![]() |
|
Log-Analyse und Auswertung: Werbung Steam DNS Unlocker im ShopWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Werbung Steam DNS Unlocker im Shop Guten Tag, und zwar hab ich folgendes Problem: Habe eben Steam aufgemacht und da öffnen sich dann Werbefenster. Eines war glaube ich von DNS Unlocker. Habe es dann geschlossen und nochmal neu gestartet aber wenn ich den Shop anklicke öffnen sich gleich die Werbungsfenster. Nur die Spielebibliothek ist normal, bei den restlichen reitern sind überlappt von so Werbungsfenstern. Der erste Start von Steam war seltsam heute da wollte der viele Spiele updaten für die es gar keines gibt bzw wo gleich dabei stand das es abgeschlossen ist. Gestern war alles noch normal, habe keine Ahnung wie das passiert sein soll, nichts installiert, glaube nur bei OpenOffice gabs irgendiwie bei nem Srachenpaket ein Update über sourceforge oder so, weiß leider nicht mehr genau. Sonst wüsste ich nicht was. Hoffe ihr könnte mir helfen. Danke. MfG NBX Edit: Sonst ist mir noch nichts aufgefallen, bin erst heimgekommen und den PC angemacht, da ist dann das mit Steam gewesen, anderen Scan habe ich heute noch nicht gemacht. Anbei der FRST. FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016 durchgeführt von Pascal Weger (Administrator) auf DESKTOP-MKUL2BH (14-04-2016 17:08:07) Gestartet von C:\Users\Pascal Weger\Desktop Geladene Profile: Pascal Weger (Verfügbare Profile: Pascal Weger) Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (VMware, Inc.) E:\VMware\vmware-authd.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe (AMD) C:\Windows\System32\atieclxx.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe (Machinecode Technologies) C:\Program Files\Machinecode Technologies\Secure Banking\SecureBanking.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe () C:\Program Files\Machinecode Technologies\Secure Banking\sbservice.exe (Spotify Ltd) C:\Users\Pascal Weger\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Freedome\Freedome\1.1\Freedome.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2start.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\32\SbieSvc.exe (Valve Corporation) E:\Steam\Steam.exe (Valve Corporation) E:\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) E:\Steam\bin\steamwebhelper.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15033976 2015-11-20] (Logitech Inc.) HKLM\...\Run: [SecureBanking] => C:\Program Files\Machinecode Technologies\Secure Banking\SecureBanking.exe [1770496 2015-11-01] (Machinecode Technologies) HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [9404304 2016-04-06] (Emsisoft Ltd) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [5006536 2016-04-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [FreedomeAutoStart] => C:\Program Files (x86)\F-Secure\Freedome\Freedome\1.1\Freedome.exe [5401048 2016-03-30] (F-Secure Corporation) HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2622432 2016-01-29] (Malwarebytes Corporation) HKU\S-1-5-21-3473851266-2326088663-4233973066-1002\...\Run: [Spotify Web Helper] => C:\Users\Pascal Weger\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-04-08] (Spotify Ltd) HKU\S-1-5-21-3473851266-2326088663-4233973066-1002\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [797328 2016-02-26] (Sandboxie Holdings, LLC) HKU\S-1-5-21-3473851266-2326088663-4233973066-1002\...\RunOnce: [Uninstall C:\Users\Pascal Weger\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pascal Weger\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-3473851266-2326088663-4233973066-1002\...\RunOnce: [Uninstall C:\Users\Pascal Weger\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pascal Weger\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1" ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{2fc182b6-9684-482a-803a-dcfca6885bf6}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== FireFox: ======== FF ProfilePath: C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667 FF DefaultSearchEngine: DuckDuckGo FF Homepage: hxxps://duckduckgo.com/ FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Pascal Weger\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall) FF Extension: BetterPrivacy - C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-03-22] FF Extension: NoScript - C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-08] FF Extension: HTTPS-Everywhere - C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667\extensions\https-everywhere@eff.org [2016-04-08] FF Extension: Ghostery - C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667\Extensions\firefox@ghostery.com.xpi [2016-03-25] FF Extension: uBlock Origin - C:\Users\Pascal Weger\AppData\Roaming\Mozilla\Firefox\Profiles\7n1fpa1k.default-1458476579667\Extensions\uBlock0@raymondhill.net.xpi [2016-04-06] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [11334288 2016-04-06] (Emsisoft Ltd) R2 Freedome Service; C:\Program Files (x86)\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe [440280 2016-03-30] (F-Secure Corporation) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2015-11-20] (Logitech Inc.) R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [740832 2016-01-29] (Malwarebytes Corporation) S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.) S3 Origin Client Service; E:\Origin\OriginClientService.exe [2119688 2016-04-12] (Electronic Arts) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [187024 2016-02-26] (Sandboxie Holdings, LLC) R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254904 2016-03-23] (RaMMicHaeL) R2 VMAuthdService; E:\VMware\vmware-authd.exe [89792 2015-11-25] (VMware, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [23240 2016-02-23] (Advanced Micro Devices, Inc.) