BrowserModifier: Win32/SupTab!blnk

bato96 · 05.11.2016, 14:15

Hallo,
habe auch seit gestern diese Meldung vom Windows Defender.
Habe schon versucht sie zu bereinigen und entfernen jedoch tritt sie immer wieder auf.

Weis langsam nicht mehr weiter.

Ich hoffe jemand kann mir weiterhelfen.

Vielen Dank

Gruß

M-K-D-B · 05.11.2016, 19:54

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Könnte auch eine Falschmeldung von Windows Defender (WD) sein. Wo findet denn WD die Schadsoftware. Dazu einfach mal den WD öffnen, Verlauf auswählen und Details einblenden.

Zur ersten Analyse bitte FRST ausführen:

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bitte poste mit deiner nächsten Antwort

die beiden neuen Logdateien von FRST.

bato96 · 06.11.2016, 19:09

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016
durchgeführt von Stean (Administrator) auf STEAN-PC (06-11-2016 18:56:52)
Gestartet von C:\Users\Stean\Downloads
Geladene Profile: Stean (Verfügbare Profile: Stean)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Software Security System) C:\Program Files\Lucidlogix Technologies\VIRTU\Ekag20nt.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU] => C:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.Exe [2660128 2011-08-08] ()
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~1\LUCIDL~1\VIRTU\APPINI~1.DLL => C:\Program Files\Lucidlogix Technologies\VIRTU\appinit_dll.dll [188704 2011-08-08] (Lucidlogix Inc.)
AppInit_DLLs-x32: C:\PROGRA~1\LUCIDL~1\VIRTU\x86\APPINI~1.DLL => C:\Program Files\Lucidlogix Technologies\VIRTU\x86\appinit_dll.dll [158496 2011-08-08] (Lucidlogix Inc.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2016-10-10]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{6401E5FD-604F-46AB-8860-DE7B20186C02}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{707DE611-F1B4-4E93-B54B-252DD3DEC95C}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1040309402-2405870343-1871077889-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE12&ocid=UE12DHP
HKU\S-1-5-21-1040309402-2405870343-1871077889-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-10-11] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-10-11] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-06-27] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2016-10-11] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2016-10-11] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-06-27] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-10-11] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2016-10-11] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-06-27]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-10-11] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-10-11] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2016-10-11] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR StartupUrls: Default -> "hxxp://goggle.de/"
CHR Profile: C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default [2016-11-06]
CHR Extension: (Google Präsentationen) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-05]
CHR Extension: (Google Docs) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-05]
CHR Extension: (Google Drive) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-05]
CHR Extension: (YouTube) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-05]
CHR Extension: (Adblock Plus) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-05]
CHR Extension: (Google Tabellen) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-05]
CHR Extension: (Kaspersky Protection) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2016-11-05]
CHR Extension: (Google Docs Offline) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-05]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-05]
CHR Extension: (Google Mail) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-05]
CHR Extension: (Chrome Media Router) - C:\Users\Stean\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-05]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3037424 2016-10-03] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [392168 2016-08-31] (Digital Wave Ltd.)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-10-19] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) [Datei ist nicht signiert]
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-14] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [189264 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [305496 2016-10-10] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1027984 2016-10-10] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [50008 2016-10-10] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [52144 2016-05-18] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [75696 2016-05-17] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [126360 2016-10-10] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2016-09-30] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2016-03-28] (Apple, Inc.) [Datei ist nicht signiert]
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Code:

ATTFilter

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-06 18:56 - 2016-11-06 18:57 - 00015945 _____ C:\Users\Stean\Downloads\FRST.txt
2016-11-06 18:56 - 2016-11-06 18:56 - 00000000 ____D C:\FRST
2016-11-06 18:55 - 2016-11-06 18:55 - 02410496 _____ (Farbar) C:\Users\Stean\Downloads\FRST64.exe
2016-11-05 12:23 - 2016-11-05 12:46 - 00000000 ____D C:\Users\Stean\AppData\Local\ESET
2016-11-05 12:14 - 2016-11-06 18:39 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-05 12:14 - 2016-11-05 14:19 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-05 12:14 - 2016-11-05 12:14 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-05 12:14 - 2016-11-05 12:14 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-05 12:14 - 2016-11-05 12:14 - 00002263 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-05 11:09 - 2016-11-05 11:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-11-05 10:46 - 2016-11-05 13:11 - 00000000 ____D C:\AdwCleaner
2016-11-04 18:14 - 2016-11-04 18:16 - 00000000 ____D C:\Windows\system32\appmgmt
2016-11-04 18:14 - 2016-11-04 18:14 - 00000005 _____ C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2016-11-04 17:46 - 2016-11-04 18:14 - 00000000 ____D C:\Users\Stean\AppData\Roaming\HTC
2016-11-04 17:46 - 2016-11-04 18:14 - 00000000 ____D C:\ProgramData\HTC
2016-11-04 17:46 - 2016-11-04 17:46 - 00000000 ____D C:\Users\Stean\Documents\HTC
2016-11-04 17:46 - 2016-11-04 17:46 - 00000000 ____D C:\Users\Stean\.android
2016-11-04 17:44 - 2016-11-04 17:44 - 00000000 ____D C:\Users\Stean\AppData\Local\Downloaded Installations
2016-11-04 14:52 - 2016-11-04 14:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-11-04 13:46 - 2016-11-04 17:46 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Apple Computer
2016-11-04 13:46 - 2016-11-04 17:46 - 00000000 ____D C:\Users\Stean\AppData\Local\Apple Computer
2016-11-04 13:45 - 2016-11-04 20:10 - 00000000 ____D C:\ProgramData\Apple
2016-11-04 13:45 - 2016-11-04 13:45 - 00000000 ____D C:\Users\Stean\AppData\Local\Apple
2016-11-04 13:45 - 2016-11-04 13:45 - 00000000 ____D C:\ProgramData\Apple Computer
2016-11-03 10:19 - 2016-11-03 10:19 - 00158780 _____ C:\Users\Stean\Downloads\PDF_Rechnung_M211160159233178_09-2016.pdf
2016-11-02 13:43 - 2016-11-02 13:43 - 01132581 _____ C:\Users\Stean\Downloads\sgd-studienanmeldung.pdf
2016-11-02 13:43 - 2016-11-02 13:43 - 00529282 _____ C:\Users\Stean\Downloads\pl-862-boersenprofi.pdf
2016-10-31 12:24 - 2016-10-31 12:24 - 00123180 _____ C:\Users\Stean\Downloads\Antrag_1491-9512-1650-28.pdf
2016-10-27 09:10 - 2016-10-27 09:10 - 00166927 _____ C:\Users\Stean\Downloads\Auftrag 20162149.pdf
2016-10-26 16:53 - 2016-10-26 16:55 - 00098845 _____ C:\Users\Stean\Desktop\Überweisungsbestätigung.pdf
2016-10-25 15:58 - 2016-10-25 15:58 - 00000000 ____D C:\Users\Stean\AppData\Roaming\NVIDIA
2016-10-25 15:54 - 2016-10-25 15:54 - 01143744 _____ C:\Users\Stean\Documents\Architektur.pdf
2016-10-24 21:39 - 2016-10-24 21:39 - 00015085 _____ C:\Users\Stean\Desktop\Versicherung.xlsx
2016-10-20 12:56 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-10-20 12:56 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-10-20 12:56 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-10-20 12:56 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-10-20 12:56 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-10-20 12:56 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-10-20 12:56 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-10-20 12:56 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-10-20 12:56 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-10-20 12:56 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-10-20 12:56 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-10-20 10:31 - 2016-10-20 10:31 - 00185683 _____ C:\Users\Stean\Desktop\Glas-Auflistung.pdf
2016-10-19 18:34 - 2016-10-19 18:34 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-10-19 18:26 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-10-19 18:26 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-10-19 18:26 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-10-19 18:26 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2016-10-19 18:26 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2016-10-19 18:26 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-10-19 18:26 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-10-19 18:26 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-10-19 18:26 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2016-10-19 18:26 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2016-10-19 18:26 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-10-19 18:26 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-10-19 18:26 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-10-19 18:26 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-10-19 18:26 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-10-19 18:26 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-10-19 18:23 - 2016-10-19 18:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-10-19 18:17 - 2016-10-19 18:17 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-10-19 18:17 - 2016-10-19 18:17 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-19 18:17 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-10-19 18:17 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-10-19 18:17 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-10-19 18:17 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-10-19 18:17 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-10-19 18:17 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-10-19 18:17 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-10-19 18:17 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-10-19 18:04 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-10-19 18:04 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-10-19 18:04 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2016-10-19 18:04 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2016-10-19 18:04 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2016-10-19 18:03 - 2016-10-19 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-10-19 18:03 - 2016-10-19 18:03 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-10-19 18:03 - 2016-09-16 23:57 - 00546752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-10-19 18:03 - 2016-09-16 23:57 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-10-19 18:03 - 2016-09-16 23:30 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-10-19 18:03 - 2016-09-16 08:40 - 07379415 _____ C:\Windows\system32\nvcoproc.bin
2016-10-19 18:03 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-10-19 18:03 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-10-19 18:03 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-10-19 18:03 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-10-19 18:02 - 2016-10-19 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-19 18:02 - 2016-10-19 18:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-19 18:02 - 2016-10-19 18:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-19 18:01 - 2016-09-15 15:56 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-10-19 18:01 - 2016-09-13 16:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-10-19 18:01 - 2016-09-13 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-10-19 18:01 - 2016-09-09 19:20 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-10-19 18:01 - 2016-09-09 19:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-10-19 18:01 - 2016-08-22 17:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-19 18:01 - 2015-12-16 19:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-10-19 18:01 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-10-19 18:01 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-10-19 18:01 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-10-19 18:01 - 2015-12-16 19:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-10-19 18:01 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-10-19 18:01 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-10-19 18:01 - 2015-12-16 19:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-10-19 18:01 - 2015-08-05 18:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-10-19 18:01 - 2015-08-05 18:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-10-19 17:47 - 2016-10-19 17:49 - 00000000 ____D C:\Windows\system32\MRT
2016-10-19 17:47 - 2016-10-19 17:47 - 143495576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 25765376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 20306944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 06048256 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 04608512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-10-19 16:59 - 2016-10-19 16:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-10-19 16:59 - 2016-10-19 16:59 - 02444288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-10-19 16:59 - 2016-10-19 16:59 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-10-19 16:59 - 2016-10-19 16:59 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 01312768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-10-19 16:59 - 2016-10-19 16:59 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-10-19 16:59 - 2016-10-19 16:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-10-19 16:59 - 2016-10-19 16:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-10-19 16:59 - 2016-10-19 16:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-10-19 16:50 - 2013-10-14 17:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2016-10-19 16:48 - 2016-10-19 16:48 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2016-10-19 16:48 - 2016-10-19 16:48 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-10-19 16:48 - 2016-10-19 16:48 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-10-19 16:48 - 2016-10-19 16:48 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-10-19 16:48 - 2016-10-19 16:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-10-19 16:48 - 2016-10-19 16:48 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-10-19 16:48 - 2016-10-19 16:48 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-10-19 16:42 - 2016-09-12 22:17 - 00077032 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-19 16:42 - 2016-09-12 22:08 - 01226752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 01629184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-19 16:42 - 2016-09-09 16:54 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-19 16:42 - 2016-03-23 23:40 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-10-19 16:42 - 2015-01-29 04:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-10-19 16:42 - 2015-01-29 04:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-10-19 16:42 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-10-19 16:42 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-10-19 16:42 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-10-19 16:42 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-10-19 16:42 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-10-19 16:42 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-10-19 16:42 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-10-19 16:42 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-10-19 16:42 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-10-19 16:42 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-10-19 16:42 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-10-19 16:42 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-10-19 16:42 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-10-19 16:42 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-10-19 16:42 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-10-19 16:42 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-10-19 16:42 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-10-19 16:42 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-10-19 16:42 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-10-19 16:42 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-10-19 16:42 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-10-19 16:42 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-10-19 16:42 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-10-19 16:42 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-10-19 16:42 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-10-19 16:42 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-10-19 16:42 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-10-19 16:42 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-10-19 16:42 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-10-19 16:42 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-10-19 16:39 - 2016-10-19 16:39 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-19 16:39 - 2016-10-19 16:39 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-10-19 16:39 - 2016-10-19 16:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-19 16:39 - 2016-10-19 16:39 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-10-19 16:39 - 2016-10-19 16:39 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-10-19 16:38 - 2016-10-19 16:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-10-19 16:33 - 2016-10-19 16:33 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-10-19 16:33 - 2016-10-19 16:33 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-10-19 16:33 - 2016-10-19 16:33 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-10-19 16:33 - 2016-10-19 16:33 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-10-19 16:33 - 2016-10-19 16:33 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-10-19 16:19 - 2016-08-29 16:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-10-19 16:19 - 2016-08-29 16:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-10-19 16:19 - 2016-08-29 16:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-10-19 16:19 - 2016-08-29 16:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-10-19 16:19 - 2016-08-29 16:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-10-19 16:19 - 2016-08-29 16:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-10-19 16:19 - 2016-08-29 16:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-10-19 16:19 - 2016-08-29 15:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-10-19 16:19 - 2016-08-16 21:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-10-19 16:19 - 2016-08-16 21:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-10-19 16:19 - 2016-03-16 19:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-10-19 16:19 - 2016-03-16 19:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-10-19 16:19 - 2016-03-16 19:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-10-19 16:19 - 2016-02-05 19:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-10-19 16:19 - 2016-02-05 19:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-10-19 16:19 - 2016-02-05 18:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2016-10-19 16:19 - 2016-02-02 19:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-10-19 16:19 - 2016-01-21 01:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-10-19 16:19 - 2016-01-11 20:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-10-19 16:19 - 2015-11-19 15:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-10-19 16:19 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-10-19 16:19 - 2015-07-09 18:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-10-19 16:19 - 2015-07-09 18:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-10-19 16:19 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-10-19 16:19 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-10-19 16:19 - 2015-06-03 21:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-10-19 16:19 - 2015-05-25 19:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-10-19 16:19 - 2015-05-25 19:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-10-19 16:19 - 2015-05-25 19:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-10-19 16:19 - 2015-05-25 19:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-10-19 16:19 - 2015-05-25 19:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-10-19 16:19 - 2015-05-25 19:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-10-19 16:19 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-10-19 16:19 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-10-19 16:19 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-10-19 16:19 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-10-19 16:19 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-10-19 16:19 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-10-19 16:19 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-10-19 16:19 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-10-19 16:19 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-10-19 16:19 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-10-19 16:19 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-10-19 16:19 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-10-19 16:19 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-10-19 16:19 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-10-19 16:19 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-10-19 16:19 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-10-19 16:19 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-10-19 16:19 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-10-19 16:19 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-10-19 16:19 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-10-19 16:19 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-10-19 16:19 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-10-19 16:19 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-10-19 16:19 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-10-19 16:19 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-10-19 16:19 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-10-19 16:19 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-10-19 16:19 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-10-19 16:19 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-10-19 16:19 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-10-19 16:19 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-10-19 16:18 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-10-19 16:18 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-10-19 16:18 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-10-19 16:18 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-10-19 16:18 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-10-19 16:18 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-10-19 16:18 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-10-19 16:18 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-10-19 16:18 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-10-19 16:17 - 2016-07-07 16:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-10-19 16:17 - 2016-07-07 16:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-10-19 16:17 - 2016-07-07 16:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-10-19 16:17 - 2016-07-07 16:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-10-19 16:17 - 2015-04-11 04:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-10-19 16:17 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-10-19 16:17 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-10-19 16:17 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-10-19 16:17 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-10-19 16:17 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-10-19 16:17 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-10-19 16:17 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-10-19 16:17 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-10-19 16:17 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-10-19 16:17 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-10-19 16:17 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-10-19 16:17 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-10-19 16:17 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-10-19 16:17 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-10-19 16:17 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-10-19 16:17 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-10-19 16:17 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-10-19 16:17 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-10-19 16:17 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-10-19 16:17 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-10-19 16:17 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-10-19 16:17 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-10-19 16:17 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-10-19 16:17 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-10-19 16:17 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-10-19 16:17 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-10-19 16:17 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-10-19 16:17 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-10-19 16:17 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-10-19 16:17 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-10-19 16:17 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-10-19 16:17 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-10-19 16:17 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-10-19 16:17 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-10-19 16:17 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-10-19 16:17 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-10-19 16:17 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-10-19 16:17 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-10-19 16:17 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-10-19 16:17 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-10-19 16:16 - 2016-03-09 20:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-10-19 16:16 - 2016-03-09 19:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-10-19 16:16 - 2016-03-09 19:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-10-19 16:16 - 2016-03-09 19:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-10-19 16:16 - 2015-08-27 19:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-10-19 16:16 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-10-19 16:16 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-10-19 16:16 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-10-19 16:16 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-10-19 16:16 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-10-19 16:16 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-10-19 16:16 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-10-19 16:16 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-10-19 16:16 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-10-19 16:16 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-10-19 16:16 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-10-19 16:16 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-10-19 16:09 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-10-19 15:57 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-10-19 15:57 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-10-19 15:57 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-10-19 15:57 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-10-19 15:57 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-10-19 15:57 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-10-19 15:57 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-10-19 15:57 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-10-19 15:57 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-10-19 15:57 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-10-19 15:57 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-10-19 15:57 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-10-19 15:57 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-10-19 15:57 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-10-19 15:57 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-10-19 15:57 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-10-19 15:57 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-10-19 15:57 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-10-19 15:57 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-10-19 15:50 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-10-19 15:50 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-10-19 15:50 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-10-19 15:48 - 2016-10-19 15:48 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-10-19 15:48 - 2016-10-19 15:48 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 03649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01465344 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-10-19 15:48 - 2016-10-19 15:48 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-10-19 15:48 - 2016-10-19 15:48 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00419640 _____ C:\Windows\SysWOW64\locale.nls
2016-10-19 15:48 - 2016-10-19 15:48 - 00419640 _____ C:\Windows\system32\locale.nls
2016-10-19 15:48 - 2016-10-19 15:48 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-10-19 15:48 - 2016-10-19 15:48 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-10-19 15:48 - 2016-10-19 15:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-10-19 15:48 - 2016-10-19 15:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-10-19 15:48 - 2016-10-19 15:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-10-19 15:48 - 2016-10-19 15:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-10-19 15:45 - 2016-10-19 15:45 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-10-19 15:45 - 2016-10-19 15:45 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-10-19 15:44 - 2016-10-19 15:44 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-10-19 15:44 - 2016-10-19 15:44 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-10-19 15:43 - 2016-10-19 15:43 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-10-19 15:43 - 2016-10-19 15:43 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-10-19 15:43 - 2016-10-19 15:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-10-19 15:42 - 2016-10-19 15:42 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2016-10-19 15:42 - 2016-10-19 15:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-10-19 15:42 - 2016-10-19 15:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-10-19 15:42 - 2016-10-19 15:42 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-10-19 15:42 - 2016-10-19 15:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-10-19 15:41 - 2016-10-19 15:41 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-10-19 15:41 - 2016-10-19 15:41 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-10-19 15:40 - 2016-10-19 15:40 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-10-19 15:40 - 2016-10-19 15:40 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-10-19 15:40 - 2016-10-19 15:40 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-10-19 15:39 - 2016-10-19 15:39 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-10-19 15:39 - 2016-10-19 15:39 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-10-19 15:39 - 2016-10-19 15:39 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-10-19 15:39 - 2016-10-19 15:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-10-19 15:37 - 2016-10-19 15:37 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-10-19 15:37 - 2016-10-19 15:37 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-10-19 15:37 - 2016-10-19 15:37 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-10-19 15:34 - 2016-10-19 15:34 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-10-19 15:34 - 2016-10-19 15:34 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-10-19 15:34 - 2016-10-19 15:34 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-10-19 15:34 - 2016-10-19 15:34 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-10-19 15:34 - 2016-10-19 15:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-10-19 15:33 - 2016-10-19 15:33 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-10-19 15:33 - 2016-10-19 15:33 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-10-19 15:33 - 2016-10-19 15:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-10-19 15:33 - 2016-10-19 15:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-10-19 15:32 - 2016-10-19 15:32 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-10-19 15:32 - 2016-10-19 15:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-10-19 15:31 - 2016-10-19 15:31 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-10-19 15:31 - 2016-10-19 15:31 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-10-19 15:29 - 2016-10-19 15:29 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-10-19 15:29 - 2016-10-19 15:29 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-10-19 15:29 - 2016-10-19 15:29 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-10-19 15:29 - 2016-10-19 15:29 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-10-19 15:26 - 2016-10-19 15:26 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-10-19 15:26 - 2016-10-19 15:26 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-10-19 15:26 - 2016-10-19 15:26 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-10-19 15:26 - 2016-10-19 15:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-10-19 15:26 - 2016-10-19 15:26 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-10-19 15:26 - 2016-10-19 15:26 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-10-19 15:26 - 2016-10-19 15:26 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-10-19 15:25 - 2016-10-19 15:25 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-10-19 15:25 - 2016-10-19 15:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-10-19 15:24 - 2016-10-19 15:24 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-10-19 15:24 - 2016-10-19 15:24 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-10-19 15:23 - 2016-10-19 15:23 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-10-19 15:23 - 2016-10-19 15:23 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-10-19 15:23 - 2016-10-19 15:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-10-19 15:23 - 2016-10-19 15:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-10-19 15:23 - 2016-10-19 15:23 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-10-19 15:22 - 2016-10-19 15:22 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-10-19 15:22 - 2016-10-19 15:22 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-10-19 15:22 - 2016-10-19 15:22 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-10-19 15:22 - 2016-10-19 15:22 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-10-19 15:22 - 2016-10-19 15:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-10-19 15:22 - 2016-10-19 15:22 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-10-19 15:21 - 2016-10-19 15:21 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

