windows 7 startet nicht, Fehlerdiagnose: corruptFile

Worker · 08.11.2016, 13:16

Hallo zusammen,
seit Sonntag habe ich folgendes Problem mit meinem Probook von HP. Wenn ich den Laptop hochfahren möchte, erscheint erst "Windows wird gestartet." Allerdings wird hier schon nicht das gewohnte Standardbild angezeigt. Bei längerem warten, erscheint im unterem Teil des Bildschirms eine graue Ladeleiste und dadrüber steht "Windows lädt Dateien..." Wenn diese voll geladen ist, werde ich zur Systemreparatur weitergeleitet, wobei die nach einem Scan die Info gibt, dass die Starthilfe diesen Computer nicht automatisch reparieren kann. Wenn man sich die Problemdetails anzeigen lässt steht dort folgenes:

Problemsignatur:
Prolemereignisname: StartupRepairOffline
Problemsignatur01: 6.1.7600.16385
Problemsignatur02: 6.1.7600.16385
Problemsignatur03: unkown
Problemsignatur04: 21199384
Problemsignatur05: AutoFailover
Problemsignatur06: 12
Problemsignatur07: CorruptFile
Betriebsystemversion: 6.1.7601.2.1.0.256.1
Gebietsschema-ID: 1033

Der Scan mit dem Farbar Recovery Scan Tool brachte mir dieses Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016
Ran by SYSTEM on MININT-CGSBQET (08-11-2016 12:27:38)
Running from H:\
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Englisch (USA)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

ATTENTION: Software hive is not loaded.
GroupPolicy: Restriction <======= ATTENTION