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102400 2016-02-23] (Advanced Micro Devices) R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [124080 2016-02-11] (Emsisoft Ltd) R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [66080 2016-01-29] () R3 fsfreedometap; C:\Windows\System32\drivers\fsfreedometap.sys [34344 2016-02-05] (The OpenVPN Project) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2016-01-04] (Intel Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [204944 2016-02-26] (Sandboxie Holdings, LLC) S1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-03] () S1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-03] () S1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-03] () R2 VMparport; C:\WINDOWS\system32\drivers\VMparport.sys [31936 2015-11-25] (VMware, Inc.) R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-04-14 17:08 - 2016-04-14 17:08 - 00011025 _____ C:\Users\Pascal Weger\Desktop\FRST.txt 2016-04-14 17:07 - 2016-04-14 17:08 - 00000000 ____D C:\FRST 2016-04-14 17:07 - 2016-04-14 17:07 - 02375168 _____ (Farbar) C:\Users\Pascal Weger\Desktop\FRST64.exe 2016-04-13 01:04 - 2016-04-13 01:04 - 00852720 _____ C:\Users\Pascal Weger\Downloads\SecurityCheck.exe 2016-04-12 22:24 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-04-12 22:24 - 2016-03-29 12:20 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-04-12 22:24 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-04-12 22:24 - 2016-03-29 11:37 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-04-12 22:24 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-04-12 22:24 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-04-12 22:24 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-04-12 22:24 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-04-12 22:24 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-04-12 22:24 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-04-12 22:24 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-04-12 22:24 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-04-12 22:24 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-04-12 22:24 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-04-12 22:24 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-04-12 22:24 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-04-12 22:24 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-04-12 22:24 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-04-12 22:24 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-04-12 22:24 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-04-12 22:24 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-04-12 22:24 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-04-12 22:24 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-04-12 22:24 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-04-12 22:24 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-04-12 22:24 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-04-12 22:24 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-04-12 22:24 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-04-12 22:24 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-04-12 22:24 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-04-12 22:24 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-04-12 22:23 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-04-12 22:23 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2016-04-12 22:23 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2016-04-12 22:23 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2016-04-12 22:23 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2016-04-12 22:23 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-04-12 22:23 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2016-04-12 22:23 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-04-12 22:23 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2016-04-12 22:23 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll 2016-04-12 22:23 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-04-12 22:23 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-04-12 22:23 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-04-12 22:23 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-04-12 22:23 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-04-12 22:23 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-04-12 22:23 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-04-12 22:23 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-04-12 22:23 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-04-12 22:23 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2016-04-12 22:23 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-04-12 22:23 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-04-12 22:23 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-04-12 22:23 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-04-12 22:23 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-04-12 22:23 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-04-12 22:23 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-04-12 22:23 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-04-12 22:23 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2016-04-12 22:23 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2016-04-12 22:23 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2016-04-12 22:23 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2016-04-12 22:23 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2016-04-12 22:23 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-04-12 22:23 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-04-12 22:23 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2016-04-12 22:23 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-04-12 22:23 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys 2016-04-12 22:23 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-04-12 22:23 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2016-04-12 22:23 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-04-12 22:23 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-04-12 22:23 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-04-12 22:23 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-04-12 22:23 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe 2016-04-12 22:23 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll 2016-04-12 22:23 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll 2016-04-12 22:23 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-04-12 22:23 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2016-04-12 22:23 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll 2016-04-12 22:23 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-04-12 22:23 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-04-12 22:23 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-04-12 22:23 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-04-12 22:23 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2016-04-12 22:23 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-04-12 22:23 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll 2016-04-12 22:23 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll 2016-04-12 22:23 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-04-12 22:23 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll 2016-04-12 22:23 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2016-04-12 22:23 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-04-12 22:23 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2016-04-12 22:23 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2016-04-12 22:23 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2016-04-12 22:23 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2016-04-12 22:23 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2016-04-12 22:23 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll 2016-04-12 22:23 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll 2016-04-12 22:23 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-04-12 22:23 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2016-04-12 22:23 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll 2016-04-12 22:23 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-04-12 22:23 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2016-04-12 22:23 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-04-12 22:23 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2016-04-12 22:23 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-04-12 22:23 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll 2016-04-12 22:23 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-04-12 22:23 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys 2016-04-12 22:23 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2016-04-12 22:23 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-04-12 22:23 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2016-04-12 22:23 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2016-04-12 22:23 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2016-04-12 22:23 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-04-12 22:23 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll 2016-04-12 22:23 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2016-04-12 22:23 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-04-12 22:23 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2016-04-12 22:23 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll 2016-04-12 22:23 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2016-04-12 22:23 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2016-04-12 22:23 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-04-12 22:23 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll 2016-04-12 22:23 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2016-04-12 22:23 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-04-12 22:23 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-04-12 22:23 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-04-12 22:23 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-04-12 22:23 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2016-04-12 22:23 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll 2016-04-12 22:23 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2016-04-12 22:23 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-04-12 22:23 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-04-12 22:23 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2016-04-12 22:23 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2016-04-12 22:23 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2016-04-12 22:23 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-04-12 22:23 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-04-12 22:23 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2016-04-12 22:23 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-04-12 22:23 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-04-12 22:23 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-04-12 22:23 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-04-12 22:23 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2016-04-12 22:23 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-04-12 22:23 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-04-12 22:23 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2016-04-12 22:23 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-04-12 22:23 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-04-12 22:23 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2016-04-12 22:23 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll 2016-04-12 22:23 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll 2016-04-12 22:23 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2016-04-12 22:23 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll 2016-04-12 22:23 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2016-04-12 22:23 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-04-12 22:23 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2016-04-12 22:23 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-04-12 22:23 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-04-12 22:23 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-04-12 22:23 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-04-12 22:23 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-04-12 22:23 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-04-12 22:23 