bato96 · 06.11.2016, 19:10

Code:

ATTFilter

2016-10-19 15:20 - 2016-10-19 15:20 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-10-19 15:20 - 2016-10-19 15:20 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-10-19 15:18 - 2016-10-19 15:18 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-10-19 15:16 - 2016-10-19 15:16 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-10-19 15:15 - 2016-10-19 15:15 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-10-19 15:13 - 2016-10-19 15:13 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-10-19 15:12 - 2016-10-19 15:12 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-10-19 15:12 - 2016-10-19 15:12 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-10-19 15:12 - 2016-10-19 15:12 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-10-19 15:11 - 2016-10-19 15:11 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-10-19 15:11 - 2016-10-19 15:11 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-10-19 15:11 - 2016-10-19 15:11 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-10-19 15:09 - 2016-10-19 15:09 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-10-19 15:06 - 2016-10-19 15:06 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-10-19 15:06 - 2016-10-19 15:06 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-10-19 15:05 - 2016-10-19 15:05 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-10-19 15:05 - 2016-10-19 15:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-10-19 15:05 - 2016-10-19 15:05 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-10-19 15:03 - 2016-10-19 15:03 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-10-19 15:03 - 2016-10-19 15:03 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-10-19 15:02 - 2016-10-19 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-10-19 15:01 - 2016-10-19 15:01 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-10-19 15:00 - 2016-10-19 15:00 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-10-19 15:00 - 2016-10-19 15:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-10-19 14:59 - 2016-10-19 14:59 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-10-19 14:57 - 2016-10-19 14:57 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-10-19 14:57 - 2016-10-19 14:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-10-19 14:57 - 2016-10-19 14:57 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-10-19 14:57 - 2016-10-19 14:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-10-19 14:54 - 2016-10-19 14:54 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-10-19 14:54 - 2016-10-19 14:54 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-10-19 14:53 - 2016-10-19 14:53 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-10-19 14:53 - 2016-10-19 14:53 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-10-19 14:52 - 2016-10-19 14:52 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-10-19 14:52 - 2016-10-19 14:52 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-10-19 14:52 - 2016-10-19 14:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-10-19 14:52 - 2016-10-19 14:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-10-19 14:44 - 2016-05-13 23:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-10-19 14:44 - 2016-05-13 22:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-10-19 14:44 - 2016-05-13 22:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-10-19 14:44 - 2016-05-13 22:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-10-19 14:44 - 2016-05-13 22:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-10-19 14:44 - 2016-05-13 22:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-10-19 14:44 - 2016-05-13 22:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-10-19 14:44 - 2016-05-13 22:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-10-19 14:44 - 2016-05-13 22:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-10-19 14:44 - 2016-05-13 22:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-10-19 14:44 - 2016-05-12 18:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-10-19 14:44 - 2016-05-12 16:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-10-19 14:44 - 2016-05-12 16:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-10-19 14:44 - 2016-05-12 14:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-10-19 14:44 - 2016-05-12 14:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-10-19 14:44 - 2016-05-12 14:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-10-19 14:44 - 2016-05-04 18:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-10-19 14:44 - 2016-05-04 18:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-10-19 14:44 - 2016-05-04 18:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-10-19 14:44 - 2016-05-04 16:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-10-19 14:44 - 2016-05-04 15:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-10-19 14:44 - 2016-03-23 23:43 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-10-19 14:44 - 2016-03-23 23:40 - 00634432 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-10-19 14:44 - 2016-03-23 23:40 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-10-19 14:43 - 2016-07-22 15:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-10-19 14:43 - 2016-07-22 15:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-10-19 14:00 - 2016-10-19 14:00 - 00000000 ____D C:\Users\Stean\AppData\Local\ElevatedDiagnostics
2016-10-19 11:57 - 2016-10-19 12:05 - 00421205 _____ C:\Users\Stean\Desktop\Glas-Angebot.pdf
2016-10-19 11:57 - 2016-10-19 11:57 - 00000000 ____D C:\Users\Stean\Documents\Benutzerdefinierte Office-Vorlagen
2016-10-17 13:24 - 2016-10-17 13:24 - 00003230 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task
2016-10-17 13:24 - 2016-10-17 13:24 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Skype
2016-10-17 11:57 - 2016-10-17 11:57 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube To MP3 Converter.lnk
2016-10-17 11:57 - 2016-10-17 11:57 - 00001335 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2016-10-17 11:56 - 2016-10-17 12:00 - 00000000 ____D C:\Users\Stean\AppData\Roaming\DVDVideoSoft
2016-10-14 15:00 - 2016-10-14 15:00 - 00342056 _____ C:\Users\Stean\Downloads\Musterhaus-Villa.tif
2016-10-12 18:29 - 2016-10-12 18:29 - 00000000 __RHD C:\MSOCache
2016-10-11 13:43 - 2016-11-05 14:00 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-10-11 13:43 - 2016-10-19 16:51 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Adobe
2016-10-11 13:43 - 2016-10-11 15:29 - 00000000 ____D C:\ProgramData\Adobe
2016-10-11 13:43 - 2016-10-11 13:43 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-10-11 13:43 - 2016-10-11 13:43 - 00002047 _____ C:\Users\Stean\Documents\Acrobat Reader DC.lnk
2016-10-11 13:43 - 2016-10-11 13:43 - 00000000 ____D C:\Users\Stean\AppData\LocalLow\Adobe
2016-10-11 13:43 - 2016-10-11 13:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-11 13:24 - 2016-10-11 13:24 - 00000000 ____D C:\Program Files (x86)\Business Objects
2016-10-11 13:23 - 2016-10-11 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ideCAD Architektur 6 Demo
2016-10-11 13:23 - 2016-10-11 13:24 - 00000000 ____D C:\ideCAD Architektur 6 Demo
2016-10-11 13:23 - 2016-10-11 13:23 - 00000641 _____ C:\Users\Public\Desktop\ideCAD Architektur 6.lnk
2016-10-11 13:23 - 2009-10-07 10:57 - 03586232 _____ (Intel Corporation) C:\Windows\SysWOW64\libmmd.dll
2016-10-11 13:23 - 2009-10-07 10:52 - 00534712 _____ (Intel Corporation) C:\Windows\SysWOW64\libiomp5md.dll
2016-10-11 13:23 - 2008-01-09 15:58 - 00520192 _____ (Autodesk, Inc.) C:\Windows\SysWOW64\whiptk7.dll
2016-10-11 13:23 - 2008-01-09 15:57 - 00339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2016-10-11 13:23 - 2008-01-09 15:57 - 00212480 _____ (Eastman Kodak) C:\Windows\SysWOW64\PCDLIB32.DLL
2016-10-11 13:23 - 2008-01-09 15:52 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 01013248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltwvc13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00825344 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltwen13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00246784 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvkrn13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00163328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lvdlg13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00076800 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvgl13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00074240 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvdx13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00030208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTWND13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00966144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LtDlgRes13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00820736 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTRTN13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00445952 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimg13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00442880 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00205824 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00168448 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTSCR13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00156160 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltpnt13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00147456 _____ C:\Windows\SysWOW64\lttls13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00139264 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00120832 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttw213n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00113664 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTOCR13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00110592 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTSGM13N.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00108032 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTTLB13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00095232 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpdg13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00061440 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltnet13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00053248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTWEB13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00051200 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltlst13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttwn13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltisi13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00032256 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttmb13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 01379328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltdlg13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00964096 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDic13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00708608 _____ C:\Windows\SysWOW64\ltcry13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00265728 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00111616 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCON13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 01684992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCLR13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00786432 _____ () C:\Windows\SysWOW64\libhpdf.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00778240 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltann13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00217088 _____ (Intel Corporation) C:\Windows\SysWOW64\libguide40.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00149504 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTAUT13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00076800 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfwmf13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00047104 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfXpm13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00045056 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfXbm13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00033280 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwmp13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00025600 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfxwd13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00532992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFSVG13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00338944 _____ () C:\Windows\SysWOW64\lffpx7.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00280064 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFJ2K13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00181248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfpng13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00171008 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpdf13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00134144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfPCL13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00126464 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lftif13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00118784 _____ () C:\Windows\SysWOW64\lfkodak.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00107520 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfgbr13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00101888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00101376 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfvpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00090112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfjbg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00084480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lffpx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00082944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfshp13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00073216 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lffax13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00069632 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFPTK13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00065536 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfpct13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00058368 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfsct13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00055296 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpsd13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00048128 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfica13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00038400 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfflc13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfgif13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00033792 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFSMP13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00033280 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfvec13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00031744 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lflmb13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00031232 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFPNM13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00029184 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lflma13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00027136 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfiff13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00026112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpcx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00024576 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lftga13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfimg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfsgi13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfras13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwfx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpcd13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfitg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmsp13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmac13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00017920 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfRaw13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00485888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFCMW13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00476672 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdwf13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00392704 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFCMP13n.DLL
2016-10-11 13:23 - 2008-01-09 15:47 - 00293376 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfAFP13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00182272 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdxf13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00128512 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdwg13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00094208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdrw13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00091136 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfacs13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00090624 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcgm13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00090112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcmx13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00079872 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfdgn13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00037888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfeps13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00035840 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfcal13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00031744 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfclp13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00030208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfbmp13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00025600 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfani13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00023040 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfawd13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00021504 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfCUT13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfavi13n.dll
2016-10-11 13:23 - 2008-01-09 14:26 - 00073728 _____ (ideYAPI LTD.) C:\Windows\SysWOW64\dxfimport.dll
2016-10-11 13:23 - 2008-01-09 14:26 - 00046592 _____ (Blue Sky Software Corporation) C:\Windows\SysWOW64\CSH.DLL
2016-10-11 13:23 - 2008-01-09 14:26 - 00019968 _____ C:\Windows\SysWOW64\Cpuinf32.dll
2016-10-11 13:23 - 2008-01-09 14:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWRESX32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWCODC32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWDENC32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWVIEW32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWDCXC32.DLL
2016-10-11 13:06 - 2016-10-17 13:24 - 00002180 _____ C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-17 13:24 - 00000000 ___RD C:\Users\Stean\OneDrive
2016-10-11 13:06 - 2016-10-11 13:06 - 00002124 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-11 13:06 - 00002124 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-11 13:06 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-11 13:06 - 2016-10-11 13:06 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-10-11 13:05 - 2016-10-11 13:05 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-10-11 12:59 - 2016-10-11 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-10-11 12:57 - 2016-10-18 10:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-11 12:57 - 2016-10-11 12:57 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-10-11 12:57 - 2016-10-11 12:57 - 00000000 ____D C:\Program Files\Microsoft Office
2016-10-11 12:55 - 2016-10-18 10:04 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-10-10 09:27 - 2016-10-10 09:27 - 00000359 _____ C:\Users\Stean\Desktop\Papierkorb.lnk
2016-10-10 09:23 - 2016-10-10 09:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-10 09:17 - 2016-10-10 09:17 - 00000000 ____D C:\Users\Stean\AppData\Roaming\ControlCenter4
2016-10-10 09:13 - 2016-10-10 09:13 - 00002944 _____ C:\Windows\BRPARAM.INI
2016-10-10 09:13 - 2016-10-10 09:13 - 00002144 _____ C:\Users\Stean\Documents\Brother Creative Center.lnk
2016-10-10 09:13 - 2016-10-10 09:13 - 00000260 _____ C:\Windows\Brpfx04a.ini
2016-10-10 09:13 - 2016-10-10 09:13 - 00000064 _____ C:\Windows\brpcfx.ini
2016-10-10 09:13 - 2016-10-10 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2016-10-10 09:12 - 2016-10-10 09:13 - 00000000 ____D C:\ProgramData\Brother
2016-10-10 09:12 - 2016-10-10 09:12 - 00000066 _____ C:\Windows\Brfaxrx.ini
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Users\Public\Documents\BrFaxRx
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\ProgramData\ControlCenter4
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\ControlCenter4
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\Browny02
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\Brother
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Brother
2016-10-10 09:12 - 2012-09-10 15:31 - 00245760 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2016-10-10 09:12 - 2012-07-31 08:39 - 01439744 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWi209d.dll
2016-10-10 09:12 - 2012-07-09 16:19 - 00005120 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2016-10-10 09:12 - 2012-07-05 12:32 - 00084480 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2016-10-10 09:12 - 2012-06-05 07:59 - 00025299 _____ (Brother Industries, Ltd) C:\Windows\SysWOW64\BRLM03A.DLL
2016-10-10 09:12 - 2012-03-19 05:09 - 00316928 _____ (brother) C:\Windows\system32\NSSRH64.dll
2016-10-10 09:12 - 2010-09-23 09:14 - 00058880 _____ (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2016-10-10 09:12 - 2010-09-23 09:13 - 00051712 _____ (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2016-10-10 09:12 - 2010-05-20 06:33 - 00103792 _____ (Brother Industries Ltd) C:\Windows\SysWOW64\BRRBI100.EXE
2016-10-10 09:12 - 2010-04-01 11:27 - 00278528 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrJDec.dll
2016-10-10 09:12 - 2010-03-16 00:04 - 00143360 _____ C:\Windows\system32\BrSNMP64.dll
2016-10-10 09:12 - 2010-03-15 18:45 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2016-10-10 09:12 - 2010-03-15 17:20 - 00050176 _____ (Brother Industries Ltd.) C:\Windows\SysWOW64\BRPRTINK.DLL
2016-10-10 09:12 - 2010-02-05 03:42 - 00180224 _____ (Brother Industries, Ltd.) C:\Windows\SysWOW64\BROSNMP.DLL
2016-10-10 09:12 - 2009-12-08 15:19 - 00290304 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5c.dll
2016-10-10 09:12 - 2007-12-13 21:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2016-10-10 09:12 - 2005-01-17 08:10 - 00045056 _____ C:\Windows\SysWOW64\BRTCPCON.DLL
2016-10-10 09:12 - 2004-08-09 08:00 - 00000114 _____ C:\Windows\SysWOW64\BRLMW03A.INI
2016-10-10 09:12 - 2004-08-09 07:42 - 00077824 _____ (Brother Industries, Ltd.) C:\Windows\SysWOW64\BRLMW03A.DLL
2016-10-10 09:12 - 2003-11-28 17:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2016-10-10 09:10 - 2016-10-10 09:10 - 00002271 _____ C:\Users\Stean\Documents\TP-LINK Wireless Configuration Utility.lnk
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\Users\Stean\AppData\Roaming\TP-LINK
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\Program Files (x86)\TP-LINK
2016-10-10 09:09 - 2016-10-10 09:09 - 00000000 ____D C:\ProgramData\TP-LINK
2016-10-10 09:09 - 2013-01-22 13:41 - 01579520 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-10-10 09:09 - 2013-01-22 13:41 - 01579520 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2016-10-10 09:09 - 2013-01-22 13:41 - 00007748 _____ C:\Windows\system32\athrextx.cat
2016-10-10 08:56 - 2016-10-10 08:58 - 01027984 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-10-10 08:56 - 2016-10-10 08:56 - 00002202 _____ C:\Users\Stean\Documents\Sicherer Zahlungsverkehr.lnk
2016-10-10 08:56 - 2016-10-10 08:56 - 00002140 _____ C:\Users\Stean\Documents\Kaspersky Internet Security.lnk
2016-10-10 08:56 - 2016-10-10 08:56 - 00000000 ____D C:\Windows\ELAMBKUP
2016-10-10 08:56 - 2016-10-10 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2016-10-10 08:56 - 2016-06-26 14:10 - 00189264 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2016-10-10 08:56 - 2013-05-06 07:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2016-10-10 08:52 - 2016-10-10 08:56 - 00000000 ____D C:\Program Files\Common Files\AV
2016-10-10 08:51 - 2016-11-06 18:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-10-10 08:51 - 2016-10-10 09:05 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-10-10 08:46 - 2016-10-10 08:46 - 01558224 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-10-07 13:39 - 2016-10-07 13:39 - 00003152 _____ C:\Windows\System32\Tasks\{8AC619B3-ADF4-4A05-9081-98779A46C0AE}
2016-10-07 11:27 - 2016-10-07 11:27 - 00000000 ____D C:\485177d6d0d2e9796e
2016-10-07 11:27 - 2016-10-07 11:27 - 00000000 ____D C:\2cdad959dcda7e86e705541bb6
2016-10-07 11:22 - 2016-10-07 11:22 - 00000000 ____D C:\Users\Stean\AppData\Roaming\WinRAR
2016-10-07 10:43 - 2016-11-05 14:45 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-10-07 10:43 - 2016-11-05 14:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-07 10:43 - 2016-10-26 17:36 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-07 10:43 - 2016-10-26 17:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-07 10:43 - 2016-10-26 17:36 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-10-07 10:43 - 2016-10-26 17:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-07 10:43 - 2016-10-26 17:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-07 10:43 - 2016-10-26 17:36 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-07 10:43 - 2016-10-11 13:43 - 00000000 ____D C:\Users\Stean\AppData\Local\Adobe
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\Program Files\WinRAR

