|
Plagegeister aller Art und deren Bekämpfung: Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.02.2017, 20:49 | #1 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Hallo, ich bin neu hier und muss leider zugeben, dass ich von der ganzen Materie wenig Ahnung habe. Mein Problem ist wie folgt: Seit kurzem öffnet Google Chrome ständig von alleine neue Tabs..meist ist es Spielewerbung, und sehr oft "Reimage Repair". Oft öffnet Chrome dann gleich mehrere neue Tabs wenn ich auf der ursprünglichen webpage auf der ich war irgendetwas anklicke. ...ich muss so gut wie immer alles doppelt, wenn nicht sogar dreifach anklicken, weil sich irgendetwas unerwünschtes öffnet. Auch sind auf fast allen Seiten irgendwelche Worte mit einer Verlinkung unterlegt. Trotz AdBlocker wird auch so gut wie überall nervige PopUp Werbung eingeblendet. Mein Avira hat leider nicht gefunden und auch Avast Browser Cleanup konnte mir nicht helfen. Mir ist aufgefallen, dass der User LeticiaTerez am 25.02.2016 genau das gleiche Problem in einem Thread gepostet hat. (http://www.trojaner-board.de/176377-...adblocker.html). Kann ich nun einfach der damals beschriebenen Vorgehensweise folgen oder kann das zu Problemen führen? Vorab schon vielen Dank für eure Hilfe. Beste Grüße Felix |
12.02.2017, 21:34 | #2 |
/// TB-Ausbilder | Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker)Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags: So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Zur ersten Analyse bitte FRST und TDSS-Killer ausführen: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt 2 Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
12.02.2017, 22:43 | #3 |
| FRST und TDSSKiller Hallo Matthias,
__________________danke für deine Hilfe. Ich muss leider selbst die einzelnen Logs aufteilen, da sie so lang sind. FRST Part 1 Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2017 durchgeführt von Felix (Administrator) auf IDEA-PC (12-02-2017 22:09:24) Gestartet von C:\Users\Felix\Desktop Geladene Profile: Felix (Verfügbare Profile: UpdatusUser & Felix) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe (Spotify Ltd) C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Suunto) C:\Users\Felix\AppData\Local\Apps\2.0\6AO9PYBW.MNP\LNO9QCND.KAL\move..tion_391e8feca7b0cf78_0001.0004_6f8afc924d2bed6c\Moveslink2.exe (Nico Mak Computing) C:\Program Files\WinZip\FAHWindow64.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Dropbox, Inc.) C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (AVAST Software) C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\bcusched.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13265480 2013-01-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1273416 2013-01-15] (Realtek Semiconductor) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-07-03] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-07-03] (Lenovo(beijing) Limited) HKLM\...\Run: [BCSSync] => D:\Programme\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-09-29] (Copyright 2013 SAMSUNG) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-12-06] (Synaptics Incorporated) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro) HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE HKLM-x32\...\Run: [Smart Update] => C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe [1706576 2012-08-02] (Lenovo) HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [708496 2015-02-19] (Cisco Systems, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Spotify Web Helper] => C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2344768 2015-11-21] (Spotify Ltd) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Dropbox Update] => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-07] (Dropbox, Inc.) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-11-30] (Google) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Moveslink2] => C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-12-06] ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Motion Control.lnk [2013-07-03] ShortcutTarget: Motion Control.lnk -> C:\Program Files (x86)\Lenovo\MotionControl\MotionControl.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Benachrichtigungsdienst.lnk [2015-12-06] ShortcutTarget: Update Benachrichtigungsdienst.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-12-06] ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.) Startup: C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-02-08] ShortcutTarget: Dropbox.lnk -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{1833352f-fa61-454f-b341-8d0423cc773b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{7dc836cf-237c-445f-9503-b94866736e8b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/ HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com SearchScopes: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> DefaultScope {495008F0-48AF-4DFF-8CA5-B8CDDE6A94A6} URL = SearchScopes: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> {495008F0-48AF-4DFF-8CA5-B8CDDE6A94A6} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programme\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-08] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-08] (Oracle Corporation) BHO-x32: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) FireFox: ======== FF ProfilePath: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default [2017-02-07] FF SelectedSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchUrl: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF Keyword.URL: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF Homepage: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/ FF NewTab: Mozilla\Firefox\Profiles\7wdsyub7.default -> about:newtab FF Extension: (Avira Browser Safety) - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default\Extensions\abs@avira.com [2015-04-08] [ist nicht signiert] FF SearchPlugin: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default\searchplugins\avast-search.xml [2017-02-07] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2014-10-15] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-28] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Programme\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-28] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2012-12-13] (Nitro