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-04-12 22:23 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-04-12 22:23 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-04-12 22:23 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2016-04-12 22:23 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-04-12 22:23 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2016-04-12 22:23 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-04-12 22:23 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll 2016-04-12 22:23 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-04-12 22:23 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-04-12 22:23 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2016-04-12 22:23 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-04-12 22:23 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2016-04-12 22:23 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2016-04-12 22:23 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-04-12 22:23 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-04-12 22:23 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2016-04-12 22:23 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2016-04-12 22:23 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-04-12 22:23 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2016-04-12 22:23 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-04-12 22:23 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll 2016-04-12 22:23 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll 2016-04-12 22:23 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2016-04-12 22:23 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-04-12 22:23 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2016-04-12 22:23 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-04-12 22:23 - 2016-03-29 09:00 - 00235008 _____ C:\WINDOWS\system32\MTF.dll 2016-04-12 22:23 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2016-04-12 22:23 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-04-12 22:23 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-04-12 22:23 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2016-04-12 22:23 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-04-12 22:23 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-04-12 22:23 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-04-12 22:23 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2016-04-12 22:23 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2016-04-12 22:23 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2016-04-12 22:23 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-04-12 22:23 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll 2016-04-12 22:23 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2016-04-12 22:23 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-04-12 22:23 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-04-12 22:23 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll 2016-04-12 22:23 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2016-04-12 22:23 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-04-12 22:23 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2016-04-12 22:23 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2016-04-12 22:23 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2016-04-12 22:23 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2016-04-12 22:23 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-04-12 22:23 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-04-12 22:23 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-04-12 22:23 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-04-12 22:23 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2016-04-12 22:23 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2016-04-12 22:23 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-04-12 22:23 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-04-12 22:23 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-04-12 22:23 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2016-04-12 22:23 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-04-12 22:23 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2016-04-12 22:23 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-04-12 22:23 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2016-04-12 22:23 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-04-12 22:23 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-04-12 22:23 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2016-04-12 22:23 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2016-04-12 22:23 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-04-12 22:23 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2016-04-12 22:23 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-04-12 22:23 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-04-12 22:23 - 2016-03-29 08:27 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-04-12 22:23 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-04-12 22:23 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-04-12 22:23 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2016-04-12 22:23 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-04-12 22:23 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-04-12 22:23 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-04-12 22:23 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2016-04-12 22:23 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2016-04-12 22:23 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2016-04-12 22:23 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2016-04-12 22:23 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-04-12 22:23 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-04-12 22:23 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2016-04-12 22:23 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2016-04-12 22:23 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-04-12 22:23 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2016-04-12 22:23 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-04-12 