05 04:01 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-03-05 12:19 - 2016-01-05 03:57 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-03-05 12:19 - 2016-01-05 03:32 - 01541632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2016-03-05 12:19 - 2016-01-05 03:32 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2016-03-05 12:19 - 2016-01-05 03:31 - 00563200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2016-03-05 12:19 - 2016-01-05 03:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2016-03-05 12:19 - 2016-01-05 03:26 - 00373760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-03-05 12:19 - 2015-12-01 08:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gpuenergydrv.sys 2016-03-05 12:19 - 2015-11-25 07:40 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2016-03-05 12:19 - 2015-11-25 06:49 - 01569280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2016-03-05 12:19 - 2015-11-25 06:30 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2016-03-05 12:19 - 2015-11-25 06:30 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2016-03-05 12:19 - 2015-11-25 06:25 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2016-03-05 12:19 - 2015-11-25 06:22 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2016-03-05 12:19 - 2015-11-25 06:19 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2016-03-05 12:19 - 2015-11-25 06:18 - 01233920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2016-03-05 12:19 - 2015-11-25 06:10 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2016-03-05 12:19 - 2015-11-05 07:14 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2016-03-05 12:19 - 2015-11-05 07:13 - 00577888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2016-03-05 12:19 - 2015-11-05 06:56 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2016-03-05 12:19 - 2015-11-05 06:17 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2016-03-05 12:19 - 2015-11-05 06:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2016-03-05 12:19 - 2015-11-05 05:40 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2016-03-05 12:19 - 2015-10-06 05:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2016-03-05 12:19 - 2015-09-25 06:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2016-03-05 12:19 - 2015-09-25 05:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll 2016-03-05 12:19 - 2015-09-25 05:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll 2016-03-05 12:19 - 2015-09-25 04:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll 2016-03-05 12:19 - 2015-09-25 04:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll 2016-03-05 12:19 - 2015-09-25 04:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll 2016-03-05 12:19 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2016-03-05 12:19 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-03-05 12:19 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll 2016-03-05 12:19 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2016-03-05 12:19 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2016-03-05 12:19 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll 2016-03-05 12:19 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll 2016-03-05 12:19 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll 2016-03-05 12:19 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll 2016-03-05 12:19 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll 2016-03-05 12:19 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll 2016-03-05 12:19 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe 2016-03-05 12:19 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll 2016-03-05 12:19 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll 2016-03-05 12:19 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe 2016-03-05 12:19 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll 2016-03-05 12:19 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2016-03-05 12:19 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-03-05 12:19 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys 2016-03-05 12:19 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll 2016-03-05 12:19 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll 2016-03-05 12:19 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll 2016-03-05 12:19 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll 2016-03-05 12:19 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2016-03-05 12:19 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2016-03-05 12:19 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-03-05 12:19 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2016-03-05 12:19 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys 2016-03-05 12:19 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2016-03-05 12:19 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll 2016-03-05 12:19 - 2015-08-11 11:11 - 02446336 _____ C:\Windows\system32\InputService.dll 2016-03-05 12:19 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll 2016-03-05 12:19 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe 2016-03-05 12:19 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2016-03-05 12:19 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll 2016-03-05 12:19 - 2015-08-11 10:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll 2016-03-05 12:19 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2016-03-05 12:19 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys 2016-03-05 12:19 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-03-05 12:19 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll 2016-03-05 12:19 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-03-05 12:19 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2016-03-05 12:19 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll 2016-03-05 12:19 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-03-05 12:19 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll 2016-03-05 12:19 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll 2016-03-05 12:19 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2016-03-05 12:19 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2016-03-05 12:19 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys 2016-03-05 12:19 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll 2016-03-05 12:19 - 2015-07-24 04:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll 2016-03-05 12:19 - 2015-07-22 07:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2016-03-05 12:19 - 2015-07-22 06:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2016-03-05 12:19 - 2015-07-17 06:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys 2016-03-05 12:19 - 2015-07-17 06:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2016-03-05 12:19 - 2015-07-17 04:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2016-03-05 12:19 - 2015-07-17 03:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll 2016-03-05 12:19 - 2015-07-16 07:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys 2016-03-05 12:19 - 2015-07-16 05:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll 2016-03-05 12:19 - 2015-07-15 04:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2016-03-05 12:19 - 2015-07-14 04:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys 2016-03-05 12:19 - 2015-07-12 02:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll 2016-03-05 12:19 - 2015-07-11 03:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2016-03-05 12:19 - 2015-07-10 12:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll 2016-03-05 12:18 - 2016-01-31 08:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2016-03-05 12:18 - 2016-01-31 08:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll 2016-03-05 12:18 - 2016-01-31 07:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2016-03-05 12:18 - 2016-01-31 07:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2016-03-05 12:18 - 2016-01-31 07:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-03-05 12:18 - 2016-01-31 07:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll 2016-03-05 12:18 - 2016-01-31 07:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll 2016-03-05 12:18 - 2016-01-31 07:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2016-03-05 12:18 - 2016-01-31 07:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2016-03-05 12:18 - 2016-01-31 07:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-03-05 12:18 - 2016-01-31 07:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-03-05 12:18 - 2016-01-31 07:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-03-05 12:18 - 2016-01-31 07:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2016-03-05 12:18 - 2016-01-31 07:02 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-03-05 12:18 - 2016-01-05 05:07 - 00377592 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-03-05 12:18 - 2016-01-05 05:04 - 02641928 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-03-05 12:18 - 2016-01-05 05:04 - 00787720 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-03-05 12:18 - 2016-01-05 05:04 - 00249464 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-03-05 12:18 - 2016-01-05 05:04 - 00083704 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-03-05 12:18 - 2016-01-05 04:50 - 00345080 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-03-05 12:18 - 2016-01-05 04:50 - 00205072 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-03-05 12:18 - 2016-01-05 04:30 - 02459096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2016-03-05 12:18 - 2016-01-05 04:30 - 00368776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2016-03-05 12:18 - 2016-01-05 04:30 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-03-05 12:18 - 2016-01-05 04:28 - 00695752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2016-03-05 12:18 - 2016-01-05 04:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll 2016-03-05 12:18 - 2016-01-05 04:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\usermgrcli.dll 2016-03-05 12:18 - 2016-01-05 04:10 - 00305776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2016-03-05 12:18 - 2016-01-05 04:10 - 00188032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2016-03-05 12:18 - 2016-01-05 04:09 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2016-03-05 12:18 - 2016-01-05 04:02 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-03-05 12:18 - 2016-01-05 03:57 - 00712704 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll 2016-03-05 12:18 - 2016-01-05 03:57 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2016-03-05 12:18 - 2016-01-05 03:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll 2016-03-05 12:18 - 2016-01-05 03:44 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usermgrcli.dll 2016-03-05 12:18 - 2016-01-05 03:29 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-03-05 12:18 - 2016-01-05 03:29 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-03-05 12:18 - 2015-11-25 07:42 - 00168288 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe 2016-03-05 12:18 - 2015-11-25 06:49 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll 2016-03-05 12:18 - 2015-11-25 06:49 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll 2016-03-05 12:18 - 2015-11-25 06:49 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\RasMediaManager.dll 2016-03-05 12:18 - 2015-11-25 06:48 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\EthernetMediaManager.dll 2016-03-05 12:18 - 2015-11-25 06:48 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\DAMediaManager.dll 2016-03-05 12:18 - 2015-11-25 06:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2016-03-05 12:18 - 2015-11-05 07:15 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2016-03-05 12:18 - 2015-11-05 07:11 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll 2016-03-05 12:18 - 2015-11-05 07:06 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll 2016-03-05 12:18 - 2015-11-05 06:30 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll 2016-03-05 12:18 - 2015-11-05 06:23 - 00762888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll 2016-03-05 12:18 - 2015-11-05 06:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll 2016-03-05 12:18 - 2015-11-05 06:18 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2016-03-05 12:18 - 2015-11-05 06:10 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2016-03-05 12:18 - 2015-11-05 05:58 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll 2016-03-05 12:18 - 2015-11-05 05:55 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll 2016-03-05 12:18 - 2015-11-05 05:42 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2016-03-05 12:18 - 2015-11-05 05:35 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2016-03-05 12:18 - 2015-11-05 05:34 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll 2016-03-05 12:18 - 2015-11-05 05:27 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll 2016-03-05 12:18 - 2015-10-06 04:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2016-03-05 12:18 - 2015-10-01 05:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2016-03-05 12:18 - 2015-09-25 05:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll 2016-03-05 12:18 - 2015-09-25 05:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll 2016-03-05 12:18 - 2015-09-25 04:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll 2016-03-05 12:18 - 2015-09-25 04:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2016-03-05 12:18 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll 2016-03-05 12:18 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe 2016-03-05 12:18 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2016-03-05 12:18 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll 2016-03-05 12:18 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll 2016-03-05 12:18 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2016-03-05 12:18 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll 2016-03-05 12:18 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe 2016-03-05 12:18 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll 2016-03-05 12:18 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll 2016-03-05 12:18 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll 2016-03-05 12:18 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll 2016-03-05 12:18 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll 2016-03-05 12:18 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-03-05 12:18 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll 2016-03-05 12:18 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll 2016-03-05 12:18 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll 2016-03-05 12:18 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2016-03-05 12:18 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll 2016-03-05 12:18 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll 2016-03-05 12:18 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll 2016-03-05 12:18 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll 2016-03-05 12:18 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll 2016-03-05 12:18 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll 2016-03-05 12:18 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll 2016-03-05 12:18 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2016-03-05 12:18 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2016-03-05 12:18 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2016-03-05 12:18 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2016-03-05 12:18 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll 2016-03-05 12:18 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll 2016-03-05 12:18 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll 2016-03-05 12:18 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll 2016-03-05 12:18 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll 2016-03-05 12:18 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll 2016-03-05 12:18 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll 2016-03-05 12:18 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll 2016-03-05 12:18 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll 2016-03-05 12:18 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll 2016-03-05 12:18 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll 2016-03-05 12:18 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2016-03-05 12:18 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe 2016-03-05 12:18 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll 2016-03-05 12:18 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll 2016-03-05 12:18 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll 2016-03-05 12:18 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll 2016-03-05 12:18 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll 2016-03-05 12:18 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll 2016-03-05 12:18 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll 2016-03-05 12:18 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll 2016-03-05 12:18 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll 2016-03-05 12:18 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2016-03-05 12:18 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll 2016-03-05 12:18 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll 2016-03-05 12:18 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2016-03-05 12:18 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2016-03-05 12:18 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2016-03-05 12:18 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2016-03-05 12:18 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2016-03-05 12:18 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2016-03-05 12:18 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll 2016-03-05 12:18 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll 2016-03-05 12:18 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll 2016-03-05 12:18 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll 2016-03-05 12:18 - 2015-08-11 12:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe 2016-03-05 12:18 - 2015-08-11 11:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe 2016-03-05 12:18 - 2015-08-11 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll 2016-03-05 12:18 - 2015-08-11 11:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe 2016-03-05 12:18 - 2015-08-11 11:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll 2016-03-05 12:18 - 2015-08-11 11:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll 2016-03-05 12:18 - 2015-08-11 10:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe 2016-03-05 12:18 - 2015-08-11 10:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll 2016-03-05 12:18 - 2015-08-04 05:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll 2016-03-05 12:18 - 2015-08-03 04:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll 2016-03-05 12:18 - 2015-08-03 04:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll 2016-03-05 12:18 - 2015-08-03 03:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-03-05 12:18 - 2015-08-03 03:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll 2016-03-05 12:18 - 2015-08-03 03:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll 2016-03-05 12:18 - 2015-08-03 03:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll 2016-03-05 12:18 - 2015-08-03 03:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll 2016-03-05 12:18 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2016-03-05 12:18 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll 2016-03-05 12:18 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe 2016-03-05 12:18 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll 2016-03-05 12:18 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll 2016-03-05 12:18 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll 2016-03-05 12:18 - 2015-07-26 05:40 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2016-03-05 12:18 - 2015-07-26 05:30 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2016-03-05 12:18 - 2015-07-24 04:55 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll 2016-03-05 12:18 - 2015-07-24 04:52 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll 2016-03-05 12:18 - 2015-07-24 04:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll 2016-03-05 12:18 - 2015-07-24 04:30 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2016-03-05 12:18 - 2015-07-22 06:02 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2016-03-05 12:18 - 2015-07-22 05:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll 2016-03-05 12:18 - 2015-07-22 05:07 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2016-03-05 12:18 - 2015-07-18 09:43 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll 2016-03-05 12:18 - 2015-07-18 09:29 - 03443200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll 2016-03-05 12:18 - 2015-07-18 06:06 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll 2016-03-05 12:18 - 2015-07-18 05:52 - 04169728 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2016-03-05 12:18 - 2015-07-17 04:31 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-03-05 12:18 - 2015-07-17 04:26 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll 2016-03-05 12:18 - 2015-07-17 03:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll 2016-03-05 12:18 - 2015-07-16 06:04 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll 2016-03-05 12:18 - 2015-07-16 05:47 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll 2016-03-05 12:18 - 2015-07-16 05:36 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll 2016-03-05 12:18 - 2015-07-16 05:32 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2016-03-05 12:18 - 2015-07-15 04:04 - 00032768 _____ C:\Windows\system32\LicenseManagerApi.dll 2016-03-05 12:18 - 2015-07-15 03:57 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\OmaDmAgent.dll 2016-03-05 12:18 - 2015-07-15 03:35 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\unenrollhook.dll 2016-03-05 12:18 - 2015-07-15 03:27 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll 2016-03-05 12:18 - 2015-07-13 02:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe 2016-03-05 12:18 - 2015-07-13 01:30 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe 2016-03-05 12:18 - 2015-07-12 02:25 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe 2016-03-05 12:18 - 2015-07-12 02:18 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll 2016-03-05 12:18 - 2015-07-12 01:46 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll 2016-03-05 12:18 - 2015-07-11 03:28 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll 2016-03-05 12:18 - 2015-07-11 03:17 - 06305792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2016-03-05 12:18 - 2015-07-11 03:07 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll 2016-03-05 12:18 - 2015-07-11 03:05 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll 2016-03-05 12:18 - 2015-07-11 03:04 - 03362816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-03-05 12:18 - 2015-07-11 03:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2016-03-05 12:18 - 2015-07-11 03:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll 2016-03-05 12:18 - 2015-07-11 02:57 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll 2016-03-05 12:18 - 2015-07-11 02:51 - 04398080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2016-03-05 12:18 - 2015-07-11 02:43 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll 2016-03-05 12:18 - 2015-07-11 02:42 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll 2016-03-05 12:18 - 2015-07-11 02:41 - 03687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2016-03-05 12:18 - 2015-07-11 02:40 - 02606080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2016-03-05 12:18 - 2015-07-11 02:40 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2016-03-05 12:18 - 2015-07-10 17:51 - 00823336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2016-03-05 12:18 - 2015-07-10 17:00 - 01101792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2016-03-05 12:18 - 2015-07-10 11:53 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll 2016-03-05 12:17 - 2016-01-31 08:25 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-03-05 12:17 - 2016-01-31 08:24 - 01824880 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-03-05 12:17 - 2016-01-31 08:23 - 01420392 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2016-03-05 12:17 - 2016-01-31 08:06 - 01535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-03-05 12:17 - 2016-01-31 08:06 - 01531368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-03-05 12:17 - 2016-01-31 08:04 - 01180696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2016-03-05 12:17 - 2016-01-31 07:33 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\IoTAssignedAccessLockFramework.dll 2016-03-05 12:17 - 2016-01-31 07:24 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-03-05 12:17 - 2016-01-31 07:19 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-03-05 12:17 - 2016-01-31 07:11 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2016-03-05 12:17 - 2016-01-31 07:05 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-03-05 12:17 - 2016-01-05 05:06 - 01991120 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-03-05 12:17 - 2016-01-05 05:06 - 01270104 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll 2016-03-05 12:17 - 2016-01-05 05:04 - 01591848 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-03-05 12:17 - 2016-01-05 05:04 - 00862056 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll 2016-03-05 12:17 - 2016-01-05 05:04 - 00772448 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-03-05 12:17 - 2016-01-05 05:04 - 00751992 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-03-05 12:17 - 2016-01-05 05:04 - 00667856 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-03-05 12:17 - 2016-01-05 05:04 - 00115704 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-03-05 12:17 - 2016-01-05 04:50 - 00723648 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-03-05 12:17 - 2016-01-05 04:31 - 01365576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-03-05 12:17 - 2016-01-05 04:30 - 02162064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2016-03-05 12:17 - 2016-01-05 04:30 - 01106872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll 2016-03-05 12:17 - 2016-01-05 04:28 - 00714808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2016-03-05 12:17 - 2016-01-05 04:28 - 00696192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2016-03-05 12:17 - 2016-01-05 04:28 - 00497896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-03-05 12:17 - 2016-01-05 04:28 - 00107952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2016-03-05 12:17 - 2016-01-05 04:28 - 00072808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2016-03-05 12:17 - 2016-01-05 04:15 - 00931328 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-03-05 12:17 - 2016-01-05 04:10 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\mfh264enc.dll 2016-03-05 12:17 - 2016-01-05 04:00 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-03-05 12:17 - 2016-01-05 03:59 - 00572928 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-03-05 12:17 - 2016-01-05 03:51 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-03-05 12:17 - 2016-01-05 03:51 - 01009664 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-03-05 12:17 - 2016-01-05 03:51 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-03-05 12:17 - 2016-01-05 03:51 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-03-05 12:17 - 2016-01-05 03:51 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-03-05 12:17 - 2016-01-05 03:42 - 00871936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-03-05 12:17 - 2016-01-05 03:38 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfh264enc.dll 2016-03-05 12:17 - 2016-01-05 03:20 - 00890880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-03-05 12:17 - 2016-01-05 03:19 - 01070080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-03-05 12:17 - 2016-01-05 03:19 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2016-03-05 12:17 - 2016-01-05 03:19 - 00409088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2016-03-05 12:17 - 2016-01-05 03:19 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-03-05 12:17 - 2015-11-25 07:27 - 01366680 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-03-05 12:17 - 2015-11-25 07:09 - 01310880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2016-03-05 12:17 - 2015-11-25 06:37 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-03-05 12:17 - 2015-11-25 06:36 - 01710592 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll 2016-03-05 12:17 - 2015-11-25 06:35 - 00929792 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2016-03-05 12:17 - 2015-11-25 06:35 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe 2016-03-05 12:17 - 2015-11-25 06:29 - 01649152 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2016-03-05 12:17 - 2015-11-25 06:29 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll 2016-03-05 12:17 - 2015-11-25 06:27 - 02180608 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2016-03-05 12:17 - 2015-11-25 06:26 - 00849408 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2016-03-05 12:17 - 2015-11-25 06:26 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll 2016-03-05 12:17 - 2015-11-25 06:23 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-03-05 12:17 - 2015-11-25 06:22 - 01717248 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2016-03-05 12:17 - 2015-11-25 06:22 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll 2016-03-05 12:17 - 2015-11-25 06:19 - 01795584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2016-03-05 12:17 - 2015-11-25 06:17 - 00774656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2016-03-05 12:17 - 2015-11-25 06:16 - 01442816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll 2016-03-05 12:17 - 2015-11-25 06:16 - 00786432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe 2016-03-05 12:17 - 2015-11-25 06:13 - 02153984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2016-03-05 12:17 - 2015-11-25 06:11 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll 2016-03-05 12:17 - 2015-11-25 06:10 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2016-03-05 12:17 - 2015-11-25 06:08 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2016-03-05 12:17 - 2015-11-25 06:04 - 01467392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2016-03-05 12:17 - 2015-11-25 06:04 - 00480768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\duser.dll 2016-03-05 12:17 - 2015-11-25 06:04 - 00474624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-03-05 12:17 - 2015-11-05 06:12 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll 2016-03-05 12:17 - 2015-11-05 06:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll 2016-03-05 12:17 - 2015-11-05 06:03 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll 2016-03-05 12:17 - 2015-11-05 05:59 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll 2016-03-05 12:17 - 2015-11-05 05:54 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll 2016-03-05 12:17 - 2015-11-05 05:27 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll 2016-03-05 12:17 - 2015-11-05 05:23 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll 2016-03-05 12:17 - 2015-10-01 06:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-03-05 12:17 - 2015-09-25 06:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2016-03-05 12:17 - 2015-09-25 05:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi 2016-03-05 12:17 - 2015-09-25 05:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2016-03-05 12:17 - 2015-09-25 04:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2016-03-05 12:17 - 2015-09-25 04:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2016-03-05 12:17 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll 2016-03-05 12:17 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll 2016-03-05 12:17 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys 2016-03-05 