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-06 18:53 - 2009-07-14 05:45 - 00035280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-06 18:53 - 2009-07-14 05:45 - 00035280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-06 18:45 - 2016-10-06 11:17 - 00000000 _RSHD C:\ProgramData\Key-Base
2016-11-06 18:43 - 2016-10-06 20:44 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-11-06 18:43 - 2016-10-06 20:44 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-11-06 18:43 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-06 18:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-06 18:39 - 2016-10-06 11:16 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-06 18:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-05 13:47 - 2016-10-06 10:53 - 00001369 _____ C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-11-05 12:14 - 2016-10-06 11:22 - 00000000 ____D C:\Users\Stean\AppData\Local\Deployment
2016-11-05 12:14 - 2016-10-06 11:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-04 19:04 - 2009-07-14 05:45 - 00437576 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-04 18:14 - 2016-10-06 11:14 - 00113736 _____ C:\Users\Stean\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-04 17:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\winrm
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\slmgr
2016-11-04 17:47 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-11-04 17:46 - 2016-10-06 10:53 - 00000000 ____D C:\Users\Stean
2016-10-30 10:06 - 2016-10-06 11:22 - 00000000 ____D C:\Users\Stean\AppData\Local\Google
2016-10-26 16:29 - 2010-11-21 04:27 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-25 16:42 - 2016-10-06 10:53 - 00000000 ____D C:\Users\Stean\AppData\Local\VirtualStore
2016-10-20 17:35 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\WCN
2016-10-20 17:35 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2016-10-20 09:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2016-10-19 18:05 - 2016-10-06 10:57 - 00000000 ____D C:\Program Files (x86)\Intel
2016-10-19 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-10-19 18:03 - 2016-10-06 11:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-19 18:03 - 2016-10-06 11:16 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-19 18:03 - 2016-10-06 11:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-19 17:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2016-10-19 17:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-10-19 17:42 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-10-11 13:23 - 2016-10-06 11:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-10-10 08:58 - 2016-06-20 16:29 - 00050008 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys
2016-10-10 08:58 - 2016-06-02 21:39 - 00126360 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2016-10-10 08:57 - 2016-06-20 16:51 - 00305496 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys

Einige Dateien in TEMP:
====================
C:\Users\Stean\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-04 12:35

==================== Ende von FRST.txt ============================

Code:

ATTFilter

2016-10-19 15:20 - 2016-10-19 15:20 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-10-19 15:20 - 2016-10-19 15:20 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-10-19 15:18 - 2016-10-19 15:18 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-10-19 15:16 - 2016-10-19 15:16 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-10-19 15:15 - 2016-10-19 15:15 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-10-19 15:15 - 2016-10-19 15:15 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-10-19 15:14 - 2016-10-19 15:14 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-10-19 15:13 - 2016-10-19 15:13 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-10-19 15:12 - 2016-10-19 15:12 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-10-19 15:12 - 2016-10-19 15:12 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-10-19 15:12 - 2016-10-19 15:12 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-10-19 15:11 - 2016-10-19 15:11 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-10-19 15:11 - 2016-10-19 15:11 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-10-19 15:11 - 2016-10-19 15:11 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-10-19 15:10 - 2016-10-19 15:10 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-10-19 15:09 - 2016-10-19 15:09 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-10-19 15:08 - 2016-10-19 15:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-10-19 15:07 - 2016-10-19 15:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-10-19 15:06 - 2016-10-19 15:06 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-10-19 15:06 - 2016-10-19 15:06 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-10-19 15:05 - 2016-10-19 15:05 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-10-19 15:05 - 2016-10-19 15:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-10-19 15:05 - 2016-10-19 15:05 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-10-19 15:05 - 2016-10-19 15:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-10-19 15:04 - 2016-10-19 15:04 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-10-19 15:03 - 2016-10-19 15:03 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-10-19 15:03 - 2016-10-19 15:03 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-10-19 15:02 - 2016-10-19 15:02 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-10-19 15:02 - 2016-10-19 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-10-19 15:01 - 2016-10-19 15:01 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-10-19 15:01 - 2016-10-19 15:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-10-19 15:00 - 2016-10-19 15:00 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-10-19 15:00 - 2016-10-19 15:00 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-10-19 15:00 - 2016-10-19 15:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-10-19 14:59 - 2016-10-19 14:59 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-10-19 14:59 - 2016-10-19 14:59 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-10-19 14:58 - 2016-10-19 14:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-10-19 14:58 - 2016-10-19 14:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-10-19 14:57 - 2016-10-19 14:57 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-10-19 14:57 - 2016-10-19 14:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-10-19 14:57 - 2016-10-19 14:57 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-10-19 14:57 - 2016-10-19 14:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-10-19 14:57 - 2016-10-19 14:57 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-10-19 14:56 - 2016-10-19 14:56 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-10-19 14:56 - 2016-10-19 14:56 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-10-19 14:54 - 2016-10-19 14:54 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-10-19 14:54 - 2016-10-19 14:54 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-10-19 14:54 - 2016-10-19 14:54 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-10-19 14:53 - 2016-10-19 14:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-10-19 14:53 - 2016-10-19 14:53 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-10-19 14:53 - 2016-10-19 14:53 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-10-19 14:53 - 2016-10-19 14:53 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-10-19 14:53 - 2016-10-19 14:53 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-10-19 14:53 - 2016-10-19 14:53 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-10-19 14:52 - 2016-10-19 14:52 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-10-19 14:52 - 2016-10-19 14:52 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-10-19 14:52 - 2016-10-19 14:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-10-19 14:52 - 2016-10-19 14:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-10-19 14:44 - 2016-05-13 23:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-10-19 14:44 - 2016-05-13 23:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-10-19 14:44 - 2016-05-13 22:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-10-19 14:44 - 2016-05-13 22:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-10-19 14:44 - 2016-05-13 22:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-10-19 14:44 - 2016-05-13 22:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-10-19 14:44 - 2016-05-13 22:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-10-19 14:44 - 2016-05-13 22:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-10-19 14:44 - 2016-05-13 22:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-10-19 14:44 - 2016-05-13 22:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-10-19 14:44 - 2016-05-13 22:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-10-19 14:44 - 2016-05-13 22:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-10-19 14:44 - 2016-05-12 18:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-10-19 14:44 - 2016-05-12 16:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-10-19 14:44 - 2016-05-12 16:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-10-19 14:44 - 2016-05-12 14:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-10-19 14:44 - 2016-05-12 14:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-10-19 14:44 - 2016-05-12 14:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-10-19 14:44 - 2016-05-04 18:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-10-19 14:44 - 2016-05-04 18:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-10-19 14:44 - 2016-05-04 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-10-19 14:44 - 2016-05-04 18:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-10-19 14:44 - 2016-05-04 16:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-10-19 14:44 - 2016-05-04 15:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-10-19 14:44 - 2016-03-23 23:43 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-10-19 14:44 - 2016-03-23 23:40 - 00634432 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-10-19 14:44 - 2016-03-23 23:40 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-10-19 14:43 - 2016-07-22 15:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-10-19 14:43 - 2016-07-22 15:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-10-19 14:00 - 2016-10-19 14:00 - 00000000 ____D C:\Users\Stean\AppData\Local\ElevatedDiagnostics
2016-10-19 11:57 - 2016-10-19 12:05 - 00421205 _____ C:\Users\Stean\Desktop\Glas-Angebot.pdf
2016-10-19 11:57 - 2016-10-19 11:57 - 00000000 ____D C:\Users\Stean\Documents\Benutzerdefinierte Office-Vorlagen
2016-10-17 13:24 - 2016-10-17 13:24 - 00003230 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task
2016-10-17 13:24 - 2016-10-17 13:24 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Skype
2016-10-17 11:57 - 2016-10-17 11:57 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube To MP3 Converter.lnk
2016-10-17 11:57 - 2016-10-17 11:57 - 00001335 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2016-10-17 11:57 - 2016-10-17 11:57 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2016-10-17 11:56 - 2016-10-17 12:00 - 00000000 ____D C:\Users\Stean\AppData\Roaming\DVDVideoSoft
2016-10-14 15:00 - 2016-10-14 15:00 - 00342056 _____ C:\Users\Stean\Downloads\Musterhaus-Villa.tif
2016-10-12 18:29 - 2016-10-12 18:29 - 00000000 __RHD C:\MSOCache
2016-10-11 13:43 - 2016-11-05 14:00 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-10-11 13:43 - 2016-10-19 16:51 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Adobe
2016-10-11 13:43 - 2016-10-11 15:29 - 00000000 ____D C:\ProgramData\Adobe
2016-10-11 13:43 - 2016-10-11 13:43 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-10-11 13:43 - 2016-10-11 13:43 - 00002047 _____ C:\Users\Stean\Documents\Acrobat Reader DC.lnk
2016-10-11 13:43 - 2016-10-11 13:43 - 00000000 ____D C:\Users\Stean\AppData\LocalLow\Adobe
2016-10-11 13:43 - 2016-10-11 13:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-11 13:24 - 2016-10-11 13:24 - 00000000 ____D C:\Program Files (x86)\Business Objects
2016-10-11 13:23 - 2016-10-11 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ideCAD Architektur 6 Demo
2016-10-11 13:23 - 2016-10-11 13:24 - 00000000 ____D C:\ideCAD Architektur 6 Demo
2016-10-11 13:23 - 2016-10-11 13:23 - 00000641 _____ C:\Users\Public\Desktop\ideCAD Architektur 6.lnk
2016-10-11 13:23 - 2009-10-07 10:57 - 03586232 _____ (Intel Corporation) C:\Windows\SysWOW64\libmmd.dll
2016-10-11 13:23 - 2009-10-07 10:52 - 00534712 _____ (Intel Corporation) C:\Windows\SysWOW64\libiomp5md.dll
2016-10-11 13:23 - 2008-01-09 15:58 - 00520192 _____ (Autodesk, Inc.) C:\Windows\SysWOW64\whiptk7.dll
2016-10-11 13:23 - 2008-01-09 15:57 - 00339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2016-10-11 13:23 - 2008-01-09 15:57 - 00212480 _____ (Eastman Kodak) C:\Windows\SysWOW64\PCDLIB32.DLL
2016-10-11 13:23 - 2008-01-09 15:52 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 01013248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltwvc13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00825344 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltwen13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00246784 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvkrn13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00163328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lvdlg13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00076800 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvgl13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00074240 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lvdx13n.dll
2016-10-11 13:23 - 2008-01-09 15:52 - 00030208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTWND13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00966144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LtDlgRes13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00820736 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTRTN13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00445952 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimg13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00442880 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00205824 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00168448 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTSCR13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00156160 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltpnt13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00147456 _____ C:\Windows\SysWOW64\lttls13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00139264 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil13n.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00120832 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttw213n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00113664 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTOCR13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00110592 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTSGM13N.DLL
2016-10-11 13:23 - 2008-01-09 15:51 - 00108032 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTTLB13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00095232 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpdg13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00061440 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltnet13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00053248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTWEB13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00051200 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltlst13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttwn13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltisi13n.dll
2016-10-11 13:23 - 2008-01-09 15:51 - 00032256 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttmb13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 01379328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltdlg13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00964096 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDic13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00708608 _____ C:\Windows\SysWOW64\ltcry13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00265728 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS13n.dll
2016-10-11 13:23 - 2008-01-09 15:50 - 00111616 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCON13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 01684992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCLR13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00786432 _____ () C:\Windows\SysWOW64\libhpdf.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00778240 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltann13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00217088 _____ (Intel Corporation) C:\Windows\SysWOW64\libguide40.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00149504 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTAUT13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00076800 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfwmf13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00047104 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfXpm13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00045056 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfXbm13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00033280 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwmp13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00025600 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfxwd13n.dll