22:23 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2016-04-12 22:23 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-04-12 22:23 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-04-12 22:23 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-04-12 22:23 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-04-12 22:23 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-04-12 22:23 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-04-12 22:23 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2016-04-12 22:23 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2016-04-12 22:23 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-04-12 22:23 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2016-04-12 22:23 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-04-12 22:23 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2016-04-12 22:23 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2016-04-12 22:23 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2016-04-12 22:23 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-04-12 22:23 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-04-12 22:23 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2016-04-12 22:23 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2016-04-12 22:23 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2016-04-12 22:23 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2016-04-12 22:23 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2016-04-12 22:23 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll 2016-04-12 21:42 - 2016-04-12 21:42 - 00000201 _____ C:\Users\Pascal Weger\Desktop\Back to the Future 1.url 2016-04-12 17:36 - 2016-04-12 17:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-04-12 17:02 - 2016-04-12 17:02 - 00002062 _____ C:\Users\Pascal Weger\AppData\Local\recently-used.xbel 2016-04-12 02:22 - 2016-04-12 02:43 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\UNDERTALE 2016-04-12 01:46 - 2016-04-12 01:47 - 00000000 ____D C:\Steam 2 2016-04-12 00:24 - 2016-04-12 00:24 - 00000000 ____D C:\Users\Pascal Weger\AppData\LocalLow\Unknown Worlds 2016-04-10 20:49 - 2016-04-10 20:49 - 00000000 ____D C:\Users\Pascal Weger\Downloads\Underpatcher 2016-04-10 20:46 - 2016-04-10 20:46 - 10040286 _____ C:\Users\Pascal Weger\Downloads\underpatcher.zip 2016-04-06 03:21 - 2016-04-06 03:21 - 00000000 ____D C:\Program Files (x86)\AMD 2016-04-06 03:16 - 2016-04-06 03:17 - 334415392 _____ (AMD Inc.) C:\Users\Pascal Weger\Downloads\non-whql-64bit-radeon-software-crimson-16.4.1-win10-win8.1-win7-apr4.exe 2016-04-06 00:36 - 2016-04-06 00:36 - 00000202 _____ C:\Users\Pascal Weger\Desktop\D4 Dark Dreams Don't Die.url 2016-04-05 17:52 - 2016-04-05 17:54 - 00000000 ___RD C:\Users\Pascal Weger\Desktop\Norina_117214463 2016-04-04 06:16 - 2016-04-04 06:16 - 00458472 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00110880 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2016-04-04 06:16 - 2016-04-04 06:16 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2016-04-04 06:15 - 2016-04-04 06:15 - 08585696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2016-04-04 06:15 - 2016-04-04 06:15 - 07392480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2016-04-04 06:15 - 2016-04-04 06:15 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2016-04-04 06:12 - 2016-04-04 06:12 - 00296648 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys 2016-04-04 05:32 - 2016-04-04 05:32 - 00701440 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2016-04-04 05:30 - 2016-04-04 05:30 - 00580096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2016-04-04 05:29 - 2016-04-04 05:29 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2016-04-04 05:28 - 2016-04-04 05:28 - 06884864 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2016-04-04 05:28 - 2016-04-04 05:28 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2016-04-04 05:27 - 2016-04-04 05:27 - 00235008 _____ C:\WINDOWS\system32\clinfo.exe 2016-04-04 05:26 - 2016-04-04 05:26 - 48211968 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2016-04-04 05:23 - 2016-04-04 05:23 - 40126976 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2016-04-04 05:21 - 2016-04-04 05:21 - 00065024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2016-04-04 05:21 - 2016-04-04 05:21 - 00059392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2016-04-04 05:15 - 2016-04-04 05:15 - 26887168 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2016-04-04 05:15 - 2016-04-04 05:15 - 21730304 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2016-04-04 05:11 - 2016-04-04 05:11 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll 2016-04-04 05:02 - 2016-04-04 05:02 - 05398016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2016-04-04 05:00 - 2016-04-04 05:00 - 05420032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll 2016-04-04 04:48 - 2016-04-04 04:48 - 00134656 _____ C:\WINDOWS\system32\amdhdl64.dll 2016-04-04 04:48 - 2016-04-04 04:48 - 00123392 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2016-04-04 04:47 - 2016-04-04 04:47 - 30377984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2016-04-04 04:41 - 2016-04-04 04:41 - 00698016 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb 2016-04-04 04:41 - 2016-04-04 04:41 - 00698016 _____ C:\WINDOWS\system32\atiapfxx.blb 2016-04-04 04:41 - 2016-04-04 04:41 - 00097280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2016-04-04 04:41 - 2016-04-04 04:41 - 00089600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2016-04-04 04:37 - 2016-04-04 04:37 - 08473088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2016-04-04 04:25 - 2016-04-04 04:25 - 25069056 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2016-04-04 04:22 - 2016-04-04 04:22 - 06667776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2016-04-04 04:14 - 2016-04-04 04:14 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-04-04 04:14 - 2016-04-04 04:14 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2016-04-04 04:14 - 2016-04-04 04:14 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2016-04-04 04:14 - 2016-04-04 04:14 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2016-04-04 04:13 - 2016-04-04 04:13 - 15711744 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2016-04-04 04:13 - 2016-04-04 04:13 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2016-04-04 04:10 - 2016-04-04 04:10 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00564736 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-04-04 03:57 - 2016-04-04 03:57 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00224256 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-04-04 03:57 - 2016-04-04 03:57 - 00209920 _____ C:\WINDOWS\system32\GameManager64.