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-06-28] (Windows (R) Win 7 DDK provider)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-13] (AVAST Software)
S2 CreoService; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [1366488 2013-08-22] (CryptoMill Technologies Ltd.)
S2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2013-08-07] ()
S2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-07-15] (CyberLink)
S2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-07-15] (CyberLink)
S2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2013-08-05] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [558392 2013-08-06] (Hewlett-Packard Company)
S2 FortiSslvpnDaemon; C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe [1003232 2014-10-15] (Fortinet Inc.)
S2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-15] (Hewlett-Packard Company)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-14] (HP Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [14696 2013-07-30] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344184 2016-04-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-26] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-11-12] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-11-12] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-11-10] (Lenovo)
S2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1719040 2016-08-10] (PDF Complete Inc)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-06-28] (Atheros)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-07-13] (AVAST Software)
S1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-07-13] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-07-13] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-07-13] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-07-13] (AVAST Software)
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-07-13] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-07-13] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-06] (AVAST Software)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-06-28] (Qualcomm Atheros)
S1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-26] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-06-13] (Hewlett-Packard Company)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-07-30] (Intel Corporation)
S3 IceKore; C:\Windows\System32\DRIVERS\IceKore.sys [397784 2013-08-19] (CryptoMill Technologies Inc.)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2013-06-28] (Atheros)
S3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-11-12] (Intel Corporation)
S0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-12-05] (WinMagic Inc.)
S3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-08-13] (Realsil Semiconductor Corporation)
S0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-12-05] (WinMagic Inc.)
S0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-12-05] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-19] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [34544 2013-08-19] (Synaptics Incorporated)
S3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1513208 2016-04-03] (Sunplus)
S3 srv; C:\Windows\System32\DRIVERS\srv.sys [464896 2016-08-12] ()
S3 aswHdsKe; \??\C:\Windows\system32\drivers\aswHdsKe.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-08 12:22 - 2016-11-08 12:27 - 00000000 ____D C:\FRST
2016-11-02 14:13 - 2016-11-02 14:13 - 00000000 ____D C:\Users\User\Documents\ole
2016-10-22 06:16 - 2016-10-22 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-14 09:35 - 2016-08-29 07:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2016-10-14 09:35 - 2016-08-29 07:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2016-10-14 09:35 - 2016-08-29 07:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2016-10-14 09:35 - 2016-08-29 07:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-10-14 09:35 - 2016-08-29 07:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-10-14 09:35 - 2016-08-29 07:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-10-14 09:35 - 2016-08-29 07:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-10-14 09:35 - 2016-08-29 06:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-10-14 09:33 - 2016-10-14 09:33 - 00000000 ____D C:\1d6533ad79e73950a76650cf07f7
2016-10-12 08:35 - 2016-09-30 12:13 - 00394448 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2016-10-12 08:35 - 2016-09-30 11:28 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-10-12 08:35 - 2016-09-30 07:37 - 05548264 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2016-10-12 08:35 - 2016-09-30 07:20 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-10-12 08:35 - 2016-09-30 07:20 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-10-12 08:35 - 2016-09-29 23:55 - 25765376 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2016-10-12 08:35 - 2016-09-29 22:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2016-10-12 08:35 - 2016-09-29 22:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2016-10-12 08:35 - 2016-09-29 22:26 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2016-10-12 08:35 - 2016-09-29 22:25 - 02895360 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2016-10-12 08:35 - 2016-09-29 22:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2016-10-12 08:35 - 2016-09-29 22:25 - 00417792 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2016-10-12 08:35 - 2016-09-29 22:25 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2016-10-12 08:35 - 2016-09-29 22:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2016-10-12 08:35 - 2016-09-29 22:18 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2016-10-12 08:35 - 2016-09-29 22:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2016-10-12 08:35 - 2016-09-29 22:14 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2016-10-12 08:35 - 2016-09-29 22:13 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2016-10-12 08:35 - 2016-09-29 22:13 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2016-10-12 08:35 - 2016-09-29 22:12 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2016-10-12 08:35 - 2016-09-29 22:12 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2016-10-12 08:35 - 2016-09-29 22:09 - 06048256 _____ C:\Windows\System32\jscript9.dll
2016-10-12 08:35 - 2016-09-29 22:05 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2016-10-12 08:35 - 2016-09-29 22:02 - 00489984 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2016-10-12 08:35 - 2016-09-29 21:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2016-10-12 08:35 - 2016-09-29 21:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-10-12 08:35 - 2016-09-29 21:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2016-10-12 08:35 - 2016-09-29 21:51 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2016-10-12 08:35 - 2016-09-29 21:50 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2016-10-12 08:35 - 2016-09-29 21:47 - 20306944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-10-12 08:35 - 2016-09-29 21:47 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2016-10-12 08:35 - 2016-09-29 21:46 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2016-10-12 08:35 - 2016-09-29 21:42 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-10-12 08:35 - 2016-09-29 21:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-10-12 08:35 - 2016-09-29 21:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-10-12 08:35 - 2016-09-29 21:42 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-10-12 08:35 - 2016-09-29 21:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-10-12 08:35 - 2016-09-29 21:38 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-10-12 08:35 - 2016-09-29 21:36 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-10-12 08:35 - 2016-09-29 21:35 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2016-10-12 08:35 - 2016-09-29 21:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-10-12 08:35 - 2016-09-29 21:33 - 00724992 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2016-10-12 08:35 - 2016-09-29 21:33 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-10-12 08:35 - 2016-09-29 21:32 - 00806912 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2016-10-12 08:35 - 2016-09-29 21:32 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-10-12 08:35 - 2016-09-29 21:32 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-10-12 