12:17 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-03-05 12:17 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll 2016-03-05 12:17 - 2015-09-17 08:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll 2016-03-05 12:17 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll 2016-03-05 12:17 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll 2016-03-05 12:17 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll 2016-03-05 12:17 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2016-03-05 12:17 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-05 12:17 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2016-03-05 12:17 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll 2016-03-05 12:17 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll 2016-03-05 12:17 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2016-03-05 12:17 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll 2016-03-05 12:17 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2016-03-05 12:17 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2016-03-05 12:17 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-05 12:17 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll 2016-03-05 12:17 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll 2016-03-05 12:17 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll 2016-03-05 12:17 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll 2016-03-05 12:17 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll 2016-03-05 12:17 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll 2016-03-05 12:17 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2016-03-05 12:17 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll 2016-03-05 12:17 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2016-03-05 12:17 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe 2016-03-05 12:17 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll 2016-03-05 12:17 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll 2016-03-05 12:17 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll 2016-03-05 12:17 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2016-03-05 12:17 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll 2016-03-05 12:17 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll 2016-03-05 12:17 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll 2016-03-05 12:17 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll 2016-03-05 12:17 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2016-03-05 12:17 - 2015-08-11 11:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2016-03-05 12:17 - 2015-08-11 11:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2016-03-05 12:17 - 2015-08-11 11:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll 2016-03-05 12:17 - 2015-08-11 11:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2016-03-05 12:17 - 2015-08-11 11:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll 2016-03-05 12:17 - 2015-08-11 11:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2016-03-05 12:17 - 2015-08-11 10:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2016-03-05 12:17 - 2015-08-11 10:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2016-03-05 12:17 - 2015-08-11 10:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2016-03-05 12:17 - 2015-08-08 08:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2016-03-05 12:17 - 2015-08-08 08:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2016-03-05 12:17 - 2015-08-08 08:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2016-03-05 12:17 - 2015-08-06 05:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys 2016-03-05 12:17 - 2015-08-03 04:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys 2016-03-05 12:17 - 2015-08-03 04:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe 2016-03-05 12:17 - 2015-08-03 03:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe 2016-03-05 12:17 - 2015-08-03 03:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll 2016-03-05 12:17 - 2015-08-03 03:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll 2016-03-05 12:17 - 2015-08-03 03:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll 2016-03-05 12:17 - 2015-08-03 03:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll 2016-03-05 12:17 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll 2016-03-05 12:17 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll 2016-03-05 12:17 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2016-03-05 12:17 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2016-03-05 12:17 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2016-03-05 12:17 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll 2016-03-05 12:17 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2016-03-05 12:17 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2016-03-05 12:17 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll 2016-03-05 12:17 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2016-03-05 12:17 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll 2016-03-05 12:17 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll 2016-03-05 12:17 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll 2016-03-05 12:17 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll 2016-03-05 12:17 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll 2016-03-05 12:17 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll 2016-03-05 12:17 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll 2016-03-05 12:17 - 2015-07-26 05:49 - 04760576 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-03-05 12:17 - 2015-07-26 05:49 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2016-03-05 12:17 - 2015-07-26 05:38 - 04350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2016-03-05 12:17 - 2015-07-26 05:34 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2016-03-05 12:17 - 2015-07-24 05:17 - 00695136 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2016-03-05 12:17 - 2015-07-24 05:17 - 00521568 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2016-03-05 12:17 - 2015-07-24 04:24 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe 2016-03-05 12:17 - 2015-07-19 06:04 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll 2016-03-05 12:17 - 2015-07-19 05:18 - 00430592 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2016-03-05 12:17 - 2015-07-18 10:47 - 00082616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll 2016-03-05 12:17 - 2015-07-18 09:37 - 01043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll 2016-03-05 12:17 - 2015-07-18 09:28 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll 2016-03-05 12:17 - 2015-07-18 09:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll 2016-03-05 12:17 - 2015-07-18 07:17 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll 2016-03-05 12:17 - 2015-07-18 05:59 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll 2016-03-05 12:17 - 2015-07-18 05:59 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll 2016-03-05 12:17 - 2015-07-18 05:50 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2016-03-05 12:17 - 2015-07-18 05:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2016-03-05 12:17 - 2015-07-17 06:13 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-03-05 12:17 - 2015-07-17 04:33 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\omadmprc.exe 2016-03-05 12:17 - 2015-07-17 04:18 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2016-03-05 12:17 - 2015-07-17 03:44 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2016-03-05 12:17 - 2015-07-16 06:03 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll 2016-03-05 12:17 - 2015-07-16 05:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2016-03-05 12:17 - 2015-07-16 05:41 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll 2016-03-05 12:17 - 2015-07-15 04:41 - 01135312 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe 2016-03-05 12:17 - 2015-07-15 04:22 - 02112512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2016-03-05 12:17 - 2015-07-15 03:47 - 04611584 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2016-03-05 12:17 - 2015-07-15 03:37 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.ProxyStub.dll 2016-03-05 12:17 - 2015-07-11 02:34 - 00294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll 2016-03-05 12:17 - 2015-07-10 12:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll 2016-03-05 12:17 - 2015-07-10 12:05 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll 2016-03-05 12:17 - 2015-07-10 11:29 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll 2016-03-05 12:16 - 2016-01-31 07:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll 2016-03-05 12:16 - 2016-01-31 07:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2016-03-05 12:16 - 2016-01-31 07:18 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2016-03-05 12:16 - 2016-01-31 07:13 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll 2016-03-05 12:16 - 2016-01-31 07:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll 2016-03-05 12:16 - 2016-01-31 07:05 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2016-03-05 12:16 - 2016-01-31 06:58 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll 2016-03-05 12:16 - 2016-01-05 05:04 - 00250520 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-03-05 12:16 - 2016-01-05 05:04 - 00243248 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-03-05 12:16 - 2016-01-05 04:52 - 00441696 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-03-05 12:16 - 2016-01-05 04:50 - 01817064 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2016-03-05 12:16 - 2016-01-05 04:50 - 00251544 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-03-05 12:16 - 2016-01-05 04:28 - 00277400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2016-03-05 12:16 - 2016-01-05 04:28 - 00116728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2016-03-05 12:16 - 2016-01-05 04:10 - 00278424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2016-03-05 12:16 - 2015-11-25 07:42 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-03-05 12:16 - 2015-11-25 07:32 - 00113184 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2016-03-05 12:16 - 2015-11-25 07:12 - 04047288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2016-03-05 12:16 - 2015-11-25 06:59 - 00092992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll 2016-03-05 12:16 - 2015-11-25 06:36 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2016-03-05 12:16 - 2015-11-25 06:31 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll 2016-03-05 12:16 - 2015-11-25 06:30 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll 2016-03-05 12:16 - 2015-11-25 06:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll 2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZST.DLL 2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2016-03-05 12:16 - 2015-11-25 06:07 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll 2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZST.DLL 2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2016-03-05 12:16 - 2015-11-25 04:52 - 00775312 _____ C:\Windows\SysWOW64\locale.nls 2016-03-05 12:16 - 2015-11-25 04:52 - 00775312 _____ C:\Windows\system32\locale.nls 2016-03-05 12:16 - 2015-11-05 06:56 - 00025280 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-03-05 12:16 - 2015-10-10 09:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-03-05 12:16 - 2015-09-25 05:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll 2016-03-05 12:16 - 2015-09-25 05:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll 2016-03-05 12:16 - 2015-09-25 05:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll 2016-03-05 12:16 - 2015-09-25 05:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll 2016-03-05 12:16 - 2015-09-25 04:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll 2016-03-05 12:16 - 2015-09-25 04:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll 2016-03-05 12:16 - 2015-09-25 04:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll 2016-03-05 12:16 - 2015-09-25 04:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll 2016-03-05 12:16 - 2015-09-25 04:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll 2016-03-05 12:16 - 2015-09-25 04:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll 2016-03-05 12:16 - 2015-09-25 04:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll 2016-03-05 12:16 - 2015-09-25 04:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll 2016-03-05 12:16 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll 2016-03-05 12:16 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll 2016-03-05 12:16 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2016-03-05 12:16 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2016-03-05 12:16 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2016-03-05 12:16 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2016-03-05 12:16 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll 2016-03-05 12:16 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll 2016-03-05 12:16 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll 2016-03-05 12:16 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll 2016-03-05 12:16 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll 2016-03-05 12:16 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll 2016-03-05 12:16 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe 2016-03-05 12:16 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll 2016-03-05 12:16 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll 2016-03-05 12:16 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll 2016-03-05 12:16 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2016-03-05 12:16 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll 2016-03-05 12:16 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2016-03-05 12:16 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2016-03-05 12:16 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll 2016-03-05 12:16 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll 2016-03-05 12:16 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll 2016-03-05 12:16 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll 2016-03-05 12:16 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll 2016-03-05 12:16 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll 2016-03-05 12:16 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll 2016-03-05 12:16 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll 2016-03-05 12:16 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll 2016-03-05 12:16 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll 2016-03-05 12:16 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll 2016-03-05 12:16 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll 2016-03-05 12:16 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll 2016-03-05 12:16 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll 2016-03-05 12:16 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll 2016-03-05 12:16 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll 2016-03-05 12:16 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll 2016-03-05 12:16 - 2015-08-18 08:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll 2016-03-05 12:16 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll 2016-03-05 12:16 - 2015-08-18 06:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList 2016-03-05 12:16 - 2015-08-11 11:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll 2016-03-05 12:16 - 2015-08-11 11:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll 2016-03-05 12:16 - 2015-08-11 11:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2016-03-05 12:16 - 2015-08-11 10:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll 2016-03-05 12:16 - 2015-08-11 10:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll 2016-03-05 12:16 - 2015-08-11 10:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll 2016-03-05 12:16 - 2015-08-11 10:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2016-03-05 12:16 - 2015-08-11 10:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll 2016-03-05 12:16 - 2015-08-05 06:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2016-03-05 12:16 - 2015-08-05 05:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2016-03-05 12:16 - 2015-08-03 04:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll 2016-03-05 12:16 - 2015-08-03 04:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll 2016-03-05 12:16 - 2015-08-03 04:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys 2016-03-05 12:16 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2016-03-05 12:16 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2016-03-05 12:16 - 2015-08-03 03:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll 2016-03-05 12:16 - 2015-08-03 03:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll 2016-03-05 12:16 - 2015-08-03 03:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe 2016-03-05 12:16 - 2015-08-03 02:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll 2016-03-05 12:16 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2016-03-05 12:16 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll 2016-03-05 12:16 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll 2016-03-05 12:16 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll 2016-03-05 12:16 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll 2016-03-05 12:16 - 2015-07-26 05:47 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2016-03-05 12:16 - 2015-07-26 05:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll 2016-03-05 12:16 - 2015-07-26 05:35 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2016-03-05 12:16 - 2015-07-26 05:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll 2016-03-05 12:16 - 2015-07-24 05:12 - 00584544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll 2016-03-05 12:16 - 2015-07-24 04:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll 2016-03-05 12:16 - 2015-07-22 06:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2016-03-05 12:16 - 2015-07-22 05:21 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe 2016-03-05 12:16 - 2015-07-19 05:23 - 00505344 _____ C:\Windows\system32\EditionUpgradeManagerObj.dll 2016-03-05 12:16 - 2015-07-18 07:02 - 00290312 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe 2016-03-05 12:16 - 2015-07-18 05:49 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2016-03-05 12:16 - 2015-07-18 05:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll 2016-03-05 12:16 - 2015-07-18 05:49 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2016-03-05 12:16 - 2015-07-18 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-03-05 12:16 - 2015-07-17 04:39 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2016-03-05 12:16 - 2015-07-17 04:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2016-03-05 12:16 - 2015-07-16 05:33 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll 2016-03-05 12:16 - 2015-07-16 05:19 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll 2016-03-05 12:16 - 2015-07-14 05:00 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll 2016-03-05 12:16 - 2015-07-14 04:37 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll 2016-03-05 12:16 - 2015-07-14 03:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2016-03-05 12:16 - 2015-07-14 03:38 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2016-03-05 12:16 - 2015-07-14 03:20 - 00279552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll 2016-03-05 12:16 - 2015-07-10 17:47 - 00265480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2016-03-05 12:16 - 2015-07-10 16:52 - 00335248 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2016-03-05 12:16 - 2015-07-10 12:42 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll 2016-03-05 12:13 - 2016-03-05 12:15 - 00000000 ____D C:\Users\Jan\AppData\Local\Comms 2016-03-05 12:09 - 2016-03-05 12:09 - 00004280 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-03-05 12:09 - 2016-03-05 12:09 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2016-03-05 12:09 - 2016-03-05 12:09 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2016-03-05 12:09 - 2016-03-05 12:09 - 00000000 ____D C:\Users\Jan\AppData\Roaming\AVAST Software 2016-03-05 12:08 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files (x86)\Google 2016-03-05 12:08 - 2016-03-23 21:42 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2016-03-05 12:08 - 2016-03-23 21:42 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2016-03-05 12:08 - 2016-03-05 14:59 - 00000000 ____D C:\Users\Jan\AppData\Local\Google 2016-03-05 12:08 - 2016-03-05 12:09 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2016-03-05 12:08 - 2016-03-05 12:09 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys 2016-03-05 12:08 - 2016-03-05 12:08 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-03-05 12:08 - 2016-03-05 12:08 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2016-03-05 12:08 - 2016-03-05 12:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2016-03-05 12:08 - 2016-03-05 12:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2016-03-05 12:08 - 2016-03-05 12:08 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr 2016-03-05 12:08 - 2016-03-05 12:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2016-03-05 12:07 - 2016-03-25 17:14 - 00000000 ____D C:\Program Files\AVAST Software 2016-03-05 12:06 - 2016-03-05 12:06 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2016-03-05 12:05 - 2016-03-25 17:14 - 00000000 ____D C:\ProgramData\AVAST Software 2016-03-05 12:04 - 2016-03-05 12:05 - 201900432 _____ (AVAST Software) C:\Users\Jan\Downloads\avast_free2253_antivirus_setup.exe 2016-03-05 12:03 - 2016-03-05 12:03 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Macromedia 2016-03-05 12:02 - 2016-03-05 12:02 - 00002352 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-03-05 12:02 - 2016-03-05 12:02 - 00000000 ___RD C:\Users\Jan\OneDrive 2016-03-05 12:02 - 2016-03-05 12:02 - 00000000 ____D C:\Users\Jan\AppData\Local\MicrosoftEdge 2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\Users\Jan\AppData\Roaming\ATI 2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\Users\Jan\AppData\Local\ATI 2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\ProgramData\ATI 2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\Program Files\ATI Technologies 2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2016-03-05 11:59 - 2016-03-05 11:59 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll 2016-03-05 11:59 - 2016-03-05 11:59 - 00102912 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdWT6.sys 2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\Program Files\AMD 2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\AMD 2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-03-05 11:58 - 2016-03-28 21:11 - 01699356 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-05 11:58 - 2016-03-05 11:58 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 39720944 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 30775792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys 2016-03-05 11:58 - 2016-03-05 11:58 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 10211016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 08982432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 07482560 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap 2016-03-05 11:58 - 2016-03-05 11:58 - 03437632 _____ C:\Windows\system32\atiumd6a.cap 2016-03-05 11:58 - 2016-03-05 11:58 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 01223544 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00833800 _____ C:\Windows\system32\amdicdxx.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00737410 _____ C:\Windows\system32\atiicdxx.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys 2016-03-05 11:58 - 2016-03-05 11:58 - 00662400 _____ C:\Windows\SysWOW64\atiapfxx.blb 2016-03-05 11:58 - 2016-03-05 11:58 - 00662400 _____ C:\Windows\system32\atiapfxx.blb 2016-03-05 11:58 - 2016-03-05 11:58 - 00631792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00471320 _____ C:\Windows\system32\amdmiracast.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00322868 _____ C:\Windows\system32\ativvaxy_vi.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00321200 _____ C:\Windows\system32\ativvaxy_vi_nd.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00255808 _____ C:\Windows\system32\ativvaxy_cz_nd.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00250884 _____ C:\Windows\system32\ativvaxy_FJ.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00249088 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00243696 _____ C:\Windows\system32\clinfo.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00234420 _____ C:\Windows\system32\ativvaxy_cik.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00232752 _____ C:\Windows\system32\ativvaxy_cik_nd.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00204952 _____ C:\Windows\system32\ativvsvl.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00177344 _____ C:\Windows\system32\ativce03.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00175648 _____ C:\Windows\system32\amde31a.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00168944 _____ C:\Windows\system32\atieah64.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00157144 _____ C:\Windows\system32\ativvsva.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00143344 _____ C:\Windows\system32\amdhdl64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00143056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00130064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00100816 _____ C:\Windows\system32\ativce02.dat 2016-03-05 11:58 - 2016-03-05 11:58 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe 2016-03-05 11:58 - 2016-03-05 11:58 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll 2016-03-05 11:58 - 2016-03-05 11:58 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll 2016-03-05 03:15 - 2016-03-05 03:15 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2016-03-05 03:14 - 2016-03-05 03:14 - 00469192 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys 2016-03-05 03:13 - 2016-03-28 20:51 - 00000000 ____D C:\Users\Jan\AppData\Local\Packages 2016-03-05 03:13 - 2016-03-25 17:11 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-03-05 03:13 - 2016-03-25 17:08 - 00000000 ____D C:\Users\Jan 2016-03-05 03:13 - 2016-03-05 12:09 - 00000000 ____D C:\Users\Jan\AppData\Local\VirtualStore 2016-03-05 03:13 - 2016-03-05 03:13 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_defaultuser0_HistoryPrediction.bin 2016-03-05 03:13 - 2016-03-05 03:13 - 00000020 ___SH C:\Users\Jan\ntuser.ini 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Vorlagen 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Startmenü 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Netzwerkumgebung 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Lokale Einstellungen 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Eigene Dateien 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Druckumgebung 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Videos 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Musik 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Bilder 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Local\Verlauf 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Local\Anwendungsdaten 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Anwendungsdaten 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Adobe 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Local\TileDataLayer 2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Local\Publishers 2016-03-05 03:10 - 2015-12-01 09:01 - 02115936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2016-03-05 03:07 - 2016-03-05 03:07 - 00000000 ____D C:\Windows\CSC 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Vorlagen 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Startmenü 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Programme 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Vorlagen 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Startmenü 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Dokumente 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Dokumente und Einstellungen 2016-03-05 03:05 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2016-03-05 03:03 - 2016-03-05 03:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2016-03-05 03:02 - 2016-03-28 19:41 - 00000000 ____D C:\Windows\Panther ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-28 21:11 - 2015-07-10 18:34 - 00733448 _____ C:\Windows\system32\perfh007.dat 2016-03-28 21:11 - 2015-07-10 18:34 - 00146184 _____ C:\Windows\system32\perfc007.dat 2016-03-28 21:11 - 2015-07-10 13:02 - 00000000 ____D C:\Windows\INF 2016-03-28 21:06 - 2015-07-10 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-28 21:06 - 2015-07-10 11:05 - 00131072 ___SH C:\Windows\system32\config\BBI 2016-03-28 20:51 - 2015-07-10 13:04 - 00000000 ___HD C:\Program Files\WindowsApps 2016-03-28 20:51 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\AppReadiness 2016-03-25 20:53 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\rescache 2016-03-25 17:39 - 2015-10-30 21:28 - 00000000 ___HD C:\$WINDOWS.~BT 2016-03-25 17:11 - 2015-07-10 14:20 - 00194272 _____ C:\Windows\system32\FNTCACHE.DAT 2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2016-03-24 00:47 - 2015-07-10 12:55 - 00000000 ____D C:\Windows\CbsTemp 2016-03-08 09:10 - 2015-07-10 13:06 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-03-08 09:10 - 2015-07-10 13:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-03-05 12:30 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\SysWOW64\oobe 2016-03-05 12:29 - 2015-07-10 18:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___SD C:\Windows\SysWOW64\F12 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___SD C:\Windows\system32\F12 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PurchaseDialog 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\DevicesFlow 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\oobe 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\appraiser 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Provisioning 2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\L2Schemas 2016-03-05 12:29 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\SysWOW64\Dism 2016-03-05 12:29 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Dism 2016-03-05 11:57 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\appcompat 2016-03-05 03:13 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PrintDialog 2016-03-05 03:13 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\MiracastView 2016-03-05 03:07 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\spool 2016-03-05 03:06 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT 2016-03-05 03:05 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\FxsTmp 2016-03-05 03:04 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Sysprep 2016-03-05 03:02 - 2015-07-10 13:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template Einige Dateien in TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-03-24 00:45 ==================== Ende von FRST.txt ============================ |
28.03.2016, 21:50 | #3 |
| Werbetab-Virus Addition:
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 durchgeführt von Jan (2016-03-28 22:19:00) Gestartet von C:\Users\Jan\Downloads Windows 10 Pro (X64) (2016-03-05 01:11:24) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2281809953-3163866376-3614606004-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2281809953-3163866376-3614606004-503 - Limited - Disabled) Gast (S-1-5-21-2281809953-3163866376-3614606004-501 - Limited - Disabled) Jan (S-1-5-21-2281809953-3163866376-3614606004-1001 - Administrator - Enabled) => C:\Users\Jan ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{588B7DD2-3480-4A89-A8F6-C6781CBFAD56}) (Version: 1.5 - Eyeo GmbH) AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software) CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Flyff (HKLM-x32\...\{7E210E1C-52A1-40E3-817B-D504E9F64DFA}_is1) (Version: Flyff - WEBZEN Inc) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Mozilla Firefox 45.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 de)) (Version: 45.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1 - Mozilla) SafeZone Stable 1.48.2066.44 (x32 Version: 1.48.2066.44 - Avast Software) Hidden Spotify (HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Spotify) (Version: 1.0.25.127.g58007b4c - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {07BE7E64-EB70-4075-A75F-1F35D3DCE413} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-24] (Microsoft Corporation) Task: {1F49E084-5B06-49B9-B48B-5CC2AEDCE2F5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-05] (AVAST Software) Task: {36120697-510F-4F8B-91B3-6D9C2DC92180} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd) Task: {589B567D-4576-4F69-9180-2B2BD586EA7E} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe [2016-03-23] (AVAST Software) Task: {F0A64389-7FC1-4AD5-A938-43C3C8161E09} - System32\Tasks\SafeZone scheduled Autoupdate 1458918867 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-02-01] (Avast Software) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-03-05 12:18 - 2015-07-15 04:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll 2016-03-05 12:17 - 2015-08-11 11:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll 2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll 2016-03-05 12:16 - 2015-09-17 07:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll 2016-03-05 12:18 - 2015-11-25 06:20 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-03-05 12:18 - 2015-11-25 06:17 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-03-05 12:18 - 2015-11-25 06:17 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-03-05 12:18 - 2015-09-17 07:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-07-10 13:00 - 2015-07-10 18:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll 2016-03-05 12:08 - 2016-03-05 12:08 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2016-03-05 12:08 - 2016-03-05 12:08 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-03-28 20:21 - 2016-03-28 20:21 - 02846208 _____ () C:\Program Files\AVAST Software\Avast\defs\16032801\algo.dll 2016-03-05 12:08 - 2016-03-05 12:08 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-03-05 12:08 - 2016-03-05 12:08 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-03-28 21:31 - 2016-03-28 21:31 - 47503472 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libcef.dll 2016-03-28 21:31 - 2016-03-28 21:31 - 01584240 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libglesv2.dll 2016-03-28 21:31 - 2016-03-28 21:31 - 00082032 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libegl.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2015-07-10 13:04 - 2015-07-10 13:02 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jan\Desktop\NzY1MDcwOTM2ODgxOENFRDhCODY6ZjhhMGU1NmI4NGI5MmUxOTc1ZGYwYTA5ZTI5ZGY1NzI6Ojo6OjA=.jpg DNS Servers: 82.163.143.171 - 82.163.142.173 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{FBF8CB45-CFAF-462F-8558-782DE9B39278}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{9DAB605D-2031-4FED-9F48-C713D8AAFA5C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{8E2A7B55-7124-4335-B96F-B9770D13BF3D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{21EC1F95-1DC0-4DB1-A7B5-06CB279CF232}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{3CC7776E-CA7F-4707-A14D-00F2F49F28F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{8746B499-1920-47A7-8165-9B70118D3D97}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{7D13FE0D-713B-44E0-B32A-D57B7A6CC979}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{4FF1C0F7-E9BA-4C39-B1F8-5D40403983CC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{1122DE50-834C-4AD6-8290-F15FB84D455A}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{48BFAE3C-C781-4B6B-9C3C-57A9737C1357}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe ==================== Wiederherstellungspunkte ========================= 05-03-2016 03:10:03 Windows Modules Installer 23-03-2016 21:40:52 Windows Modules Installer 28-03-2016 19:45:22 Installed Adblock Plus for IE (32-bit and 64-bit) ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (03/28/2016 09:24:14 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 10f8 Startzeit: 01d1892707bb1ef9 Beendigungszeit: 28 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe Berichts-ID: a5c6287f-f51a-11e5-9bc8-a4badbf255f8 Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Error: (03/28/2016 09:19:49 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1534 Startzeit: 01d18925bd43f9c7 Beendigungszeit: 107 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe Berichts-ID: 0792bf9e-f51a-11e5-9bc8-a4badbf255f8 Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Error: (03/28/2016 09:12:15 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 12a4 Startzeit: 01d189259a38913c Beendigungszeit: 32 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe Berichts-ID: f9e7a3cf-f518-11e5-9bc8-a4badbf255f8 Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Error: (03/28/2016 09:11:16 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 114c Startzeit: 01d1892561d8e294 Beendigungszeit: 31 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe Berichts-ID: d5f4e888-f518-11e5-9bc8-a4badbf255f8 Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Error: (03/28/2016 09:09:41 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0xC004C003 Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error: (03/28/2016 09:09:40 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C003 SKU-ID=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c Error: (03/28/2016 09:09:40 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: ) Description: Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0x8007139F Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C003 SKU-ID=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: ) Description: Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Systemfehler: ============= Error: (03/28/2016 10:13:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20. Error: (03/28/2016 09:05:57 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: Der Dienst Gruppenrichtlinienclient konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_Session1 erreicht. Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdatenspeicher _Session1 erreicht. Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Benutzerdatenspeicher _Session1" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1056 Error: (03/28/2016 09:05:14 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-D54262M) Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Benutzerdatenzugriff_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Benutzerdatenspeicher _Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Kontaktdaten_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz Prozentuale Nutzung des RAM: 46% Installierter physikalischer RAM: 3959.11 MB Verfügbarer physikalischer RAM: 2122.89 MB Summe virtueller Speicher: 5047.11 MB Verfügbarer virtueller Speicher: 2880.57 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:487.74 GB) (Free:443.35 GB) NTFS Drive d: () (Removable) (Total:7.44 GB) (Free:3.54 GB) NTFS Drive e: () (Fixed) (Total:31.98 GB) (Free:9.01 GB) FAT32 Drive f: () (Fixed) (Total:443.23 GB) (Free:442.53 GB) NTFS Drive k: (6517000001300) (CDROM) (Total:0.21 GB) (Free:0 GB) UDF ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 48000000) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=487.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS) ======================================================== Disk: 5 (Size: 7.4 GB) (Disk ID: 00063839) Partition 1: (Active) - (Size=7.4 GB) - (Type=07 NTFS) ======================================================== Disk: 6 (Size: 298.1 GB) (Disk ID: 00DF4685) Partition 1: (Not Active) - (Size=32 GB) - (Type=0C) ==================== Ende von Addition.txt ============================ |
29.03.2016, 10:07 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Hallo und Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
29.03.2016, 11:13 | #5 |
| Werbetab-Virus Hallo Cosinus, erstmal vielen Dank für deine schnelle Antwort! Weitere Logs habe ich momentan nicht und neue Scans soll ich ja nicht machen, richtig? |
29.03.2016, 11:18 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel. Wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen. Gib Bescheid wenn Avast weg ist.
__________________ --> Werbetab-Virus |
29.03.2016, 12:00 | #7 |
| Werbetab-Virus Avast deinstallieren, trotz dass ich momentan keine Alternative auf dem Rechner habe und gegebenenfalls im Rahmen der Behebung meines Problems noch Downloads vornehmen muss (auch wenn Avast da nur sehr begrenzt schützt)? Kurzes "Ja" reicht aus, sollte das der Fall sein. Dann werde ich das sofort tun...^^ |
29.03.2016, 12:09 | #8 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Dein tolles Avast konnte dich nicht vor der Junkware beschützen, aber nun hast du Angst wenn du für den Zeitraum der Bereinigung kein Avast hast?
__________________ Logfiles bitte immer in CODE-Tags posten |
29.03.2016, 12:52 | #9 |
| Werbetab-Virus Hast ja Recht Ist deinstalliert. |
29.03.2016, 13:36 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten |
29.03.2016, 14:20 | #11 |
| Werbetab-Virus Logfile nach dem ersten Scan mit 2 Malware Funden. Code:
ATTFilter --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 10.0.9200 Windows 10 x64 Account is Administrative Internet Explorer version: 11.0.10240.16724 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED CPU speed: 3.059000 GHz Memory total: 4151431168, free: 2155233280 Downloaded database version: v2016.03.29.03 Downloaded database version: v2016.03.12.01 Downloaded database version: v2016.03.24.01 ======================================= Initializing... Driver version: 0.3.0.4 ------------ Kernel report ------------ 03/29/2016 14:47:26 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kd.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\System32\drivers\werkernel.sys \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\System32\drivers\cmimcext.sys \SystemRoot\System32\drivers\ntosext.sys \SystemRoot\system32\CI.dll \SystemRoot\System32\drivers\msrpc.sys \SystemRoot\System32\drivers\FLTMGR.SYS \SystemRoot\System32\drivers\ksecdd.sys \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\System32\Drivers\acpiex.sys \SystemRoot\System32\Drivers\WppRecorder.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\WindowsTrustedRT.sys \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\msisadrv.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\System32\drivers\vdrvroot.sys \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\drivers\CEA.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\System32\drivers\pciide.sys \SystemRoot\System32\drivers\PCIIDEX.SYS \SystemRoot\System32\drivers\spaceport.sys \SystemRoot\System32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\System32\drivers\atapi.sys \SystemRoot\System32\drivers\ataport.SYS \SystemRoot\System32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\drivers\WdFilter.sys \SystemRoot\System32\Drivers\NTFS.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\drivers\wfplwfs.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\volsnap.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\disk.sys \SystemRoot\System32\drivers\CLASSPNP.SYS \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\drivers\cdrom.sys \SystemRoot\system32\drivers\filecrypt.sys \SystemRoot\system32\drivers\tbs.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\BasicDisplay.sys \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\BasicRender.sys \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\drivers\vwififlt.sys \SystemRoot\System32\drivers\pacer.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \SystemRoot\System32\drivers\gpuenergydrv.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\ahcache.sys \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys \SystemRoot\System32\drivers\kdnic.sys \SystemRoot\System32\drivers\umbus.sys \SystemRoot\System32\drivers\intelppm.sys \SystemRoot\system32\DRIVERS\atikmpag.sys \SystemRoot\system32\DRIVERS\atikmdag.sys \SystemRoot\System32\drivers\HDAudBus.sys \SystemRoot\System32\drivers\portcls.sys \SystemRoot\System32\drivers\drmk.sys \SystemRoot\System32\drivers\ks.sys \SystemRoot\System32\drivers\HECIx64.sys \SystemRoot\System32\drivers\usbehci.sys \SystemRoot\System32\drivers\USBPORT.SYS \SystemRoot\System32\drivers\k57nd60a.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys \SystemRoot\System32\drivers\rdpbus.sys \SystemRoot\System32\drivers\usbhub.sys \SystemRoot\System32\drivers\USBD.SYS \SystemRoot\system32\drivers\AtihdWT6.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\DRIVERS\HdAudio.sys \SystemRoot\System32\drivers\usbccgp.sys \SystemRoot\System32\drivers\hidusb.sys \SystemRoot\System32\drivers\HIDCLASS.SYS \SystemRoot\System32\drivers\HIDPARSE.SYS \SystemRoot\System32\drivers\mouhid.sys \SystemRoot\System32\drivers\mouclass.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kfull.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\drivers\USBSTOR.SYS \SystemRoot\System32\drivers\kbdhid.sys \SystemRoot\System32\drivers\kbdclass.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\System32\drivers\dxgmms2.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\System32\drivers\monitor.sys \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\storqosflt.sys \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\system32\DRIVERS\WUDFRd.sys \SystemRoot\System32\drivers\WpdUpFltr.sys \SystemRoot\system32\drivers\mslldp.sys \SystemRoot\system32\drivers\lltdio.sys \SystemRoot\system32\drivers\rspndr.sys \SystemRoot\system32\DRIVERS\udfs.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\System32\Drivers\dump_dumpata.sys \SystemRoot\System32\Drivers\dump_atapi.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\system32\drivers\Ndu.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\system32\drivers\mmcss.