PDF) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default [2017-02-12] CHR Extension: (Google Präsentationen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05] CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05] CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03] CHR Extension: (Device screens) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckbkecggifaleckpgbldoafpgpfeglim [2017-01-29] CHR Extension: (Google-Suche) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Tabellen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05] CHR Extension: (Avira Browserschutz) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-20] CHR Extension: (Google Docs Offline) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23] CHR Extension: (Citavi Picker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2016-10-05] CHR Extension: (Google Mail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-06] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1078537693-2019248843-686258836-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [Datei ist nicht signiert] S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG) S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert] R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation) R2 irstrtsv; C:\WINDOWS\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo) R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-13] (Nitro PDF Software) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-09-29] (Copyright 2013 SAMSUNG) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-12-06] (Synaptics Incorporated) R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-08-02] (Telefónica I+D) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153904 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2015-12-04] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-05-12] (Avira Operations GmbH & Co. KG) S3 ewusbnet; C:\WINDOWS\system32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.) R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation) R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation) R3 irstrtdv; C:\WINDOWS\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) R3 LAD; C:\WINDOWS\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-12-06] (Synaptics Incorporated) R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\WINDOWS\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-07-21] (Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) R3 XHCIPort; C:\WINDOWS\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-12 22:09 - 2017-02-12 22:10 - 00032584 _____ C:\Users\Felix\Desktop\FRST.txt 2017-02-12 22:07 - 2017-02-12 22:09 - 00000000 ____D C:\FRST 2017-02-12 22:04 - 2017-02-12 22:07 - 02421248 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe 2017-02-12 21:56 - 2017-02-12 21:57 - 00000000 ____D C:\Users\Felix\Desktop\Sonstiges 2017-02-12 21:56 - 2017-02-12 21:56 - 00000000 ___SH C:\DkHyperbootSync 2017-02-12 19:39 - 2016-12-29 14:10 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-02-12 19:34 - 2017-02-12 19:35 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2017-02-08 00:35 - 2017-02-08 00:35 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-02-07 23:29 - 2017-02-07 23:29 - 04284888 _____ (AVAST Software) C:\Users\Felix\Downloads\avast-browser-cleanup-sfx121.exe 2017-02-07 23:29 - 2017-02-07 23:29 - 00004386 _____ C:\WINDOWS\System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00003512 _____ C:\WINDOWS\System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00001201 _____ C:\Users\Felix\Desktop\Avast Browser Cleanup.lnk 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Avast Browser Cleanup 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\AVAST Software 2017-02-07 20:58 - 2017-02-07 21:05 - 00000000 ____D C:\AdwCleaner 2017-02-07 20:48 - 2017-02-07 20:58 - 04015056 _____ C:\Users\Felix\Downloads\adwcleaner_6.043.exe 2017-02-07 20:43 - 2017-02-07 20:47 - 00916922 _____ C:\Users\Felix\Downloads\Nicht bestätigt 586294.crdownload 2017-02-07 20:40 - 2017-02-07 20:40 - 00003396 _____ C:\WINDOWS\System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} 2017-02-07 06:40 - 2017-02-07 06:40 - 00000000 ___HD C:\OneDriveTemp 2017-02-07 06:33 - 2017-02-07 06:33 - 00000085 _____ C:\WINDOWS\wininit.ini 2017-02-06 22:27 - 2017-02-07 06:34 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2017-02-06 22:27 - 2017-02-07 06:33 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2017-02-06 22:27 - 2017-02-06 22:27 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2017-02-06 21:55 - 2017-02-06 21:56 - 01496584 _____ C:\Users\Felix\Downloads\SpyBot Search Destroy - CHIP-Installer.exe 2017-02-04 20:17 - 2017-02-04 20:17 - 00002347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-02-04 20:17 - 2017-02-04 20:17 - 00002335 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-02-04 20:12 - 2017-02-04 20:12 - 01129376 _____ (Google Inc.) C:\Users\Felix\Downloads\ChromeSetup (1).exe 2017-01-29 21:25 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-29 21:25 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-29 18:31 - 2017-02-12 20:17 - 00000000 ____D C:\Users\Felix\AppData\Local\Deployment 2017-01-29 18:24 - 2017-01-30 21:02 - 00000000 ____D C:\Users\Felix\AppData\Local\ConnectedDevicesPlatform 2017-01-29 18:21 - 2017-01-29 18:21 - 00000020 ___SH C:\Users\Felix\ntuser.ini 2017-01-29 18:14 - 2017-01-29 18:14 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-01-29 18:12 - 2017-01-29 18:12 - 00000000 ____D C:\ProgramData\USOShared 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Vorlagen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Startmenü 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagerr.xml 2017-01-29 17:46 - 2017-02-12 19:54 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-01-29 17:46 - 2017-01-29 17:46 - 00003916 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003670 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003648 