08:35 - 2016-09-29 21:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-10-12 08:35 - 2016-09-29 21:31 - 02131456 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2016-10-12 08:35 - 2016-09-29 21:31 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2016-10-12 08:35 - 2016-09-29 21:24 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-10-12 08:35 - 2016-09-29 21:21 - 15257088 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2016-10-12 08:35 - 2016-09-29 21:19 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-10-12 08:35 - 2016-09-29 21:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-10-12 08:35 - 2016-09-29 21:17 - 02920960 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2016-10-12 08:35 - 2016-09-29 21:17 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-10-12 08:35 - 2016-09-29 21:15 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-10-12 08:35 - 2016-09-29 21:14 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-10-12 08:35 - 2016-09-29 21:13 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-10-12 08:35 - 2016-09-29 21:12 - 04608512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-10-12 08:35 - 2016-09-29 21:07 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-10-12 08:35 - 2016-09-29 21:05 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-10-12 08:35 - 2016-09-29 21:05 - 01544192 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2016-10-12 08:35 - 2016-09-29 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-10-12 08:35 - 2016-09-29 21:05 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-10-12 08:35 - 2016-09-29 21:03 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-10-12 08:35 - 2016-09-29 20:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2016-10-12 08:35 - 2016-09-29 20:46 - 02444288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-10-12 08:35 - 2016-09-29 20:43 - 01312768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-10-12 08:35 - 2016-09-29 20:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-10-12 08:35 - 2016-09-15 07:30 - 00976896 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2016-10-12 08:35 - 2016-09-15 07:30 - 00084480 _____ (Microsoft Corporation) C:\Windows\System32\INETRES.dll
2016-10-12 08:35 - 2016-09-15 07:15 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-10-12 08:35 - 2016-09-15 07:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-10-12 08:35 - 2016-09-12 13:13 - 00154856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2016-10-12 08:35 - 2016-09-12 13:13 - 00095464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2016-10-12 08:35 - 2016-09-12 13:08 - 01465344 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 01212928 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00730624 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00345600 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00316416 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00312320 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00210432 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00190464 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\adsmsext.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2016-10-12 08:35 - 2016-09-12 13:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00146432 _____ C:\Windows\SysWOW64\msaudite.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-10-12 08:35 - 2016-09-12 12:49 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-10-12 08:35 - 2016-09-12 12:39 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2016-10-12 08:35 - 2016-09-12 12:37 - 03218944 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2016-10-12 08:35 - 2016-09-12 12:32 - 00291328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2016-10-12 08:35 - 2016-09-12 12:32 - 00159744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2016-10-12 08:35 - 2016-09-12 12:32 - 00129536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2016-10-12 08:35 - 2016-09-12 12:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2016-10-12 08:35 - 2016-09-12 12:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-10-12 08:35 - 2016-09-12 12:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-10-12 08:35 - 2016-09-12 11:08 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-12 08:35 - 2016-09-12 10:43 - 01648128 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2016-10-12 08:35 - 2016-09-12 10:43 - 01180160 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2016-10-12 08:35 - 2016-09-10 08:19 - 03649536 _____ (Microsoft Corporation) C:\Windows\System32\MSVidCtl.dll
2016-10-12 08:35 - 2016-09-10 07:53 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-10-12 08:35 - 2016-09-09 10:29 - 00631176 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2016-10-12 08:35 - 2016-09-09 10:26 - 00706280 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2016-10-12 08:35 - 2016-09-09 10:23 - 01732864 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00880640 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00419840 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00215552 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00059904 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00034816 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 10:01 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-10-12 08:35 - 2016-09-09 10:00 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-10-12 08:35 - 2016-09-09 10:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-10-12 08:35 - 2016-09-09 10:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-10-12 08:35 - 2016-09-09 10:00 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:51 - 00148480 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe
2016-10-12 08:35 - 2016-09-09 09:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys
2016-10-12 08:35 - 2016-09-09 09:51 - 00017920 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe
2016-10-12 08:35 - 2016-09-09 09:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2016-10-12 08:35 - 2016-09-09 09:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2016-10-12 08:35 - 2016-09-09 09:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2016-10-12 08:35 - 2016-09-09 09:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-10-12 08:35 - 2016-09-09 09:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-10-12 08:35 - 2016-09-09 09:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-10-12 08:35 - 2016-09-09 09:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-10-12 08:35 - 2016-09-09 09:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-10-12 08:35 - 2016-09-09 09:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-10-12 08:35 - 2016-09-08 12:34 - 00263680 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2016-10-12 08:35 - 2016-09-08 12:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-10-12 08:35 - 2016-09-08 12:34 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2016-10-12 08:35 - 2016-09-08 12:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-10-12 08:35 - 2016-09-08 06:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2016-10-12 08:35 - 2016-09-08 06:55 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dfsc.sys
2016-10-12 08:35 - 2016-08-12 09:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll
2016-10-12 08:35 - 2016-08-12 09:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\System32\wmploc.DLL
2016-10-12 08:35 - 2016-08-12 09:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\spwmp.dll
2016-10-12 08:35 - 2016-08-12 09:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\msdxm.ocx
2016-10-12 08:35 - 2016-08-12 09:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\dxmasf.dll
2016-10-12 08:35 - 2016-08-12 08:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-10-12 08:35 - 2016-08-12 08:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-10-12 08:35 - 2016-08-12 08:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-10-12 08:35 - 2016-08-12 08:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-10-12 08:35 - 2016-08-12 08:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-10-12 08:35 - 2016-08-12 08:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\System32\WsmSvc.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\System32\WSManMigrationPlugin.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\System32\WsmWmiPl.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\System32\WsmAuto.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\System32\WsmRes.dll