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\drivers\tunnel.sys \SystemRoot\System32\drivers\umpass.sys \SystemRoot\System32\drivers\condrv.sys \SystemRoot\system32\Drivers\WdNisDrv.sys \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys ----------- End ----------- Done! Scan started Database versions: main: v2016.03.29.03 rootkit: v2016.03.12.01 <<<2>>> Physical Sector Size: 512 Drive: 0, DevicePointer: 0xffffe00102cfb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe00102cffb10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe00102cfb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ DevicePointer: 0xffffe00102b38040, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffffe00102b21060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Drive 0 This is a System drive Scanning MBR on drive 0... Inspecting partition table: MBR Signature: 55AA Disk Signature: 48000000 Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 2048 Numsec = 204800 Partition is bootable Partition file system is NTFS Partition 1 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 206848 Numsec = 1022873600 Partition is not bootable Partition file system is NTFS Partition 2 type is Other (0x27) Partition is NOT ACTIVE. Partition starts at LBA: 1023080448 Numsec = 921600 Partition is not bootable Partition file system is NTFS Partition 3 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 1024002048 Numsec = 929517568 Partition is not bootable Partition file system is NTFS Disk Size: 1000204886016 bytes Sector size: 512 bytes Done! Physical Sector Size: 0 Drive: 1, DevicePointer: 0xffffe001032d5610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe0010395a040, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001032d5610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001032d2b10, DeviceName: \Device\0000003a\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 2, DevicePointer: 0xffffe0010395a610, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe00102badb10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe0010395a610, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\ DevicePointer: 0xffffe00103520b10, DeviceName: \Device\0000003b\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 3, DevicePointer: 0xffffe001032c1060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001032c1b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001032c1060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001032c2b10, DeviceName: \Device\0000003c\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 4, DevicePointer: 0xffffe001032bf060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001032bfb10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001032bf060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001032d5060, DeviceName: \Device\0000003d\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 512 Drive: 5, DevicePointer: 0xffffe001032f8060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001032f8b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001032f8060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001034fa060, DeviceName: \Device\0000003e\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 5 Scanning MBR on drive 5... Inspecting partition table: MBR Signature: 55AA Disk Signature: 63839 Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 2048 Numsec = 15603712 Partition is bootable Partition file system is NTFS Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 7990149120 bytes Sector size: 512 bytes Done! Physical Sector Size: 512 Drive: 6, DevicePointer: 0xffffe0010149a060, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001014a1b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe0010149a060, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001014ac440, DeviceName: \Device\00000045\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 6 Scanning MBR on drive 6... Inspecting partition table: MBR Signature: 55AA Disk Signature: DF4685 Partition information: Partition 0 type is Other (0xc) Partition is NOT ACTIVE. Partition starts at LBA: 63 Numsec = 67108801 Partition is not bootable Partition file system is FAT32 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 320072933376 bytes Sector size: 512 bytes Done! File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768) Infected: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{8b736c68-f413-4e9c-8814-e1131775c2b1}|NameServer --> [Trojan.DNSChanger.DNSRst] Infected: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer --> [Trojan.DNSChanger.DNSRst] Scan finished Creating System Restore point... Cleaning up... Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action reg.exe... Success! Queuing an action reg.exe Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Executing an action cmd.exe... Success! Removal scheduling successful. System shutdown needed. System shutdown occurred ======================================= --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 10.0.10240 Windows 10 x64 Account is Administrative Internet Explorer version: 11.0.10240.16724 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED CPU speed: 3.059000 GHz Memory total: 4151431168, free: 2717261824 Code:
ATTFilter --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 10.0.9200 Windows 10 x64 Account is Administrative Internet Explorer version: 11.0.10240.16724 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED CPU speed: 3.059000 GHz Memory total: 4151431168, free: 2788978688 Downloaded database version: v2016.03.29.03 Downloaded database version: v2016.03.12.01 Downloaded database version: v2016.03.24.01 ======================================= Initializing... Driver version: 0.3.0.4 ------------ Kernel report ------------ 03/29/2016 15:05:07 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kd.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\System32\drivers\werkernel.sys \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\System32\drivers\cmimcext.sys \SystemRoot\System32\drivers\ntosext.sys \SystemRoot\system32\CI.dll \SystemRoot\System32\drivers\msrpc.sys \SystemRoot\System32\drivers\FLTMGR.SYS \SystemRoot\System32\drivers\ksecdd.sys \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\System32\Drivers\acpiex.sys \SystemRoot\System32\Drivers\WppRecorder.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\WindowsTrustedRT.sys \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys \SystemRoot\system32\drivers\CLASSPNP.SYS \SystemRoot\System32\drivers\imofugc.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\msisadrv.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\System32\drivers\vdrvroot.sys \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\drivers\CEA.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\System32\drivers\pciide.sys \SystemRoot\System32\drivers\PCIIDEX.SYS \SystemRoot\System32\drivers\spaceport.sys \SystemRoot\System32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\System32\drivers\atapi.sys \SystemRoot\System32\drivers\ataport.SYS \SystemRoot\System32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\drivers\WdFilter.sys \SystemRoot\System32\Drivers\NTFS.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\drivers\wfplwfs.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\volsnap.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\disk.sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\drivers\cdrom.sys \SystemRoot\system32\drivers\filecrypt.sys \SystemRoot\system32\drivers\tbs.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\BasicDisplay.sys \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\BasicRender.sys \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\drivers\vwififlt.sys \SystemRoot\System32\drivers\pacer.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \SystemRoot\System32\drivers\gpuenergydrv.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\ahcache.sys \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys \SystemRoot\System32\drivers\kdnic.sys \SystemRoot\System32\drivers\umbus.sys \SystemRoot\System32\drivers\intelppm.sys \SystemRoot\system32\DRIVERS\atikmpag.sys \SystemRoot\system32\DRIVERS\atikmdag.sys \SystemRoot\System32\drivers\HDAudBus.sys \SystemRoot\System32\drivers\portcls.sys \SystemRoot\System32\drivers\drmk.sys \SystemRoot\System32\drivers\ks.sys \SystemRoot\System32\drivers\HECIx64.sys \SystemRoot\System32\drivers\usbehci.sys \SystemRoot\System32\drivers\USBPORT.SYS \SystemRoot\System32\drivers\k57nd60a.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys \SystemRoot\System32\drivers\rdpbus.sys \SystemRoot\System32\drivers\usbhub.sys \SystemRoot\System32\drivers\USBD.SYS \SystemRoot\system32\drivers\AtihdWT6.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\DRIVERS\HdAudio.sys \SystemRoot\System32\drivers\usbccgp.sys \SystemRoot\System32\drivers\hidusb.sys \SystemRoot\System32\drivers\HIDCLASS.SYS \SystemRoot\System32\drivers\HIDPARSE.SYS \SystemRoot\System32\drivers\mouhid.sys \SystemRoot\System32\drivers\mouclass.sys \SystemRoot\System32\drivers\USBSTOR.SYS \SystemRoot\system32\DRIVERS\udfs.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kfull.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\drivers\kbdhid.sys \SystemRoot\System32\drivers\kbdclass.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\drivers\dxgmms2.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\System32\drivers\monitor.sys \SystemRoot\System32\Drivers\dump_dumpata.sys \SystemRoot\System32\Drivers\dump_atapi.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\storqosflt.sys \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\system32\DRIVERS\WUDFRd.sys \SystemRoot\System32\drivers\WpdUpFltr.sys \SystemRoot\system32\drivers\mslldp.sys \SystemRoot\system32\drivers\lltdio.sys \SystemRoot\system32\drivers\rspndr.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\system32\drivers\Ndu.sys \SystemRoot\system32\drivers\mmcss.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\drivers\tunnel.sys \SystemRoot\System32\drivers\umpass.sys \SystemRoot\system32\Drivers\WdNisDrv.sys \SystemRoot\System32\drivers\condrv.sys \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys ----------- End ----------- Done! Scan started Database versions: main: v2016.03.29.03 rootkit: v2016.03.12.01 <<<2>>> Physical Sector Size: 512 Drive: 0, DevicePointer: 0xffffe001fbacf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fbacfb10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fbacf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fafeae40, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffffe001fb8c3060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Drive 0 This is a System drive Scanning MBR on drive 0... Inspecting partition table: MBR Signature: 55AA Disk Signature: 48000000 Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 2048 Numsec = 204800 Partition is bootable Partition file system is NTFS Partition 1 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 206848 Numsec = 1022873600 Partition is not bootable Partition file system is NTFS Partition 2 type is Other (0x27) Partition is NOT ACTIVE. Partition starts at LBA: 1023080448 Numsec = 921600 Partition is not bootable Partition file system is NTFS Partition 3 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 1024002048 Numsec = 929517568 Partition is not bootable Partition file system is NTFS Disk Size: 1000204886016 bytes Sector size: 512 bytes Done! Physical Sector Size: 0 Drive: 1, DevicePointer: 0xffffe001fc95e610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fc95d040, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fc95e610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc966b10, DeviceName: \Device\0000003a\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 2, DevicePointer: 0xffffe001fb8c0060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fb8c0b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fb8c0060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc9628c0, DeviceName: \Device\0000003b\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 3, DevicePointer: 0xffffe001fc949060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fc947040, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fc949060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc960060, DeviceName: \Device\0000003c\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 4, DevicePointer: 0xffffe001fc95d610, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fc947b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fc95d610, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc95f060, DeviceName: \Device\0000003d\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 512 Drive: 5, DevicePointer: 0xffffe001fc948060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fc948aa0, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fc948060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc946b10, DeviceName: \Device\0000003e\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 5 Scanning MBR on drive 5... Inspecting partition table: MBR Signature: 55AA Disk Signature: 63839 Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 2048 Numsec = 15603712 Partition is bootable Partition file system is NTFS Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 7990149120 bytes Sector size: 512 bytes Done! Physical Sector Size: 512 Drive: 6, DevicePointer: 0xffffe001fc98f610, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ --------- Disk Stack ------ DevicePointer: 0xffffe001fc98e040, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffe001fc98f610, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ DevicePointer: 0xffffe001fc98f060, DeviceName: \Device\00000045\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 6 Scanning MBR on drive 6... Inspecting partition table: MBR Signature: 55AA Disk Signature: DF4685 Partition information: Partition 0 type is Other (0xc) Partition is NOT ACTIVE. Partition starts at LBA: 63 Numsec = 67108801 Partition is not bootable Partition file system is FAT32 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 320072933376 bytes Sector size: 512 bytes Done! File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768) Scan finished ======================================= Removal queue found; removal started Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-206848-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-2-1023080448-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-3-1024002048-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-5-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-5-0-2048-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-5-r.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-6-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-6-0-63-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-6-r.mbam... Removal finished |
29.03.2016, 14:25 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Anleitung richtig lesen. Richtiges Log posten
__________________ Logfiles bitte immer in CODE-Tags posten |
29.03.2016, 14:33 | #13 |
| Werbetab-Virus Sorry neuer Versuch! Log Nr. 1 Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001 www.malwarebytes.org Database version: main: v2016.03.29.03 rootkit: v2016.03.12.01 Windows 10 x64 NTFS Internet Explorer 11.0.10240.16724 Jan :: DESKTOP-D54262M [administrator] 29.03.2016 14:47:37 mbar-log-2016-03-29 (14-47-37).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 333618 Time elapsed: 12 minute(s), 11 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{8b736c68-f413-4e9c-8814-e1131775c2b1}|NameServer (Trojan.DNSChanger.DNSRst) -> Data: 82.163.143.171 82.163.142.173 -> Delete on reboot. [5334612c7e1b3501f5fd90fabc4814ec] Registry Data Items Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer (Trojan.DNSChanger.DNSRst) -> Bad: (82.163.143.171 82.163.142.173) Good: (8.8.8.8) -> Replace on reboot. [493efc91c2d784b2835545e8e2230ef2] Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001 www.malwarebytes.org Database version: main: v2016.03.29.03 rootkit: v2016.03.12.01 Windows 10 x64 NTFS Internet Explorer 11.0.10240.16724 Jan :: DESKTOP-D54262M [administrator] 29.03.2016 15:05:20 mbar-log-2016-03-29 (15-05-20).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 333441 Time elapsed: 11 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) |
29.03.2016, 14:35 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Werbetab-Virus Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
29.03.2016, 15:11 | #15 |
| Werbetab-Virus adwCleaner-Log Code:
ATTFilter # AdwCleaner v5.107 - Bericht erstellt am 29/03/2016 um 15:47:31 # Aktualisiert am 28/03/2016 von Xplode # Datenbank : 2016-03-28.2 [Server] # Betriebssystem : Windows 10 Pro (x64) # Benutzername : Jan - DESKTOP-D54262M # Gestartet von : C:\Users\Jan\Desktop\AdwCleaner_5.107.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner Gelöscht : C:\ProgramData\245bef91 [-] Ordner Gelöscht : C:\ProgramData\974b174d-4113-1 [-] Ordner Gelöscht : C:\ProgramData\974b174d-77c1-0 [-] Ordner Gelöscht : C:\ProgramData\e5e9eaf1-31b1-0 [-] Ordner Gelöscht : C:\ProgramData\{00519dfc-212c-1} [-] Ordner Gelöscht : C:\ProgramData\{00ff91ce-212c-0} [-] Ordner Gelöscht : C:\ProgramData\{04895d5a-012c-0} [-] Ordner Gelöscht : C:\ProgramData\{1b801477-312c-1} [-] Ordner Gelöscht : C:\Users\Jan\AppData\Local\SearchProtect [-] Ordner Gelöscht : C:\Users\Jan\AppData\Local\SecurityUtility ***** [ Dateien ] ***** [-] Datei Gelöscht : C:\END ***** [ DLLs ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Wert GGelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564 [-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WebBar [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\bestpriceninja.com [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.bestpriceninja.com [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\utop.it [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\d19tqk5t6qcjac.cloudfront.net [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pstatic.eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\d19tqk5t6qcjac.cloudfront.net [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pstatic.eshopcomp.com [-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it ***** [ Internetbrowser ] ***** ************************* :: "Tracing" Schlüssel gelöscht :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [4549 Bytes] - [29/03/2016 15:47:31] C:\AdwCleaner\AdwCleaner[S3].txt - [4500 Bytes] - [29/03/2016 15:46:33] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4695 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.4 (03.14.2016) Operating System: Windows 10 Pro x64 Ran by Jan (Administrator) on 29.03.2016 at 15:57:47,45 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 1 Successfully deleted: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default\extensions\staged (Folder) Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 29.03.2016 at 15:58:26,09 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von Jan (Administrator) auf DESKTOP-D54262M (29-03-2016 16:00:10) Gestartet von C:\Users\Jan\Desktop Geladene Profile: Jan (Verfügbare Profile: Jan) Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify Web Helper] => C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-28] (Spotify Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify] => C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe [6805616 2016-03-28] (Spotify Ltd) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.) HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [149504 2015-07-10] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4 Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH) Toolbar: HKU\S-1-5-21-2281809953-3163866376-3614606004-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-16] [ist nicht signiert] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4192344 2016-03-09] (INCA Internet Co., Ltd.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2016-03-05] (Advanced Micro Devices) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-29 15:58 - 2016-03-29 15:58 - 00000666 _____ C:\Users\Jan\Desktop\JRT.txt 2016-03-29 15:55 - 2016-03-29 15:55 - 00004781 _____ C:\Users\Jan\Desktop\AdwCleaner[C1].txt 2016-03-29 15:49 - 2016-03-29 15:49 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_Jan_HistoryPrediction.bin 2016-03-29 15:43 - 2016-03-29 15:55 - 01610352 _____ (Malwarebytes) C:\Users\Jan\Desktop\JRT.exe 2016-03-29 15:40 - 2016-03-29 15:40 - 03102208 _____ C:\Users\Jan\Desktop\AdwCleaner_5.107.exe 2016-03-29 14:47 - 2016-03-29 15:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-03-29 14:47 - 2016-03-29 15:05 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-03-29 14:47 - 2016-03-29 14:47 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-03-29 14:46 - 2016-03-29 15:28 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-03-29 14:45 - 2016-03-29 15:29 - 00000000 ____D C:\Users\Jan\Desktop\MBAR 2016-03-29 14:15 - 2016-03-29 14:15 - 00000000 ____D C:\Users\Jan\Tracing 2016-03-29 14:14 - 2016-03-29 15:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype 2016-03-29 14:14 - 2016-03-29 14:14 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ____D C:\ProgramData\Skype 2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-03-29 14:13 - 2016-03-29 14:13 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Jan\Downloads\SkypeSetup.exe 2016-03-29 13:54 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-03-28 22:19 - 2016-03-28 22:19 - 00019554 _____ C:\Users\Jan\Desktop\Addition.txt 2016-03-28 22:18 - 2016-03-29 16:00 - 00005922 _____ C:\Users\Jan\Desktop\FRST.txt 2016-03-28 22:16 - 2016-03-28 22:16 - 02374144 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe 2016-03-28 21:36 - 2016-03-29 15:47 - 00000000 ____D C:\AdwCleaner 2016-03-28 21:36 - 2016-03-28 21:36 - 01538560 _____ C:\Users\Jan\Downloads\AdwCleaner_5.106.exe 2016-03-28 21:31 - 2016-03-29 13:04 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify 2016-03-28 21:31 - 2016-03-29 13:04 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify 2016-03-28 21:31 - 2016-03-28 21:31 - 00001840 _____ C:\Users\Jan\Desktop\Spotify.lnk 2016-03-28 21:31 - 2016-03-28 21:31 - 00001826 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-03-28 21:29 - 2016-03-28 21:31 - 00350936 _____ (Spotify Ltd) C:\Users\Jan\Downloads\SpotifySetup.exe 2016-03-28 21:23 - 2016-03-28 21:23 - 01475080 _____ C:\Users\Jan\Downloads\Spotify - CHIP-Installer.exe 2016-03-28 20:56 - 2016-03-28 20:55 - 05006864 _____ (AVAST Software) C:\Users\Jan\Downloads\Avast_Setup [1].exe 2016-03-28 20:55 - 2016-03-28 20:55 - 01006024 _____ (Cotuf ) C:\Users\Jan\Downloads\Avast_Setup.exe 2016-03-28 20:08 - 2016-03-29 16:00 - 00000000 ____D C:\FRST 2016-03-28 19:50 - 2016-03-28 19:50 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-03-28 19:50 - 2016-03-28 19:50 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Mozilla 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Local\Mozilla 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-03-28 19:49 - 2016-03-28 19:49 - 00242376 _____ C:\Users\Jan\Downloads\Firefox Setup Stub 45.0.1.exe 2016-03-28 19:47 - 2016-03-28 19:47 - 00000000 ____D C:\Program Files\Adblock Plus for IE 2016-03-28 19:44 - 2016-03-28 19:44 - 06468104 _____ ( ) C:\Users\Jan\Downloads\adblockplusie-1.5.exe 2016-03-28 19:40 - 2016-03-28 19:40 - 06868672 _____ (Piriform Ltd) C:\Users\Jan\Downloads\ccsetup516.exe 2016-03-28 19:40 - 2016-03-28 19:40 - 00002866 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-03-28 19:40 - 2016-03-28 19:40 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-03-28 19:40 - 2016-03-28 19:40 - 00000000 ____D C:\Program Files\CCleaner 2016-03-25 20:52 - 2016-03-25 20:52 - 00000000 ____D C:\Windows\system32\SleepStudy 2016-03-24 00:45 - 2016-03-24 00:45 - 00000000 ____D C:\Users\Jan\AppData\Local\PeerDistRepub 2016-03-23 22:20 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-03-23 22:20 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-03-23 22:20 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2016-03-23 22:20 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2016-03-23 22:20 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2016-03-23 22:20 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-03-23 22:20 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-03-23 22:20 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-03-23 22:20 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-03-23 22:20 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL 2016-03-23 22:20 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2016-03-23 22:20 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2016-03-23 22:20 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2016-03-23 22:20 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll 2016-03-23 22:20 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll 2016-03-23 22:20 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-03-23 22:20 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-03-23 22:20 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe 2016-03-23 22:20 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-03-23 22:20 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-03-23 22:20 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-03-23 22:20 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2016-03-23 22:20 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2016-03-23 22:20 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL 2016-03-23 22:20 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll 2016-03-23 22:20 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll 2016-03-23 22:20 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll 2016-03-23 22:20 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2016-03-23 22:20 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe 2016-03-23 22:20 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll 2016-03-23 22:20 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe 2016-03-23 22:20 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2016-03-23 22:20 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll 2016-03-23 22:20 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll 2016-03-23 22:20 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-03-23 22:20 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-03-23 22:20 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-03-23 22:20 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2016-03-23 22:20 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll 2016-03-23 22:20 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-03-23 22:20 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe 2016-03-23 22:20 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-03-23 22:20 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll 2016-03-23 22:20 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys 2016-03-23 22:20 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll 2016-03-23 22:20 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-03-23 22:20 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-03-23 22:20 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2016-03-23 22:20 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll 2016-03-23 22:20 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-03-23 22:20 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll 2016-03-23 22:20 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe 2016-03-23 22:20 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll 2016-03-23 22:20 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-03-23 22:20 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2016-03-23 22:20 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2016-03-23 22:20 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2016-03-23 22:20 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-03-23 22:20 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2016-03-23 22:20 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2016-03-23 22:20 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll 2016-03-23 22:20 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-03-23 22:20 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2016-03-23 22:20 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-03-23 22:20 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-03-23 22:20 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll 2016-03-23 22:20 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll 2016-03-23 22:20 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2016-03-23 22:20 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2016-03-23 22:20 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe 2016-03-23 22:20 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2016-03-23 22:20 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-03-23 22:20 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll 2016-03-23 22:20 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2016-03-23 22:20 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2016-03-23 22:20 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll 2016-03-23 22:20 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-03-23 22:20 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2016-03-23 22:20 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2016-03-23 22:20 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-03-23 22:20 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2016-03-23 22:20 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2016-03-23 21:42 - 2016-03-23 21:42 - 00003040 _____ C:\Windows\System32\Tasks\avast! Windows 10 Start Menu helper 2016-03-23 21:41 - 2016-03-23 21:41 - 00000000 ____D C:\Program Files\Common Files\INCA Shared 2016-03-23 21:41 - 2016-03-09 12:51 - 04192344 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des 2016-03-23 21:41 - 2004-12-30 14:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys 2016-03-23 21:41 - 2003-07-15 23:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd 2016-03-05 15:53 - 2016-03-05 15:55 - 00000000 ____D C:\Users\Jan\Desktop\CSGO Config 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WinRAR 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-03-05 15:51 - 2016-03-05 15:52 - 00000000 ____D C:\Program Files\WinRAR 2016-03-05 15:51 - 2016-03-05 15:51 - 02114664 _____ C:\Users\Jan\Downloads\winrar-x64-531d.exe 2016-03-05 15:50 - 2016-03-05 15:52 - 00005100 _____ C:\Users\Jan\Downloads\config.rar 2016-03-05 15:12 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2016-03-05 15:12 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2016-03-05 15:12 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2016-03-05 15:12 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2016-03-05 15:12 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2016-03-05 15:12 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2016-03-05 15:12 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2016-03-05 15:12 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2016-03-05 15:12 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2016-03-05 15:12 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2016-03-05 15:12 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2016-03-05 15:12 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2016-03-05 15:12 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2016-03-05 15:12 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-03-05 15:12 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2016-03-05 15:12 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2016-03-05 15:12 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2016-03-05 15:12 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2016-03-05 15:12 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2016-03-05 15:12 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2016-03-05 15:12 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2016-03-05 15:12 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2016-03-05 15:12 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2016-03-05 15:12 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2016-03-05 15:12 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2016-03-05 15:12 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2016-03-05 15:12 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2016-03-05 15:12 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2016-03-05 15:12 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2016-03-05 15:12 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2016-03-05 15:12 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2016-03-05 15:12 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2016-03-05 15:12 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2016-03-05 15:12 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2016-03-05 15:12 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2016-03-05 15:12 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2016-03-05 15:12 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2016-03-05 15:12 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2016-03-05 15:12 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2016-03-05 15:12 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2016-03-05 15:12 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2016-03-05 15:12 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2016-03-05 15:12 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2016-03-05 15:12 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2016-03-05 15:12 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2016-03-05 15:12 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2016-03-05 