2016-10-11 13:23 - 2008-01-09 15:49 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00532992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFSVG13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00338944 _____ () C:\Windows\SysWOW64\lffpx7.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00280064 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFJ2K13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00181248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfpng13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00171008 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpdf13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00134144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfPCL13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00126464 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lftif13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00118784 _____ () C:\Windows\SysWOW64\lfkodak.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00107520 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfgbr13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00101888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00101376 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfvpg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00090112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfjbg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00084480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lffpx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00082944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfshp13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00073216 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lffax13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00069632 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFPTK13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00065536 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfpct13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00058368 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfsct13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00055296 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpsd13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00048128 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfica13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00038400 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfflc13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00035328 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfgif13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00033792 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFSMP13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00033280 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfvec13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00031744 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lflmb13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00031232 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFPNM13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00029184 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lflma13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00027136 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfiff13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00026112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpcx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00024576 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lftga13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020992 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfimg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfsgi13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00020480 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfras13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfwfx13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfpcd13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00019968 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfitg13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmsp13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfmac13n.dll
2016-10-11 13:23 - 2008-01-09 15:48 - 00017920 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfRaw13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00485888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFCMW13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00476672 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdwf13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00392704 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LFCMP13n.DLL
2016-10-11 13:23 - 2008-01-09 15:47 - 00293376 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfAFP13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00182272 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdxf13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00128512 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdwg13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00094208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfdrw13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00091136 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfacs13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00090624 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcgm13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00090112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcmx13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00079872 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfdgn13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00037888 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfeps13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00035840 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfcal13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00031744 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfclp13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00030208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfbmp13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00025600 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfani13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00023040 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfawd13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00021504 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfCUT13n.dll
2016-10-11 13:23 - 2008-01-09 15:47 - 00018944 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfavi13n.dll
2016-10-11 13:23 - 2008-01-09 14:26 - 00073728 _____ (ideYAPI LTD.) C:\Windows\SysWOW64\dxfimport.dll
2016-10-11 13:23 - 2008-01-09 14:26 - 00046592 _____ (Blue Sky Software Corporation) C:\Windows\SysWOW64\CSH.DLL
2016-10-11 13:23 - 2008-01-09 14:26 - 00019968 _____ C:\Windows\SysWOW64\Cpuinf32.dll
2016-10-11 13:23 - 2008-01-09 14:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWRESX32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWCODC32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWDENC32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWVIEW32.DLL
2016-10-11 13:23 - 2008-01-09 14:24 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AWDCXC32.DLL
2016-10-11 13:06 - 2016-10-17 13:24 - 00002180 _____ C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-17 13:24 - 00000000 ___RD C:\Users\Stean\OneDrive
2016-10-11 13:06 - 2016-10-11 13:06 - 00002124 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-11 13:06 - 00002124 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-11 13:06 - 2016-10-11 13:06 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-11 13:06 - 2016-10-11 13:06 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-10-11 13:05 - 2016-10-11 13:05 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-10-11 12:59 - 2016-10-11 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-10-11 12:57 - 2016-10-18 10:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-11 12:57 - 2016-10-11 12:57 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-10-11 12:57 - 2016-10-11 12:57 - 00000000 ____D C:\Program Files\Microsoft Office
2016-10-11 12:55 - 2016-10-18 10:04 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-10-10 09:27 - 2016-10-10 09:27 - 00000359 _____ C:\Users\Stean\Desktop\Papierkorb.lnk
2016-10-10 09:23 - 2016-10-10 09:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-10 09:17 - 2016-10-10 09:17 - 00000000 ____D C:\Users\Stean\AppData\Roaming\ControlCenter4
2016-10-10 09:13 - 2016-10-10 09:13 - 00002944 _____ C:\Windows\BRPARAM.INI
2016-10-10 09:13 - 2016-10-10 09:13 - 00002144 _____ C:\Users\Stean\Documents\Brother Creative Center.lnk
2016-10-10 09:13 - 2016-10-10 09:13 - 00000260 _____ C:\Windows\Brpfx04a.ini
2016-10-10 09:13 - 2016-10-10 09:13 - 00000064 _____ C:\Windows\brpcfx.ini
2016-10-10 09:13 - 2016-10-10 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2016-10-10 09:12 - 2016-10-10 09:13 - 00000000 ____D C:\ProgramData\Brother
2016-10-10 09:12 - 2016-10-10 09:12 - 00000066 _____ C:\Windows\Brfaxrx.ini
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Users\Public\Documents\BrFaxRx
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\ProgramData\ControlCenter4
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\ControlCenter4
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\Browny02
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Program Files (x86)\Brother
2016-10-10 09:12 - 2016-10-10 09:12 - 00000000 ____D C:\Brother
2016-10-10 09:12 - 2012-09-10 15:31 - 00245760 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2016-10-10 09:12 - 2012-07-31 08:39 - 01439744 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWi209d.dll
2016-10-10 09:12 - 2012-07-09 16:19 - 00005120 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2016-10-10 09:12 - 2012-07-05 12:32 - 00084480 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2016-10-10 09:12 - 2012-06-05 07:59 - 00025299 _____ (Brother Industries, Ltd) C:\Windows\SysWOW64\BRLM03A.DLL
2016-10-10 09:12 - 2012-03-19 05:09 - 00316928 _____ (brother) C:\Windows\system32\NSSRH64.dll
2016-10-10 09:12 - 2010-09-23 09:14 - 00058880 _____ (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2016-10-10 09:12 - 2010-09-23 09:13 - 00051712 _____ (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2016-10-10 09:12 - 2010-05-20 06:33 - 00103792 _____ (Brother Industries Ltd) C:\Windows\SysWOW64\BRRBI100.EXE
2016-10-10 09:12 - 2010-04-01 11:27 - 00278528 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrJDec.dll
2016-10-10 09:12 - 2010-03-16 00:04 - 00143360 _____ C:\Windows\system32\BrSNMP64.dll
2016-10-10 09:12 - 2010-03-15 18:45 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2016-10-10 09:12 - 2010-03-15 17:20 - 00050176 _____ (Brother Industries Ltd.) C:\Windows\SysWOW64\BRPRTINK.DLL
2016-10-10 09:12 - 2010-02-05 03:42 - 00180224 _____ (Brother Industries, Ltd.) C:\Windows\SysWOW64\BROSNMP.DLL
2016-10-10 09:12 - 2009-12-08 15:19 - 00290304 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5c.dll
2016-10-10 09:12 - 2007-12-13 21:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2016-10-10 09:12 - 2005-01-17 08:10 - 00045056 _____ C:\Windows\SysWOW64\BRTCPCON.DLL
2016-10-10 09:12 - 2004-08-09 08:00 - 00000114 _____ C:\Windows\SysWOW64\BRLMW03A.INI
2016-10-10 09:12 - 2004-08-09 07:42 - 00077824 _____ (Brother Industries, Ltd.) C:\Windows\SysWOW64\BRLMW03A.DLL
2016-10-10 09:12 - 2003-11-28 17:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2016-10-10 09:10 - 2016-10-10 09:10 - 00002271 _____ C:\Users\Stean\Documents\TP-LINK Wireless Configuration Utility.lnk
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\Users\Stean\AppData\Roaming\TP-LINK
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2016-10-10 09:10 - 2016-10-10 09:10 - 00000000 ____D C:\Program Files (x86)\TP-LINK
2016-10-10 09:09 - 2016-10-10 09:09 - 00000000 ____D C:\ProgramData\TP-LINK
2016-10-10 09:09 - 2013-01-22 13:41 - 01579520 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-10-10 09:09 - 2013-01-22 13:41 - 01579520 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2016-10-10 09:09 - 2013-01-22 13:41 - 00007748 _____ C:\Windows\system32\athrextx.cat
2016-10-10 08:56 - 2016-10-10 08:58 - 01027984 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-10-10 08:56 - 2016-10-10 08:56 - 00002202 _____ C:\Users\Stean\Documents\Sicherer Zahlungsverkehr.lnk
2016-10-10 08:56 - 2016-10-10 08:56 - 00002140 _____ C:\Users\Stean\Documents\Kaspersky Internet Security.lnk
2016-10-10 08:56 - 2016-10-10 08:56 - 00000000 ____D C:\Windows\ELAMBKUP
2016-10-10 08:56 - 2016-10-10 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2016-10-10 08:56 - 2016-06-26 14:10 - 00189264 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2016-10-10 08:56 - 2013-05-06 07:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2016-10-10 08:52 - 2016-10-10 08:56 - 00000000 ____D C:\Program Files\Common Files\AV
2016-10-10 08:51 - 2016-11-06 18:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-10-10 08:51 - 2016-10-10 09:05 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-10-10 08:46 - 2016-10-10 08:46 - 01558224 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-10-07 13:39 - 2016-10-07 13:39 - 00003152 _____ C:\Windows\System32\Tasks\{8AC619B3-ADF4-4A05-9081-98779A46C0AE}
2016-10-07 11:27 - 2016-10-07 11:27 - 00000000 ____D C:\485177d6d0d2e9796e
2016-10-07 11:27 - 2016-10-07 11:27 - 00000000 ____D C:\2cdad959dcda7e86e705541bb6
2016-10-07 11:22 - 2016-10-07 11:22 - 00000000 ____D C:\Users\Stean\AppData\Roaming\WinRAR
2016-10-07 10:43 - 2016-11-05 14:45 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-10-07 10:43 - 2016-11-05 14:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-07 10:43 - 2016-10-26 17:36 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-07 10:43 - 2016-10-26 17:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-07 10:43 - 2016-10-26 17:36 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-10-07 10:43 - 2016-10-26 17:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-07 10:43 - 2016-10-26 17:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-07 10:43 - 2016-10-26 17:36 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-07 10:43 - 2016-10-11 13:43 - 00000000 ____D C:\Users\Stean\AppData\Local\Adobe
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-07 10:06 - 2016-10-07 10:06 - 00000000 ____D C:\Program Files\WinRAR