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00204800 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00189952 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00186368 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2016-04-04 03:57 - 2016-04-04 03:57 - 00162304 _____ C:\WINDOWS\system32\atieah64.exe 2016-04-04 03:57 - 2016-04-04 03:57 - 00145408 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2016-04-04 03:57 - 2016-04-04 03:57 - 00078336 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-04-04 03:56 - 2016-04-04 03:56 - 00251392 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-04-04 03:55 - 2016-04-04 03:55 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2016-04-04 03:55 - 2016-04-04 03:55 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2016-04-04 03:55 - 2016-04-04 03:55 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2016-04-04 03:52 - 2016-04-04 03:52 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap 2016-04-04 03:42 - 2016-04-04 03:42 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap 2016-04-04 03:34 - 2016-04-04 03:34 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2016-04-04 03:34 - 2016-04-04 03:34 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2016-04-04 03:33 - 2016-04-04 03:33 - 01276416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00944640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00944640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00157696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00075776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2016-04-04 03:32 - 2016-04-04 03:32 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2016-04-04 03:29 - 2016-04-04 03:29 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2016-04-04 03:28 - 2016-04-04 03:28 - 00195072 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2016-04-04 03:28 - 2016-04-04 03:28 - 00174592 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2016-04-03 14:12 - 2016-04-03 14:12 - 00359088 _____ C:\Users\Pascal Weger\Desktop\sandboxeinstellungen.pdf 2016-04-02 21:17 - 2016-04-02 21:17 - 00000000 ___RD C:\Sandbox 2016-04-02 21:14 - 2016-04-14 02:14 - 00002902 _____ C:\WINDOWS\Sandboxie.ini 2016-04-02 21:14 - 2016-04-02 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie 2016-04-02 21:14 - 2016-04-02 21:14 - 00000000 ____D C:\Program Files\Sandboxie 2016-04-02 21:13 - 2016-04-02 21:13 - 08584848 _____ (Sandboxie Holdings, LLC) C:\Users\Pascal Weger\Downloads\SandboxieInstall.exe 2016-04-01 14:52 - 2016-04-01 14:52 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\Macromedia 2016-04-01 02:51 - 2016-04-08 01:38 - 00001337 _____ C:\Users\Pascal Weger\Desktop\Livestreamer - twitch.lnk 2016-04-01 02:50 - 2016-04-01 02:50 - 00000000 ____D C:\Program Files\Twitch 2016-04-01 02:40 - 2016-04-14 02:01 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\livestreamer-twitch-gui 2016-04-01 02:38 - 2016-04-01 02:38 - 34770737 _____ C:\Users\Pascal Weger\Downloads\livestreamer-twitch-gui-v0.13.0-win64.zip 2016-04-01 02:37 - 2016-04-01 02:37 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\livestreamer 2016-04-01 02:37 - 2016-04-01 02:37 - 00000000 ____D C:\Program Files (x86)\Livestreamer 2016-04-01 02:35 - 2016-04-01 02:37 - 04239793 _____ C:\Users\Pascal Weger\Downloads\livestreamer-v1.12.2-win32-setup.exe 2016-04-01 02:06 - 2016-04-01 02:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2016-04-01 02:06 - 2016-04-01 02:06 - 00000000 ____D C:\Program Files\VideoLAN 2016-04-01 01:57 - 2016-04-01 02:02 - 31367109 _____ C:\Users\Pascal Weger\Downloads\vlc-2.2.2-win64.exe 2016-03-31 16:49 - 2016-04-05 03:20 - 00000000 ____D C:\ProgramData\advlauncher 2016-03-31 16:49 - 2016-03-31 16:49 - 00002472 _____ C:\Users\Public\Desktop\Paragon Backup and Recovery™ 2016 Kompakt.lnk 2016-03-31 16:49 - 2016-03-31 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Backup and Recovery™ 2016 Kompakt 2016-03-31 16:49 - 2016-03-31 16:49 - 00000000 ____D C:\Program Files\Paragon Software 2016-03-31 16:35 - 2016-03-31 16:36 - 183198296 _____ C:\Users\Pascal Weger\Downloads\Backup-Recovery-16-Compact_World-Backup-Day-Edition_x32_x64.zip 2016-03-31 12:36 - 2016-03-31 12:36 - 00000000 ____D C:\ProgramData\newrestore 2016-03-31 08:33 - 2016-04-01 01:40 - 97398824 _____ C:\Users\Pascal Weger\Downloads\Backup-Recovery-16-World-Backup-Day-Edition_x64.exe 2016-03-31 03:40 - 2016-03-31 03:42 - 319825792 _____ (AMD Inc.) C:\Users\Pascal Weger\Downloads\radeon-crimson-16.3.2-win10-64bit.exe 2016-03-31 03:40 - 2016-03-31 03:40 - 00000000 ____D C:\Users\Public\Documents\Meine Löschberichte 2016-03-31 03:40 - 2016-03-31 03:40 - 00000000 ____D C:\ProgramData\newbackup 2016-03-30 21:08 - 2016-03-31 12:36 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\VMware 2016-03-30 21:08 - 2016-03-31 12:36 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\VMware 2016-03-30 21:07 - 2016-03-30 21:07 - 01827630 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2016-03-30 21:07 - 2016-03-30 21:07 - 00000678 _____ C:\Users\Public\Desktop\VMware Workstation 12 Player.lnk 2016-03-30 21:07 - 2016-03-30 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware 2016-03-30 21:07 - 2016-03-30 21:07 - 00000000 ____D C:\Program Files\Common Files\VMware 2016-03-30 21:07 - 2015-11-25 18:10 - 00934080 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll 2016-03-30 21:07 - 