2016-10-12 08:35 - 2016-08-06 07:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\wsmplpxy.dll
2016-10-12 08:35 - 2016-08-06 07:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-10-12 08:35 - 2016-08-06 07:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-10-12 08:35 - 2016-08-06 07:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-10-12 08:35 - 2016-08-06 07:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-10-12 08:35 - 2016-08-06 07:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-10-12 08:35 - 2016-08-06 07:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\System32\WSManHTTPConfig.exe
2016-10-12 08:35 - 2016-08-06 07:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\wsmprovhost.exe
2016-10-12 08:35 - 2016-08-06 06:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-10-12 08:35 - 2016-08-06 06:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-10-12 08:35 - 2016-08-06 06:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-10-12 08:35 - 2016-06-14 09:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mountmgr.sys
2016-10-12 08:35 - 2016-06-14 09:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\System32\mf.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 01573888 _____ (Microsoft Corporation) C:\Windows\System32\quartz.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 01483264 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\System32\drmv2clt.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\System32\cryptui.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\System32\blackbox.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\System32\wmdrmsdk.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\System32\msscp.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\System32\evr.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\System32\drmmgrtn.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\System32\msnetobj.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\System32\mfps.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\System32\pcasvc.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00141824 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\System32\cryptsp.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\pcadm.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\msmmsp.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\System32\pcaevts.dll
2016-10-12 08:35 - 2016-06-14 09:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\mferror.dll
2016-10-12 08:35 - 2016-06-14 09:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys
2016-10-12 08:35 - 2016-06-14 07:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-10-12 08:35 - 2016-06-14 07:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-10-12 08:35 - 2016-06-14 07:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe
2016-10-12 08:35 - 2016-06-14 07:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe
2016-10-12 08:35 - 2016-06-14 07:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\mfpmp.exe
2016-10-12 08:35 - 2016-06-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-10-12 08:35 - 2016-06-14 07:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-10-12 08:35 - 2016-06-14 07:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\pcawrk.exe
2016-10-12 08:35 - 2016-06-14 07:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\pcalua.exe
2016-10-12 08:33 - 2016-08-16 12:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2016-10-12 08:33 - 2016-08-16 12:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2016-10-12 08:27 - 2016-09-12 13:17 - 00077032 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
2016-10-12 08:27 - 2016-09-12 13:08 - 01226752 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 01629184 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00586752 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00575488 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00314368 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00273408 _____ (Microsoft Corporation) C:\Windows\System32\centel.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00224256 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2016-10-12 08:27 - 2016-09-09 07:54 - 00129024 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll
2016-10-12 08:25 - 2016-07-22 06:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2016-10-12 08:25 - 2016-07-22 06:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-06 10:08 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\tracing
2016-11-06 09:42 - 2014-12-14 14:31 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-06 09:25 - 2013-09-13 11:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-06 09:04 - 2009-07-13 20:45 - 00037408 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-06 09:04 - 2009-07-13 20:45 - 00037408 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-06 08:58 - 2014-06-18 02:02 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{79B93CD6-ECF0-4B03-B8D8-302EFCD01C9F}
2016-11-06 08:58 - 2013-11-08 06:29 - 00700380 _____ C:\Windows\System32\perfh007.dat
2016-11-06 08:58 - 2013-11-08 06:29 - 00149986 _____ C:\Windows\System32\perfc007.dat
2016-11-06 08:58 - 2009-07-13 21:13 - 01622706 _____ C:\Windows\System32\PerfStringBackup.INI
2016-11-06 08:58 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\inf
2016-11-06 08:52 - 2014-12-14 14:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-06 08:52 - 2013-09-13 11:02 - 00000000 ____D C:\ProgramData\PDFC
2016-11-06 08:52 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-03 05:56 - 2015-09-18 07:13 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-03 05:22 - 2014-06-18 02:03 - 00000000 ____D C:\Users\User\Documents\Bluetooth Folder
2016-11-03 05:19 - 2014-06-18 06:15 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-03 05:10 - 2016-06-16 06:46 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleForUser.job
2016-11-03 05:10 - 2013-11-08 06:23 - 00000225 _____ C:\Windows\CryptoMill_CreoService.001
2016-11-02 14:11 - 2014-06-18 02:03 - 00000000 ____D C:\Users\User\AppData\Local\PDFC
2016-11-02 13:09 - 2016-06-16 06:46 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUser
2016-11-02 12:33 - 2013-11-08 06:23 - 00000225 _____ C:\Windows\CryptoMill_CreoService.002
2016-10-26 11:25 - 2014-06-30 11:23 - 00000000 ____D C:\Windows\System32\Macromed
2016-10-26 11:25 - 2013-09-13 11:02 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-26 11:25 - 2013-09-13 11:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-26 11:25 - 2013-09-13 11:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-26 11:25 - 2013-09-13 11:02 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-26 08:29 - 2010-11-20 19:27 - 00485032 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
2016-10-26 07:54 - 2013-11-08 06:23 - 00000225 _____ C:\Windows\CryptoMill_CreoService.003
2016-10-25 10:07 - 2013-11-08 06:23 - 00000225 _____ C:\Windows\CryptoMill_CreoService.004
2016-10-24 04:14 - 2013-11-08 06:23 - 00000225 _____ C:\Windows\CryptoMill_CreoService.005
2016-10-23 11:06 - 2014-06-18 06:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-22 05:46 - 2014-07-10 00:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2016-10-22 05:45 - 2013-11-08 06:07 - 00000000 ____D C:\ProgramData\Skype
2016-10-17 08:45 - 2016-06-14 08:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-10-17 08:27 - 2009-07-13 21:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-10-17 08:23 - 2009-07-13 20:45 - 00307728 _____ C:\Windows\System32\FNTCACHE.DAT
2016-10-17 08:22 - 2014-06-18 06:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-17 08:22 - 2014-06-18 06:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-16 13:32 - 2014-12-14 15:45 - 00000000 ____D C:\Windows\System32\appraiser
2016-10-16 13:32 - 2014-06-18 05:28 - 00000000 ___SD C:\Windows\System32\CompatTel
2016-10-16 13:32 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-10-16 13:32 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\Dism
2016-10-16 12:23 - 2014-06-18 04:11 - 00000000 ____D C:\Windows\System32\MRT
2016-10-16 12:12 - 2014-06-18 04:10 - 143495576 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe

Some files in TEMP:
====================
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\BackupSetup.exe
C:\Users\User\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\User\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\User\AppData\Local\Temp\eauninstall.exe
C:\Users\User\AppData\Local\Temp\EBU7F3D.EXE
C:\Users\User\AppData\Local\Temp\EBU845B.EXE
C:\Users\User\AppData\Local\Temp\EBU8E89.DLL
C:\Users\User\AppData\Local\Temp\EBU9175.DLL
C:\Users\User\AppData\Local\Temp\EBUA267.EXE
C:\Users\User\AppData\Local\Temp\EBUBA59.DLL
C:\Users\User\AppData\Local\Temp\Extract.exe
C:\Users\User\AppData\Local\Temp\HPSFUpdater.exe
C:\Users\User\AppData\Local\Temp\ICReinstall_winzip18-mediafire.exe
C:\Users\User\AppData\Local\Temp\jlkb7ayp.dll
C:\Users\User\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\pix0u6gb.dll
C:\Users\User\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\User\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\User\AppData\Local\Temp\setup.exe
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\SP63598.exe
C:\Users\User\AppData\Local\Temp\SP63852.exe
C:\Users\User\AppData\Local\Temp\sp64126.exe
C:\Users\User\AppData\Local\Temp\SP64170.exe
C:\Users\User\AppData\Local\Temp\SP64284.exe
C:\Users\User\AppData\Local\Temp\SP64639.exe
C:\Users\User\AppData\Local\Temp\SP64676.exe
C:\Users\User\AppData\Local\Temp\SP64934.exe
C:\Users\User\AppData\Local\Temp\SP65246.exe
C:\Users\User\AppData\Local\Temp\SP66562.exe
C:\Users\User\AppData\Local\Temp\SP66854.exe
C:\Users\User\AppData\Local\Temp\SP67047.exe
C:\Users\User\AppData\Local\Temp\SP69840.exe
C:\Users\User\AppData\Local\Temp\SP70378.exe
C:\Users\User\AppData\Local\Temp\SP70455.exe
C:\Users\User\AppData\Local\Temp\SP70859.exe
C:\Users\User\AppData\Local\Temp\SP71151.exe
C:\Users\User\AppData\Local\Temp\The Battle for Middle-earth_uninst.exe
C:\Users\User\AppData\Local\Temp\tmd_34016243.exe
C:\Users\User\AppData\Local\Temp\UninstallHPSA.exe