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core 2017-01-29 17:46 - 2017-01-29 17:46 - 00003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d 2017-01-29 17:46 - 2017-01-29 17:46 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-01-29 17:46 - 2017-01-29 17:46 - 00003324 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1437387024 2017-01-29 17:46 - 2017-01-29 17:46 - 00003296 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1FA74D7C-CE39-44F9-83AC-3C7817F51C3A} 2017-01-29 17:46 - 2017-01-29 17:46 - 00002978 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-01-29 17:46 - 2017-01-29 17:46 - 00002938 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1078537693-2019248843-686258836-1002 2017-01-29 17:46 - 2017-01-29 17:46 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-29 17:46 - 2017-01-29 17:46 - 00002334 _____ C:\WINDOWS\System32\Tasks\MirageAgent 2017-01-29 17:46 - 2017-01-29 17:46 - 00002214 _____ C:\WINDOWS\System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} 2017-01-29 17:46 - 2017-01-29 17:46 - 00001908 _____ C:\WINDOWS\System32\Tasks\Dolby Selector 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero 2017-01-29 17:28 - 2017-01-29 17:28 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2017-01-29 17:18 - 2017-01-29 17:29 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-01-29 17:15 - 2017-02-12 20:17 - 00000000 ____D C:\Users\Felix 2017-01-29 17:15 - 2017-01-29 17:44 - 00000000 ____D C:\Users\UpdatusUser 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Anwendungsdaten 2017-01-29 17:08 - 2017-02-12 19:55 - 00000000 ____D C:\ProgramData\NVIDIA 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\Program Files (x86)\USB Camera 2017-01-29 17:08 - 2016-12-29 14:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00147000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-01-29 17:08 - 2016-12-22 00:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-01-29 17:07 - 2017-02-12 19:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-01-29 17:07 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-01-29 17:06 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files\Intel 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Synaptics 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Realtek 2017-01-29 17:06 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-01-29 17:06 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-01-29 17:04 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-01-29 16:59 - 2017-02-12 21:50 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-01-29 16:59 - 2017-01-29 18:18 - 00337992 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-29 16:59 - 2017-01-29 17:00 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-01-29 16:57 - 2017-01-29 18:06 - 00000000 ___DC C:\WINDOWS\Panther 2017-01-29 16:51 - 2017-02-12 19:34 - 00000000 ____D C:\Windows.old 2017-01-29 16:46 - 2017-01-29 16:46 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2017-01-29 16:46 - 2017-01-29 16:46 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml 2017-01-29 16:46 - 2017-01-29 16:46 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2017-01-29 16:46 - 2017-01-29 16:46 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01220096 _____ (Microsoft Corporation) |
12.02.2017, 22:44 | #4 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) FRST Part 2 Code:
ATTFilter C:\WINDOWS\system32\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\system32\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS 2017-01-29 16:45 - 2017-01-29 16:45 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2017-01-29 16:45 - 2017-01-29 16:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2017-01-29 16:22 - 2017-01-29 16:22 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-01-29 16:15 - 2017-01-29 17:29 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-01-29 16:13 - 2017-01-29 16:13 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll 2017-01-29 16:13 - 2017-01-29 16:13 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2017-01-29 16:13 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-01-29 16:13 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-01-17 21:40 - 2017-01-29 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-01-17 21:40 - 2017-01-17 21:40 - 00000000 ____D C:\Program Files\7-Zip 2017-01-17 21:36 - 2017-01-17 21:39 - 01496584 _____ C:\Users\Felix\Downloads\7 Zip 64 Bit - CHIP-Installer.exe 2017-01-17 05:56 - 2017-01-17 05:56 - 34717624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 28209080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00951224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00904760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00048696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2017-01-17 05:55 - 2017-01-17 05:55 - 02961336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 02594744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01598392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01047096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 00985144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 40134200 _____ C:\WINDOWS\system32\nvcompiler.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 35233336 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-01-17 05:53 - 2017-01-17 05:53 - 11017016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10907368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10453152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09246832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09000336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 08847016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 03509152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00698544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00586784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-01-17 00:59 - 2017-01-17 00:59 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-01-14 18:45 - 2017-01-14 18:45 - 00941917 _____ C:\Users\Felix\Desktop\PDF.pdf 2017-01-14 18:42 - 2017-01-14 18:42 - 00208292 _____ C:\Users\Felix\Desktop\eticket.pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-12 21:59 - 2015-07-20 11:09 - 00000000 ____D C:\Program Files (x86)\Opera 2017-02-12 21:59 - 2015-03-06 21:41 - 00000000 ____D C:\Users\Felix\Desktop\Lisa_Canada_2 2017-02-12 20:18 - 2014-10-08 23:00 - 00000000 ___RD C:\Users\Felix\Dropbox 2017-02-12 20:17 - 2014-11-14 22:41 - 00000000 __SHD C:\Users\Felix\IntelGraphicsProfiles 2017-02-12 20:17 - 2014-10-14 20:05 - 00000000 ___RD C:\Users\Felix\OneDrive 2017-02-12 19:59 - 2016-07-16 23:51 - 00551060 _____ C:\WINDOWS\system32\perfh007.dat 2017-02-12 19:59 - 2016-07-16 23:51 - 00103296 _____ C:\WINDOWS\system32\perfc007.dat 2017-02-12 19:59 - 2015-10-22 14:20 - 01566054 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-12 19:41 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-02-12 19:21 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-12 19:21 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-08 00:35 - 2014-10-08 22:57 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Dropbox 2017-02-07 21:16 - 2014-12-17 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-02-07 21:16 - 2014-10-07 20:39 - 00000000 ____D C:\ProgramData\Package Cache 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\ProgramData\Avira 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\Program Files (x86)\Avira 2017-02-07 21:06 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-07 20:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-07 20:38 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-02-06 22:03 - 2014-10-07 21:39 - 00000000 ____D C:\Felix 2017-02-04 20:17 - 2014-10-07 20:34 - 00000000 ____D C:\Program Files (x86)\Google 2017-01-30 21:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat 2017-01-29 18:46 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Local\Packages 2017-01-29 18:36 - 2015-10-22 15:04 - 00002432 _____ C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-29 18:23 - 2015-09-10 06:37 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-29 18:12 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate 2017-01-29 18:12 - 2014-11-14 22:40 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration 2017-01-29 18:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-01-29 17:46 - 2014-11-14 22:35 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries 2017-01-29 17:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-01-29 17:29 - 2016-07-16 07:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM 2017-01-29 17:29 - 2016-02-28 12:12 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto 2017-01-29 17:29 - 2015-12-06 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2017-01-29 17:29 - 2015-12-06 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2017-01-29 17:29 - 2015-10-30 19:44 - 00000000 ____D C:\WINDOWS\ShellNew 2017-01-29 17:29 - 2015-07-20 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2017-01-29 17:29 - 2015-04-10 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic 2017-01-29 17:29 - 2015-01-15 00:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-01-29 17:29 - 2014-11-27 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-01-29 17:29 - 2014-11-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2017-01-29 17:29 - 2014-10-23 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Benutzerregistrierung 2017-01-29 17:29 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Manual 2017-01-29 17:29 - 2014-10-23 19:58 - 00000000 ____D C:\WINDOWS\system32\STRING 2017-01-29 17:29 - 2014-10-15 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citavi 4 2017-01-29 17:29 - 2014-10-14 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP640 series 2017-01-29 17:29 - 2014-10-08 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-01-29 17:29 - 2013-07-03 11:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Photos 2017-01-29 17:28 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-01-29 17:28 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated 2017-01-29 17:23 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-01-29 17:23 - 2016-07-16 23:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2017-01-29 17:23 - 2014-10-23 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2017-01-29 17:23 - 2013-07-03 10:33 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles 2017-01-29 17:21 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2017-01-29 17:21 - 2014-11-12 00:10 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense 2017-01-29 17:21 - 2014-10-14 19:11 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\InputMethod 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-01-29 17:20 - 2015-07-27 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS 2017-01-29 17:20 - 2015-05-04 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco 2017-01-29 17:20 - 2014-11-26 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\o2 2017-01-29 17:20 - 2014-10-23 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series 2017-01-29 17:20 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2017-01-29 17:20 - 2014-10-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2017-01-29 17:20 - 2014-09-24 08:43 - 00000000 ____D C:\Program Files\Embedded Lockdown Manager 2017-01-29 17:18 - 2013-07-03 10:59 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:17 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:13 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help 2017-01-29 16:57 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing 2017-01-29 16:48 - 2016-07-16 12:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-01-29 16:15 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2017-01-29 15:24 - 2015-06-20 07:45 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job 2017-01-29 14:01 - 2014-10-08 19:26 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2017-01-24 19:24 - 2015-06-20 07:45 - 00001188 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job 2017-01-17 05:52 - 2016-09-12 21:10 - 03972960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-01-15 20:39 - 2014-10-23 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-14 18:42 - 2014-10-23 19:45 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Nitro PDF ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-10-07 20:08 - 2014-10-13 17:37 - 0003372 _____ () C:\Users\Felix\AppData\Roaming\AbsoluteReminder.xml 2015-04-18 19:24 - 2015-04-18 19:24 - 0000889 _____ () C:\Users\Felix\AppData\Local\recently-used.xbel 2013-07-03 10:28 - 2013-07-03 10:28 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-02-08 19:04 ==================== Ende von FRST.txt ============================ |