2015-11-25 18:10 - 00392896 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe 2016-03-30 21:07 - 2015-11-25 18:10 - 00358080 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe 2016-03-30 21:07 - 2015-11-25 18:10 - 00066752 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys 2016-03-30 21:07 - 2015-11-25 18:10 - 00031936 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\VMparport.sys 2016-03-30 21:07 - 2015-11-25 17:52 - 00026816 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys 2016-03-30 21:07 - 2015-11-06 11:57 - 00057536 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys 2016-03-30 21:07 - 2015-11-05 19:25 - 00075512 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vsock.sys 2016-03-30 21:07 - 2015-11-05 19:25 - 00068288 _____ (VMware, Inc.) C:\WINDOWS\system32\vsocklib.dll 2016-03-30 21:07 - 2015-11-05 19:25 - 00064192 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vsocklib.dll 2016-03-30 21:05 - 2016-04-14 02:14 - 00000000 ____D C:\ProgramData\VMware 2016-03-30 16:44 - 2016-03-30 21:05 - 73121952 _____ (VMware, Inc.) C:\Users\Pascal Weger\Downloads\VMware-player-12.1.0-3272444.exe 2016-03-30 13:49 - 2016-04-10 18:50 - 00001175 _____ C:\Users\Pascal Weger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware Guard.lnk 2016-03-30 13:43 - 2016-03-30 13:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware 2016-03-30 13:42 - 2016-04-14 17:08 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware 2016-03-30 13:39 - 2016-03-30 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freedome 2016-03-29 21:07 - 2016-03-29 21:07 - 00000000 ____D C:\ProgramData\rmbwizard 2016-03-29 21:07 - 2016-03-29 21:07 - 00000000 ____D C:\ProgramData\launcher 2016-03-29 21:04 - 2016-03-29 21:04 - 00000000 ____D C:\ProgramData\explauncher 2016-03-29 20:26 - 2016-03-29 20:53 - 416363903 _____ C:\Users\Pascal Weger\Downloads\Paragon_Backup_Recovery_14_Free.zip 2016-03-28 18:06 - 2016-03-28 18:06 - 00000755 _____ C:\Users\Pascal Weger\Documents\PascalWeger.lic 2016-03-27 15:39 - 2016-03-27 15:39 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Machinecode_Technologies 2016-03-27 15:39 - 2016-03-27 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Banking 2016-03-27 15:39 - 2016-03-27 15:39 - 00000000 ____D C:\Program Files\Machinecode Technologies 2016-03-27 15:38 - 2016-03-31 16:48 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Downloaded Installations 2016-03-27 15:34 - 2016-03-27 15:34 - 02115019 _____ C:\Users\Pascal Weger\Downloads\SecureBanking_205_x64.rar 2016-03-27 06:00 - 2016-03-27 06:00 - 00857576 _____ C:\WINDOWS\system32\amdicdxx.dat 2016-03-23 19:27 - 2016-03-23 19:28 - 00000000 ____D C:\ProgramData\Unchecky 2016-03-23 19:27 - 2016-03-23 19:27 - 01201784 _____ (RaMMicHaeL) C:\Users\Pascal Weger\Downloads\unchecky_043setup.exe 2016-03-23 19:27 - 2016-03-23 19:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky 2016-03-23 19:27 - 2016-03-23 19:27 - 00000000 ____D C:\Program Files (x86)\Unchecky 2016-03-23 19:11 - 2016-03-23 19:11 - 00000000 ____D C:\ProgramData\SUPERSetup 2016-03-22 04:17 - 2016-03-22 04:17 - 00448512 _____ (OldTimer Tools) C:\Users\Pascal Weger\Downloads\TFC.exe 2016-03-21 18:23 - 2016-03-21 18:23 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\3909 2016-03-21 18:13 - 2016-03-21 18:13 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\VS Revo Group 2016-03-21 18:13 - 2016-03-21 18:13 - 00000000 ____D C:\ProgramData\VS Revo Group 2016-03-21 18:13 - 2016-03-21 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2016-03-21 18:13 - 2016-03-21 18:13 - 00000000 ____D C:\Program Files\VS Revo Group 2016-03-21 18:13 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys 2016-03-21 18:06 - 2016-03-21 18:13 - 11199448 _____ (VS Revo Group ) C:\Users\Pascal Weger\Downloads\RevoUninProSetup.exe 2016-03-21 18:03 - 2016-03-21 18:03 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\ArcticLine 2016-03-21 18:03 - 2016-03-21 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folder Marker 2016-03-21 18:03 - 2016-03-21 18:03 - 00000000 ____D C:\Program Files (x86)\Folder Marker 2016-03-21 18:01 - 2016-03-21 18:03 - 07041943 _____ (ArcticLine Software ) C:\Users\Pascal Weger\Downloads\FolderMarkerHome-EmsiEditionP.exe 2016-03-21 12:57 - 2016-04-05 18:22 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit 2016-03-21 12:57 - 2016-03-21 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit 2016-03-21 12:57 - 2016-03-21 12:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit 2016-03-21 12:56 - 2016-03-21 12:56 - 01856936 _____ (Malwarebytes ) C:\Users\Pascal Weger\Downloads\mbae-setup-1.08.1.1189.exe 2016-03-21 12:55 - 2016-03-21 12:55 - 00002002 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk 2016-03-21 12:55 - 2016-03-21 12:55 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\SumatraPDF 2016-03-21 12:55 - 2016-03-21 12:55 - 00000000 ____D C:\Program Files (x86)\SumatraPDF 2016-03-21 12:54 - 2016-03-21 12:54 - 04816456 _____ (Krzysztof Kowalczyk) C:\Users\Pascal Weger\Downloads\SumatraPDF-3.1.1-install.exe 2016-03-21 12:49 - 2016-03-21 12:49 - 00000000 ____D C:\ProgramData\Emsisoft 2016-03-21 12:48 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2016-03-21 12:22 - 2016-03-21 12:22 - 00003670 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask 2016-03-21 12:22 - 2016-03-21 12:22 - 00000000 ____D C:\WINDOWS\ERUNT 2016-03-17 12:46 - 2016-03-17 12:46 - 00032587 _____ C:\Users\Pascal Weger\Downloads\tarifeat-kuendigung-a1-17-3-2016.pdf 2016-03-15 00:37 - 2016-04-04 06:15 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2016-03-15 00:36 - 2016-04-04 06:15 - 08843208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-04-14 17:01 - 2016-01-20 18:02 - 00004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{12938A39-7D46-4B23-850C-FF77D0E5E002} 2016-04-14 16:59 - 2016-01-04 20:45 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Battle.net 2016-04-14 16:59 - 2016-01-04 20:44 - 00000000 ____D C:\Program Files (x86)\Battle.net 2016-04-14 02:19 - 2016-01-04 16:13 - 01807284 