==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2016-10-14 09:35] - [2016-08-29 07:04] - 3229696 ____A (Microsoft Corporation) 38AE1B3C38FAEF56FE4907922F0385BA

C:\Windows\SysWOW64\explorer.exe
[2016-10-14 09:35] - [2016-08-29 06:55] - 2972672 ____A (Microsoft Corporation) 6DDCA324434FFA506CF7DC4E51DB7935

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2016-09-21 00:35] - [2016-08-16 09:36] - 1009152 ____A (Microsoft Corporation) 8F4B991E7837E8E0F90C856659456652

C:\Windows\SysWOW64\User32.dll
[2016-09-21 00:35] - [2016-08-15 18:48] - 0833024 ____A (Microsoft Corporation) 0FBC0E335B65EE5A0175631237817510

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 3977.11 MB
Available physical RAM: 3093.01 MB
Total Virtual: 3975.31 MB
Available Virtual: 3071.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.65 GB) (Free:186.22 GB) NTFS
Drive e: (HP_RECOVERY) (Fixed) (Total:12.1 GB) (Free:1.31 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.96 GB) FAT32
Drive h: () (Removable) (Total:29.1 GB) (Free:29.09 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.12 GB) (Free:0.12 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:1 GB) (Free:0.62 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 618D8341)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

========================================================
Disk: 1 (Size: 29.1 GB) (Disk ID: DACBC132)
Partition 1: (Not Active) - (Size=29.1 GB) - (Type=0C)


LastRegBack: 2016-07-10 09:37

==================== End of FRST.txt ============================

--- --- ---
Ich hoffe, dass mir jemand helfen kann. Schon einmal danke im voraus.

cosinus · 08.11.2016, 13:26

Von W7-DVD booten und eine Systemstartreparatur durchführen.
Vorher möchtest du deine Daten auf eine externe Platte sichern zB über ein Rettungssystem wie zB Ubuntu MATE im Ausprobiermodus.