12.02.2017, 22:46 | #5 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Addition Part: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-02-2017 durchgeführt von Felix (12-02-2017 22:11:16) Gestartet von C:\Users\Felix\Desktop Windows 10 Home Version 1607 (X64) (2017-01-29 17:06:53) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1078537693-2019248843-686258836-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1078537693-2019248843-686258836-503 - Limited - Disabled) Felix (S-1-5-21-1078537693-2019248843-686258836-1002 - Administrator - Enabled) => C:\Users\Felix Gast (S-1-5-21-1078537693-2019248843-686258836-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1078537693-2019248843-686258836-1006 - Limited - Enabled) UpdatusUser (S-1-5-21-1078537693-2019248843-686258836-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avast Browser Cleanup (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Avast Browser Cleanup) (Version: 12.1.2272.125 - AVAST Software) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG) Avira Connect (HKLM-x32\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Avira Connect (x32 Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden Benutzerhandbuch (x32 Version: 1.0.0.9 - Lenovo) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MG4200 series Benutzerregistrierung (HKLM-x32\...\Canon MG4200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon MG4200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4200_series) (Version: 1.01 - Canon Inc.) Canon MG4200 series On-screen Manual (HKLM-x32\...\Canon MG4200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - ) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.07021 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.07021 - Cisco Systems, Inc.) Hidden Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dropbox (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Dropbox) (Version: 19.4.13 - Dropbox, Inc.) Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo) Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden ExpressCache (HKLM\...\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}) (Version: 1.0.86 - Diskeeper Corporation) FUSSBALL MANAGER 08 (HKLM-x32\...\FUSSBALL MANAGER 08) (Version: - Electronic Arts) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.) Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.) Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden HUAWEI DataCard Driver 4.05.00.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.05.00.00 - Huawei technologies Co., Ltd.) Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) WiDi (HKLM\...\{6097158B-0184-4140-BEC3-7885794D2571}) (Version: 3.5.40.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333}) (Version: 1.12.824.1 - Vimicro) Lenovo MediaShow6 (HKLM-x32\...\InstallShield_{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}) (Version: 6.0.4326 - CyberLink Corp.) Lenovo MediaShow6 (x32 Version: 6.0.4326 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden Lenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: 4.8.5 - CEWE COLOR AG u Co. OHG) Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden Lenovo Smart Update (HKLM-x32\...\{29B7C0EB-A1E6-4BC3-8344-70EDE4F189F1}) (Version: 1.6.77 - Lenovo Corporation) Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.) Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) Hidden LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Mobile Connection Manager (HKLM-x32\...\o2DE) (Version: - Mobile Connection Manager) Motion Control (HKLM\...\Motion Control) (Version: 1.1.2.43 - Lenovo) Moveslink2 (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\09caaf8ee8bfbd57) (Version: 1.4.4.199 - Suunto) Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla) Nero BurningROM 2015 (HKLM-x32\...\{7DEF9F2B-97EE-432E-91D9-FF39816B29D6}) (Version: 16.0.02700 - Nero AG) Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1007 - Nero AG) Nitro Pro 8 (HKLM\...\{34BE77EE-B563-49D7-A8A0-FFD76D29BBD3}) (Version: 8.0.10.7 - Nitro) NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Opera Stable 36.0.2130.46 (HKLM-x32\...\Opera 36.0.2130.46) (Version: 36.0.2130.46 - Opera Software) PDF Split And Merge Basic (HKLM\...\{9A40D2F8-9458-458B-95E3-B57797C574E1}) (Version: 2.2.3 - Andrea Vacondio) Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.) Prerequisite installer (x32 Version: 16.0.0004 - Nero AG) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6823 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden Samsung Link 2.0.0.1409291832 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1409291832 - Copyright 2013 SAMSUNG) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Smart Switch (x32 Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Hidden Spotify (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated) UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (HKLM\...