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-06 18:53 - 2009-07-14 05:45 - 00035280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-06 18:53 - 2009-07-14 05:45 - 00035280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-06 18:45 - 2016-10-06 11:17 - 00000000 _RSHD C:\ProgramData\Key-Base
2016-11-06 18:43 - 2016-10-06 20:44 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-11-06 18:43 - 2016-10-06 20:44 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-11-06 18:43 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-06 18:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-06 18:39 - 2016-10-06 11:16 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-06 18:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-05 13:47 - 2016-10-06 10:53 - 00001369 _____ C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-11-05 12:14 - 2016-10-06 11:22 - 00000000 ____D C:\Users\Stean\AppData\Local\Deployment
2016-11-05 12:14 - 2016-10-06 11:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-04 19:04 - 2009-07-14 05:45 - 00437576 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-04 18:14 - 2016-10-06 11:14 - 00113736 _____ C:\Users\Stean\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-04 17:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\winrm
2016-11-04 17:47 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\slmgr
2016-11-04 17:47 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-11-04 17:47 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2016-11-04 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-11-04 17:46 - 2016-10-06 10:53 - 00000000 ____D C:\Users\Stean
2016-10-30 10:06 - 2016-10-06 11:22 - 00000000 ____D C:\Users\Stean\AppData\Local\Google
2016-10-26 16:29 - 2010-11-21 04:27 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-25 16:42 - 2016-10-06 10:53 - 00000000 ____D C:\Users\Stean\AppData\Local\VirtualStore
2016-10-20 17:35 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\WCN
2016-10-20 17:35 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2016-10-20 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2016-10-20 09:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2016-10-19 18:05 - 2016-10-06 10:57 - 00000000 ____D C:\Program Files (x86)\Intel
2016-10-19 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-10-19 18:03 - 2016-10-06 11:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-19 18:03 - 2016-10-06 11:16 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-19 18:03 - 2016-10-06 11:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-19 17:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2016-10-19 17:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-10-19 17:42 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-10-11 13:23 - 2016-10-06 11:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-10-10 08:58 - 2016-06-20 16:29 - 00050008 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys
2016-10-10 08:58 - 2016-06-02 21:39 - 00126360 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2016-10-10 08:57 - 2016-06-20 16:51 - 00305496 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys

Einige Dateien in TEMP:
====================
C:\Users\Stean\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-04 12:35

==================== Ende von FRST.txt ============================

bato96 · 06.11.2016, 19:16

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-11-2016
durchgeführt von Stean (06-11-2016 18:57:12)
Gestartet von C:\Users\Stean\Downloads
Windows 7 Professional Service Pack 1 (X64) (2016-10-06 09:53:47)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1040309402-2405870343-1871077889-500 - Administrator - Disabled)
Gast (S-1-5-21-1040309402-2405870343-1871077889-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1040309402-2405870343-1871077889-1002 - Limited - Enabled)
Stean (S-1-5-21-1040309402-2405870343-1871077889-1000 - Administrator - Enabled) => C:\Users\Stean