Es kann sein, dass man diese W7-Installation nicht mehr retten kann und eine Neuinstallation notwendig ist.

Worker · 08.11.2016, 13:57

wie genau soll die Datenspeicherung mit einer externen Platte aussehen? Leider bin ich in dem gebiet ziemlich unerfahren und weis nicht wie ich das Problem angehen soll

cosinus · 08.11.2016, 14:16

Wenn du schon nicht weißt, wie man Dateien von A nach B kopiert, wie willst du dann dein W7 reparieren

Da du wo wenig Erfahrung hast solltest du dir lieber jmd vor Ort herholen, Hilfe per Board ist nicht immer laientauglich!

Bootsektor · 08.11.2016, 19:27

Ach Arne...

vll. kann der User ja einfach mal chksdsk laufen lassen, von aussen.

felix1 · 08.11.2016, 19:47

Zitat:

Zitat von Bootsektor

Ach Arne...

vll. kann der User ja einfach mal chksdsk laufen lassen, von aussen.

Ich würde hier doch erst mal wichtige Daten sichern, bevor rumgedoktert wird.
Für eine Reparatur hier mal eine Anleitung.

cosinus · 08.11.2016, 21:59

Zitat:

Zitat von Bootsektor

Ach Arne...

vll. kann der User ja einfach mal chksdsk laufen lassen, von aussen.

Kannst dann nicht wenigstens gleich ne Anleitung dazu posten

Wofür ist eigentlich die Windows-DVD gut. Ist Windows vom Setup heraus nicht mal Stande inkonsistente NTFS-Volumes zu erkennen und zu reparieren?

Bootsektor · 08.11.2016, 23:24

Geht denn der abgesicherte Modus noch?

cosinus · 09.11.2016, 00:34

Anleitungen Sandra, Anleitung!!!

Abgesicherter Modus zur Bereinigung

Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:

08.11.2016, 14:16	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Lösung: windows 7 startet nicht, Fehlerdiagnose: corruptFile Wenn du schon nicht weißt, wie man Dateien von A nach B kopiert, wie willst du dann dein W7 reparieren Da du wo wenig Erfahrung hast solltest du dir lieber jmd vor Ort herholen, Hilfe per Board ist nicht immer laientauglich! __________________ Logfiles bitte immer in CODE-Tags posten

08.11.2016, 19:27	#5
Bootsektor Ruhe in Frieden † 2019	Wie windows 7 startet nicht, Fehlerdiagnose: corruptFile Ach Arne... vll. kann der User ja einfach mal chksdsk laufen lassen, von aussen. __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

08.11.2016, 23:24	#8
Bootsektor Ruhe in Frieden † 2019	windows 7 startet nicht, Fehlerdiagnose: corruptFile Geht denn der abgesicherte Modus noch? __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

09.11.2016, 00:34	#9
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	windows 7 startet nicht, Fehlerdiagnose: corruptFile Anleitungen Sandra, Anleitung!!! Abgesicherter Modus zur Bereinigung Windows mit F8-Taste beim Start in den abgesicherten Modus bringen. Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern: __________________ Logfiles bitte immer in CODE-Tags posten

windows 7 startet nicht, Fehlerdiagnose: corruptFile

Alles rund um Windows: windows 7 startet nicht, Fehlerdiagnose: corruptFile

Problem: windows 7 startet nicht, Fehlerdiagnose: corruptFile