\C48768A2A32F4649238F7DCF737A260911895FDE) (Version: 06/08/2012 1.0.0.3 - Lenovo Corporation) Windows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo) Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo) WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EF}) (Version: 20.0.11659 - WinZip Computing, S.L. ) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll () CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0093FEC3-5026-43DC-972E-AE00B5D57B3E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {065F4AA9-800C-4567-AD26-CC870783F473} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {0CD3CFF0-1311-413D-9355-34BF28F19B29} - System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} => pcalua.exe -a E:\DirectX\dxsetup.exe -d E:\DirectX Task: {27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe Task: {3BA21BE5-2D85-4264-A1C3-593680B1A950} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {52B3D700-4DE1-457C-B726-D66ACBA282D2} - System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" -c -uninstall Task: {6196F863-51CD-4C13-A345-5875CF00AA15} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {6BF1C634-5EB3-4FC9-97C0-8AA903808802} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {88A53FE0-7A77-4342-83AA-B5CC40885327} - System32\Tasks\Opera scheduled Autoupdate 1437387024 => C:\Program Files (x86)\Opera\launcher.exe [2016-04-11] (Opera Software) Task: {A40D0F35-DD9E-4B47-B05B-5E69282CD534} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {A9FF28BC-5EFE-4AEB-ABDA-46A81CE4A58E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {B237B92D-221D-41B7-9AB6-87182A992624} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {B78F5F03-D490-48BA-994E-E792884ED74A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {B797FBF4-ECB5-4493-A40F-027F5D320299} - System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUSched.exe [2017-02-07] (AVAST Software) Task: {B7CF7494-7397-44A7-BB02-447104BFBB9A} - System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {C5B22835-7074-43F6-AF77-316BA7E66FE5} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe Task: {C65B4662-8C3B-43A5-8D90-49DFDE268BE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {C89DE650-468A-49EB-B537-7F10CC269736} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {D02DB910-7851-41EF-8E35-7906B8911D96} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {D48E25CA-5966-4EF6-BD38-DAE9298B10D0} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-03-04] (Nero AG) Task: {DC47EA05-B5E9-4B24-A823-3AAA870E0B47} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {DCA23760-D455-445D-AD6B-B2BC6541B3CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {E3F3B51D-C67D-44BC-897A-63F77070149D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {E6D4DB78-47B2-431A-A8F8-64B0EAB76878} - \WPD\SqmUpload_S-1-5-21-1078537693-2019248843-686258836-1002 -> Keine Datei <==== ACHTUNG Task: {EC2C41BD-109A-41AC-A7FE-DD0C745CE4C0} - System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUUpdate.exe [2015-03-18] (AVAST Software) Task: {F7BD20D1-F463-4395-9333-5E25C5BA3420} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {F8F85967-B05C-403E-A897-93280F61E08C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 00025088 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02633728 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02540544 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll 2013-12-21 10:25 - 2013-12-21 10:25 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll 2013-12-21 10:26 - 2013-12-21 10:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00030720 _____ () C:\WINDOWS\SYSTEM32\MediaDB64.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00908800 _____ () C:\WINDOWS\SYSTEM32\ContentDirectoryPresenter64.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00049152 _____ () C:\WINDOWS\SYSTEM32\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00058880 _____ () C:\WINDOWS\SYSTEM32\boost_thread-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00299520 _____ () C:\WINDOWS\SYSTEM32\boost_serialization-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00016896 _____ () C:\WINDOWS\SYSTEM32\boost_system-vc90-mt-1_47.dll 2017-01-29 17:36 - 2017-01-29 17:36 - 00669696 _____ () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2013-07-03 10:27 - 2012-03-21 04:05 - 00051776 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe 2014-10-14 20:54 - 2014-09-29 17:32 - 00049664 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-02-04 20:17 - 2017-02-01 10:47 - 02459992 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll 2017-02-04 20:17 - 2017-02-01 10:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-02-06 20:02 - 2017-02-06 20:03 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 42895872 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\roottools.dll 2015-02-19 22:37 - 2015-02-19 22:37 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll 2013-10-22 08:48 - 2013-10-22 08:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll 2013-04-19 15:38 - 2013-04-19 15:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll 2013-10-25 18:49 - 2013-10-25 18:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll 2013-07-03 10:21 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2017-02-12 20:17 - 2017-02-12 20:17 - 00098816 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32api.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00110080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\pywintypes27.dll 2017-02-12 20:17 - 2017-02-12 20:17 - 00364544 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\pythoncom27.dll 2017-02-12 20:17 - 2017-02-12 20:17 - 00320512 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32com.shell.shell.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00914432 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_hashlib.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 01176576 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._core_.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00806400 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._gdi_.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00816128 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._windows_.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 01067008 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._controls_.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00733184 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._misc_.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00682496 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\pysqlite2._sqlite.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00088064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_ctypes.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00686080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\unicodedata.