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)
Brother MFL-Pro Suite MFC-J6510DW (HKLM-x32\...\{17795164-3BC1-4D4F-8ADA-65C895EBFC9A}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Crystal Reports Basic Runtime for Visual Studio 2008 (HKLM-x32\...\{CE26F10F-C80F-4377-908B-1B7882AE2CE3}) (Version: 10.5.0.0 - Business Objects)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
EVGA Precision 2.0.1 (HKLM-x32\...\Precision) (Version: 2.0.1 - EVGA Corporation)
EVGA Precision XOC (HKLM-x32\...\{3949A984-CF6F-48DD-BE84-64C148CCBEC6}) (Version: 6.0.7 - EVGA Corporation)
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.28.831 - Digital Wave Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
ideCAD Architektur 6 Demo (HKLM-x32\...\{DBD37326-C8CF-4DB4-A809-DEBE621E10EE}) (Version: 6.53.00 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft Office Professional 2013 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 15.0.4867.1003 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4867.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1040309402-2405870343-1871077889-1000\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)
NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4867.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4867.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4867.1003 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
TP-LINK TL-WN881ND Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
VIRTU 1.2.106 (HKLM\...\VIRTU_is1) (Version: 1.2.106 - Lucfidlogix Technologies LTD)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1040309402-2405870343-1871077889-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Stean\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-1040309402-2405870343-1871077889-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Stean\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0A31E35B-BD89-4530-8A5B-CE809C1BD3C2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-10-11] (Microsoft Corporation)
Task: {3184FAC6-F225-4A33-94BF-E1BA78FC3409} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-05] (Google Inc.)
Task: {36B6CB24-4915-4EFF-99D8-E9656A6DB747} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-10-03] (Microsoft Corporation)
Task: {37082DC6-11F1-473B-8A13-8615399D210C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-26] (Adobe Systems Incorporated)
Task: {5497259A-CE0B-4B46-A6F9-D659FCCCC751} - System32\Tasks\{8AC619B3-ADF4-4A05-9081-98779A46C0AE} => pcalua.exe -a C:\2cdad959dcda7e86e705541bb6\SetupUtility.exe -d C:\2cdad959dcda7e86e705541bb6
Task: {929E8B61-FE1E-4CCD-8971-AB71BE4DB45D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated)
Task: {AFE585C1-641E-4656-A58D-B5499918E488} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-05] (Google Inc.)
Task: {BD8E71AC-F14B-4BD4-A488-E51644308FA7} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe [2016-10-26] (Adobe Systems Incorporated)
Task: {E042A430-BB5A-474A-9CF9-938FACB3CF7D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-10-11] (Microsoft Corporation)
Task: {EC3595F7-2F2B-4289-A8D9-F464338A83E2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-10-03] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-10-19 18:03 - 2016-09-16 23:57 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-10-11 12:55 - 2016-05-24 08:51 - 00116416 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-10-10 09:12 - 2010-03-16 00:04 - 00143360 _____ () C:\Windows\system32\BrSNMP64.dll
2016-10-17 13:24 - 2016-10-17 13:24 - 01864384 _____ () C:\Users\Stean\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-10-06 11:13 - 2011-08-08 12:07 - 02660128 _____ () C:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.exe
2016-10-06 11:02 - 2015-06-01 20:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-10-10 09:10 - 2013-04-09 10:05 - 00846848 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-11-05 12:14 - 2016-10-31 08:11 - 02367080 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libglesv2.dll
2016-11-05 12:14 - 2016-10-31 08:11 - 00107112 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libegl.dll
2016-06-27 23:19 - 2016-06-27 23:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2016-10-17 11:57 - 2016-08-31 18:55 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-10-17 11:57 - 2016-08-31 18:55 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2016-10-17 11:57 - 2016-08-31 18:55 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2016-10-17 11:57 - 2016-08-31 18:55 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-10-10 09:10 - 2013-01-22 13:40 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2016-10-10 09:10 - 2013-04-02 12:41 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2016-10-10 09:10 - 2013-05-07 10:16 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2016-10-10 09:10 - 2013-05-07 10:16 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2016-10-10 09:12 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1040309402-2405870343-1871077889-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stean\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{55FFB602-0ED9-48C0-94E8-F4BEF4678ABC}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10g\FAXRX.exe
FirewallRules: [{0648DE94-A16F-40EA-A95C-CA5073AAB1B3}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10g\FAXRX.exe
FirewallRules: [{46BB09F2-78CF-4452-902C-DDCD9969E155}] => (Allow) LPort=54925
FirewallRules: [{DF11450F-1204-4F3B-B4A6-0CD1BFD0D36A}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{587A1552-E129-4598-9150-C56EFFA8311B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{28D4CB01-EAFA-4A48-AEF3-308FEE1877DB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{F75DBDA5-A1C6-4F42-A840-81FC72C28B95}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{FF02CF72-BEE2-41CD-9C7C-0F2750143C7B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9A9DCE2A-BC80-4D2C-9D40-9A957BB0C54D}] => (Allow) C:\Users\Stean\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{57830F0B-CA31-44DC-A852-09B118F78EC5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

04-11-2016 16:19:53 Sprachpaketdeinstallation
04-11-2016 18:00:57 Windows Defender Checkpoint
04-11-2016 18:14:22 Removed HTC Driver Installer.
04-11-2016 18:16:02 Removed IPTInstaller
04-11-2016 20:08:50 Removed Apple Application Support (64-Bit)
04-11-2016 20:09:21 Removed iTunes
04-11-2016 20:09:59 Removed Bonjour
04-11-2016 20:10:09 Removed Apple Software Update
04-11-2016 20:10:20 Removed Apple Mobile Device Support
04-11-2016 20:10:29 Removed Apple Application Support (32-Bit)
04-11-2016 20:12:58 Windows Update
04-11-2016 20:20:21 Windows Update
04-11-2016 20:20:46 Windows Update
05-11-2016 12:04:25 Windows Update
05-11-2016 13:16:52 Windows Update
05-11-2016 13:49:05 Microsoft Visual C++ 2005 Redistributable wird entfernt
05-11-2016 13:49:23 Microsoft Visual C++ 2005 Redistributable (x64) wird entfernt
05-11-2016 15:12:17 Windows Update
06-11-2016 18:52:51 Windows Defender Checkpoint

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/06/2016 06:52:51 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e6c8f187-d389-4a62-8a4e-0dcde0882b44}

Error: (11/06/2016 06:41:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/05/2016 12:48:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/05/2016 12:10:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/05/2016 11:17:14 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/05/2016 10:51:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/05/2016 10:38:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/04/2016 08:17:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/04/2016 08:09:16 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Stean-PC)
Description: Die Anwendung oder der Dienst "Apple Mobile Device Service" konnte nicht neu gestartet werden.

Error: (11/04/2016 07:06:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.


Systemfehler:
=============
Error: (11/05/2016 03:12:26 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3075226)

Error: (11/05/2016 03:12:26 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3126446)

Error: (11/05/2016 03:12:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3020388)

Error: (11/05/2016 01:17:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3075226)

Error: (11/05/2016 01:17:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3126446)

Error: (11/05/2016 01:17:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB3020388)

Error: (11/05/2016 12:46:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/05/2016 12:46:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/05/2016 12:46:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/05/2016 12:46:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrYNSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-10-10 09:58:20.610
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-10-10 09:58:20.609
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-10-10 09:58:20.607
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-10-10 09:58:20.605
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 28%
Installierter physikalischer RAM: 8104.67 MB
Verfügbarer physikalischer RAM: 5790.23 MB
Summe virtueller Speicher: 16207.52 MB
Verfügbarer virtueller Speicher: 13684.66 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.47 GB) (Free:179.31 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 9C898434)
Partition 1: (Active) - (Size=238.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Weil es zu lang war musste ich es splitten.

Habe es einmal doppelt gepostet also die ersten 3 Dateien sind FRST.txt und die die letze ist Addtion.txt

M-K-D-B · 06.11.2016, 21:21

Servus,

Logdateien sehen für mich soweit gut aus, ich vermute es handelt sich um einen Fehlalarm von WindowsDefender.

In einem anderen Thema wurde "Vulkan Run Time" von WindowsDefender bemängelt. Du hast das ja auch installiert. Ist aber meiner Meinung nach ok.

Windows Defender mal updaten, evtl. ist damit das Problem dann behoben.

Sonst noch Probleme?
Sollen wir ein paar Tools zur Kontrolle laufen lassen?

bato96 · 07.11.2016, 13:31

Hallo,

danke für die schnelle Antwort.

Leider hat das Updaten auch nichts gebracht. Da steht Es sind keine neuen Updates verfügbar.

Soll ich das Vulkan Run Time deinstallieren? Oder bringt mir das nichts ?

Das nervt halt wenn alle paar Sekunden diese Meldung Potenziell gefährliche Software erkannt in der Taskleiste erscheint.

Wenn du mir weiterhelfen kannst würde das mich freuen.

Danke

M-K-D-B · 07.11.2016, 16:39

Servus,

"Vulkan Run Time" wird halt als Schnittstelle zwischen Graka und Computerspiel benötigt. Evtl. gibts dann Performanceprobleme bei Spielen.

Mach mal nochmal ein Update für WD, sollte doch mittlerweile behoben sein.

Sollen wir noch Kontrollen durchführen?

bato96 · 07.11.2016, 17:17

Hallo,

gibt es die möglichkeit den WD manuell zu updaten.
Habe es paar mal versucht jedoch wie vorher steht da keine neuen updates.

Was für Kontrollen meinst du ?

Danke

M-K-D-B · 07.11.2016, 17:43

Servus,

man bin ich blöd...

Du hast ja Kaspersky installiert, da solltest du WindowsDefender/Microsoft Security Essentials sowie deaktivieren.

Naja, wir könnten halt ein paar Tools drüberjagen und schauen, ob alles passt.

bato96 · 08.11.2016, 14:18

Servus,

also da es jetzt ein Fehlalarm ist, ist das ja schon mal gut .
Und du meinst ich soll WD und Microsoft Securiy Essentials deaktivieren? Da ich ja Kaspersky habe.

Vielen Dank für deine super Unterstützung und deine Hilfe

!

Gruß

M-K-D-B · 08.11.2016, 17:08

Servus,

ja, Kaspersky deaktivieren.

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Cleanup:
Alle Logs gepostet? Dann lade Dir bitte

DelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	Microsoft Security Essentials	ESET

Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:

Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.

NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie

.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...

und/oder das Forum mit einer kleinen Spende unterstützen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

M-K-D-B · 11.11.2016, 21:19

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

07.11.2016, 16:39	#8
M-K-D-B /// TB-Ausbilder	BrowserModifier: Win32/SupTab!blnk Servus, "Vulkan Run Time" wird halt als Schnittstelle zwischen Graka und Computerspiel benötigt. Evtl. gibts dann Performanceprobleme bei Spielen. Mach mal nochmal ein Update für WD, sollte doch mittlerweile behoben sein. Sollen wir noch Kontrollen durchführen?

07.11.2016, 17:43	#10
M-K-D-B /// TB-Ausbilder	BrowserModifier: Win32/SupTab!blnk Servus, man bin ich blöd... Du hast ja Kaspersky installiert, da solltest du WindowsDefender/Microsoft Security Essentials sowie deaktivieren. Naja, wir könnten halt ein paar Tools drüberjagen und schauen, ob alles passt.

BrowserModifier: Win32/SupTab!blnk

Log-Analyse und Auswertung: BrowserModifier: Win32/SupTab!blnk