15:12 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2016-03-05 15:12 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2016-03-05 15:12 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2016-03-05 15:12 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2016-03-05 15:12 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2016-03-05 15:12 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2016-03-05 15:12 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2016-03-05 15:12 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2016-03-05 15:12 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2016-03-05 15:12 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2016-03-05 15:12 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2016-03-05 15:12 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2016-03-05 15:12 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2016-03-05 15:12 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2016-03-05 15:12 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2016-03-05 15:12 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2016-03-05 15:12 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2016-03-05 15:12 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2016-03-05 15:12 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2016-03-05 15:12 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2016-03-05 15:12 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2016-03-05 15:12 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2016-03-05 15:12 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2016-03-05 15:12 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2016-03-05 15:12 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2016-03-05 15:12 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2016-03-05 15:12 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2016-03-05 15:12 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2016-03-05 15:12 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2016-03-05 15:12 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2016-03-05 15:12 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2016-03-05 15:12 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2016-03-05 15:12 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2016-03-05 15:12 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2016-03-05 15:12 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2016-03-05 15:12 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2016-03-05 14:57 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files\Google 2016-03-05 14:56 - 2016-03-05 14:56 - 00987728 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleToolbarSetup.exe 2016-03-05 13:25 - 2016-03-05 13:25 - 00001509 _____ C:\Users\Public\Desktop\Flyff.lnk 2016-03-05 13:25 - 2016-03-05 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flyff 2016-03-05 13:21 - 2016-03-05 13:21 - 00000000 ____D C:\Program Files\Webzen 2016-03-05 13:12 - 2016-03-05 13:12 - 05810184 _____ C:\Users\Jan\Downloads\Flyff_de_Downloader.exe 2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\ProgramData\WEBZEN 2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\download 2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\Steam 2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\CEF 2016-03-05 13:06 - 2016-03-28 19:41 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-05 13:06 - 2016-03-05 13:06 - 01380712 _____ C:\Users\Jan\Downloads\SteamSetup.exe 2016-03-05 13:06 - 2016-03-05 13:06 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk 2016-03-05 13:06 - 2016-03-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-03-05 12:38 - 2016-03-29 13:05 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8C350B2D-D49C-4624-8373-F9A16C366C9A} 2016-03-05 12:27 - 2016-03-05 12:27 - 00000000 ____D C:\Users\Jan\AppData\Roaming\dlg 2016-03-05 12:25 - 2016-03-24 00:52 - 00000000 ____D C:\Windows\system32\MRT 2016-03-05 12:25 - 2016-03-24 00:51 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-03-05 12:25 - 2016-03-05 12:25 - 00540096 _____ C:\Users\Jan\Downloads\internet_explorer.exe 2016-03-05 12:24 - 2016-03-28 19:47 - 00000000 ____D C:\Users\Jan\AppData\LocalLow\Adblock Plus for IE 2016-03-05 12:19 - 2016-01-31 08:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2016-03-05 12:19 - 2016-01-31 08:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2016-03-05 12:19 - 2016-01-31 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll 2016-03-05 12:19 - 2016-01-31 07:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2016-03-05 12:19 - 2016-01-31 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll 2016-03-05 12:19 - 2016-01-31 07:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-03-05 12:19 - 2016-01-31 07:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2016-03-05 12:19 - 2016-01-31 07:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys 2016-03-05 12:19 - 2016-01-31 07:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-03-05 12:19 - 2016-01-31 07:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2016-03-05 12:19 - 2016-01-31 07:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-03-05 12:19 - 2016-01-05 05:07 - 02463704 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2016-03-05 12:19 - 2016-01-05 05:06 - 01063504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-03-05 12:19 - 2016-01-05 05:06 - 00119800 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-03-05 12:19 - 2016-01-05 05:04 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00779928 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00233992 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2016-03-05 12:19 - 2016-01-05 05:04 - 00090912 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 02152744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 00882208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2016-03-05 12:19 - 2016-01-05 04:30 - 00100712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2016-03-05 12:19 - 2016-01-05 04:29 - 00208688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 02445128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00645144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00635312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2016-03-05 12:19 - 2016-01-05 04:28 - 00082096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2016-03-05 12:19 - 2016-01-05 04:09 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2016-03-05 12:19 - 2016-01-05 04:02 - 01672192 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-03-05 12:19 - 2016-01-05 04:02 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-03-05 12:19 - 2016-01-05 04:01 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-03-05 12:19 - 2016-01-05 03:57 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-03-05 12:19 - 2016-01-05 03:32 - 01541632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2016-03-05 12:19 - 2016-01-05 03:32 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2016-03-05 12:19 - 2016-01-05 03:31 - 00563200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2016-03-05 12:19 - 2016-01-05 03:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2016-03-05 12:19 - 2016-01-05 03:26 - 00373760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-03-05 12:19 - 2015-12-01 08:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gpuenergydrv.sys 2016-03-05 12:19 - 2015-11-25 07:40 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2016-03-05 12:19 - 2015-11-25 06:49 - 01569280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2016-03-05 12:19 - 2015-11-25 06:30 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2016-03-05 12:19 - 2015-11-25 06:30 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2016-03-05 12:19 - 2015-11-25 06:25 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2016-03-05 12:19 - 2015-11-25 06:22 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2016-03-05 12:19 - 2015-11-25 06:19 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2016-03-05 12:19 - 2015-11-25 06:18 - 01233920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2016-03-05 12:19 - 2015-11-25 06:10 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2016-03-05 12:19 - 2015-11-05 07:14 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2016-03-05 12:19 - 2015-11-05 07:13 - 00577888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2016-03-05 12:19 - 2015-11-05 06:56 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2016-03-05 12:19 - 2015-11-05 06:17 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2016-03-05 12:19 - 2015-11-05 06:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2016-03-05 12:19 - 2015-11-05 05:40 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2016-03-05 12:19 - 2015-10-06 05:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2016-03-05 12:19 - 2015-09-25 06:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2016-03-05 12:19 - 2015-09-25 05:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll 2016-03-05 12:19 - 2015-09-25 05:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll 2016-03-05 12:19 - 2015-09-25 04:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll 2016-03-05 12:19 - 2015-09-25 04:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll 2016-03-05 12:19 - 2015-09-25 04:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll 2016-03-05 12:19 - 2015-09-25 04:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll 2016-03-05 12:19 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2016-03-05 12:19 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-03-05 12:19 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-03-05 12:19 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll 2016-03-05 12:19 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2016-03-05 12:19 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2016-03-05 12:19 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll 2016-03-05 12:19 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll 2016-03-05 12:19 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll 2016-03-05 12:19 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll 2016-03-05 12:19 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll 2016-03-05 12:19 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll 2016-03-05 12:19 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe 2016-03-05 12:19 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll 2016-03-05 12:19 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll 2016-03-05 12:19 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll 2016-03-05 12:19 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe 2016-03-05 12:19 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2016-03-05 12:19 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll 2016-03-05 12:19 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2016-03-05 12:19 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-03-05 12:19 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys 2016-03-05 12:19 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll 2016-03-05 12:19 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll 2016-03-05 12:19 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll 2016-03-05 12:19 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2016-03-05 12:19 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll 2016-03-05 12:19 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll 2016-03-05 12:19 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2016-03-05 12:19 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2016-03-05 12:19 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-03-05 12:19 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2016-03-05 12:19 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys 2016-03-05 12:19 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2016-03-05 12:19 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll 2016-03-05 12:19 - 2015-08-11 11:11 - 02446336 _____ C:\Windows\system32\InputService.dll 2016-03-05 12:19 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll 2016-03-05 12:19 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe 2016-03-05 12:19 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2016-03-05 12:19 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll 2016-03-05 12:19 - 2015-08-11 10:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll 2016-03-05 12:19 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2016-03-05 12:19 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys 2016-03-05 12:19 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-03-05 12:19 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll 2016-03-05 12:19 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-03-05 12:19 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2016-03-05 12:19 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll 2016-03-05 12:19 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-03-05 12:19 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll 2016-03-05 12:19 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll 2016-03-05 12:19 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2016-03-05 12:19 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2016-03-05 12:19 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys 2016-03-05 12:19 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll 2016-03-05 12:19 - 2015-07-24 04:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll 2016-03-05 12:19 - 2015-07-22 07:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2016-03-05 12:19 - 2015-07-22 06:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2016-03-05 12:19 - 2015-07-17 06:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys 2016-03-05 12:19 - 2015-07-17 06:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2016-03-05 12:19 - 2015-07-17 04:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2016-03-05 12:19 - 2015-07-17 03:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll 2016-03-05 12:19 - 2015-07-16 07:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys 2016-03-05 12:19 - 2015-07-16 05:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll 2016-03-05 12:19 - 2015-07-15 04:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2016-03-05 12:19 - 2015-07-14 04:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys 2016-03-05 12:19 - 2015-07-12 02:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll 2016-03-05 12:19 - 2015-07-11 03:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2016-03-05 12:19 - 2015-07-10 12:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll 2016-03-05 12:18 - 2016-01-31 08:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2016-03-05 12:18 - 2016-01-31 08:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll 2016-03-05 12:18 - 2016-01-31 07:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2016-03-05 12:18 - 2016-01-31 07:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2016-03-05 12:18 - 2016-01-31 07:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-03-05 12:18 - 2016-01-31 07:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll 2016-03-05 12:18 - 2016-01-31 07:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll 2016-03-05 12:18 - 2016-01-31 07:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2016-03-05 12:18 - 2016-01-31 07:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2016-03-05 12:18 - 2016-01-31 07:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-03-05 12:18 - 2016-01-31 07:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-03-05 12:18 - 2016-01-31 07:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-03-05 12:18 - 2016-01-31 07:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll |
Themen zu Werbetab-Virus |
anbieter, avast, bieter, brauche, browser, ccsetup, externer, forum, helft, installation, klicke, lahm, legen, link, nicht mehr, pckeeper, problem, recht, reimage repair, runter, schnell, seite, software, stunden, threads, unmöglich, virus, werbetab, überhaupt |