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-04-14 02:19 - 2015-10-30 20:35 - 00778208 _____ C:\WINDOWS\system32\perfh007.dat 2016-04-14 02:19 - 2015-10-30 20:35 - 00156548 _____ C:\WINDOWS\system32\perfc007.dat 2016-04-14 02:19 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-04-14 02:14 - 2016-01-04 21:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-04-14 02:14 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-04-14 02:07 - 2016-01-04 21:18 - 00000000 ____D C:\Users\Pascal Weger 2016-04-14 02:01 - 2016-01-05 02:08 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-04-14 01:59 - 2016-01-05 02:18 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\vlc 2016-04-13 21:01 - 2016-03-04 04:05 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\Spotify 2016-04-13 21:01 - 2016-03-04 04:05 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Spotify 2016-04-13 16:59 - 2016-01-04 16:26 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Packages 2016-04-13 16:59 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-04-13 16:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-04-13 00:18 - 2016-01-04 20:35 - 00000000 ____D C:\Users\Pascal Weger\Documents\my games 2016-04-13 00:12 - 2016-01-04 21:17 - 00233344 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-04-13 00:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-04-13 00:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-04-13 00:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-04-13 00:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-04-12 23:23 - 2016-03-09 17:34 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\StardewValley 2016-04-12 23:09 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-04-12 23:07 - 2016-01-04 20:47 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-04-12 23:06 - 2016-01-04 20:47 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-04-12 19:39 - 2016-01-05 17:47 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Deployment 2016-04-12 17:38 - 2016-01-04 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-12 17:03 - 2016-02-26 17:34 - 00000000 ____D C:\Users\Pascal Weger\.gimp-2.8 2016-04-12 17:02 - 2016-02-08 02:27 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\gtk-2.0 2016-04-12 02:48 - 2016-03-04 00:58 - 00000000 ____D C:\ProgramData\Origin 2016-04-11 02:04 - 2016-03-10 15:59 - 00000000 ___RD C:\Users\Pascal Weger\Desktop\Neuer Ordner 2016-04-06 20:32 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-04-06 20:32 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-04-06 04:04 - 2016-03-07 17:15 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Audible 2016-04-06 04:04 - 2016-03-07 17:14 - 00000000 ____D C:\Users\Pascal Weger\Documents\Audible 2016-04-06 03:21 - 2016-01-04 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-04-06 03:20 - 2016-01-04 21:18 - 00000000 ____D C:\Program Files\AMD 2016-04-06 03:19 - 2016-01-04 16:18 - 00000000 ____D C:\AMD 2016-04-04 06:16 - 2015-12-16 21:45 - 00152568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2016-04-04 06:16 - 2015-12-16 21:45 - 00133528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2016-04-04 06:15 - 2015-12-16 21:45 - 09526616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2016-04-04 06:15 - 2015-12-16 21:44 - 11625784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2016-04-04 06:15 - 2015-12-16 21:44 - 09583808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2016-04-04 06:15 - 2015-12-16 21:44 - 01517360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2016-04-04 06:15 - 2015-12-16 21:44 - 01245416 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2016-04-04 06:09 - 2015-12-16 21:31 - 26345472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2016-04-04 04:25 - 2016-03-08 00:46 - 00865280 _____ (AMD) C:\WINDOWS\system32\coinst_16.15.dll 2016-04-04 03:31 - 2015-12-16 21:31 - 00676864 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2016-03-29 12:07 - 2015-07-10 15:20 - 00400302 __RSH C:\bootmgr 2016-03-27 18:56 - 2015-12-16 21:31 - 00685584 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\SETFE2B.tmp 2016-03-27 15:41 - 2016-01-05 02:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-03-27 15:41 - 2016-01-05 02:08 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-03-26 15:56 - 2016-01-04 16:26 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\VirtualStore 2016-03-24 01:24 - 2016-01-04 16:47 - 00000000 ____D C:\Users\Pascal Weger\AppData\Local\Adobe 2016-03-21 12:46 - 2016-01-04 17:12 - 00000000 ____D C:\Program Files (x86)\Panda Security 2016-03-21 12:45 - 2016-01-04 17:12 - 00000000 ____D C:\Users\Pascal Weger\AppData\Roaming\Panda Security 2016-03-21 12:45 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-03-20 02:05 - 2016-01-27 16:35 - 00000778 _____ C:\Users\Pascal Weger\Desktop\League of Legends.lnk 2016-03-20 01:24 - 2016-03-07 02:34 - 00000000 ____D C:\Program Files (x86)\AdwCleaner 2016-03-17 02:45 - 2016-01-18 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT 2016-03-15 17:01 - 2016-03-09 04:19 - 00000000 ____D C:\Users\Pascal Weger\Documents\Stardew Valley alte Dateien ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-01-06 05:10 - 2016-01-11 00:07 - 0104257 _____ () C:\Users\Pascal Weger\AppData\Local\ars.cache 2016-01-06 05:10 - 2016-01-11 00:07 - 0339196 _____ () C:\Users\Pascal Weger\AppData\Local\census.cache 2016-01-06 04:59 - 2016-01-06 04:59 - 0000036 _____ () C:\Users\Pascal Weger\AppData\Local\housecall.guid.cache 2016-04-12 17:02 - 2016-04-12 17:02 - 0002062 _____ () C:\Users\Pascal Weger\AppData\Local\recently-used.xbel ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-04-11 17:32 ==================== Ende von FRST.txt ============================ Geändert von NBX (14.04.2016 um 16:38 Uhr) |
Themen zu Werbung Steam DNS Unlocker im Shop |
administrator, adobe, dateien, defender, explorer, explorer.exe, firefox, homepage, malwarebytes, microsoft, mozilla, neu, ordner, problem, prozesse, realtek, revo uninstaller, scan, services.exe, software, svchost.exe, system, treiber, ublock, ublock origin, werbung, windows, winlogon.exe |