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00119808 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32file.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00108544 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32security.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00007168 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\hashobjs_ext.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00017920 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\thumbnails_ext.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00088064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\usb_ext.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00012800 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\common.time34.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00018432 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32event.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00167936 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32gui.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00046080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_socket.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 01303552 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_ssl.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00128512 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_elementtree.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00127488 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\pyexpat.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00038912 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32inet.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00036864 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_psutil_windows.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00524248 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\windows._lib_cacheinvalidation.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00011264 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32crypt.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00123392 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._wizard.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00077312 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._html2.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00027648 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_multiprocessing.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00020480 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\_yappi.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00035840 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32process.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00078848 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\wx._animate.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00024064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32pipe.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00010240 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\select.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00025600 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32pdh.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00017408 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32profile.pyd 2017-02-12 20:17 - 2017-02-12 20:17 - 00022528 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI78282\win32ts.pyd 2016-11-07 20:50 - 2016-11-07 20:50 - 06950432 _____ () C:\Users\Felix\AppData\Local\Apps\2.0\6AO9PYBW.MNP\LNO9QCND.KAL\move..tion_391e8feca7b0cf78_0001.0004_6f8afc924d2bed6c\BLLWrapper.DLL 2013-07-03 10:48 - 2012-07-18 13:27 - 00021072 _____ () C:\Program Files (x86)\Lenovo\Lenovo Smart Update\HookDll.dll 2017-02-08 00:35 - 2017-02-07 05:48 - 00801600 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll 2017-02-01 20:25 - 2017-01-14 00:53 - 00035792 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00100296 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00018888 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\select.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00019776 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00694224 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00020824 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2017-02-01 20:25 - 2017-01-14 00:54 - 00123856 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01682768 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00020816 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00145864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2017-02-08 00:35 - 2017-01-14 00:54 - 00019408 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00116688 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2017-02-01 20:25 - 2017-01-14 00:56 - 00105928 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32api.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00052544 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00038712 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\fastpath.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00392144 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2017-02-08 00:35 - 2017-01-14 00:56 - 00020936 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00024528 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32event.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00116176 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32security.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00381760 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00124880 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32file.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00026456 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00024016 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00175560 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32gui.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00030160 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00043472 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32process.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00048592 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32service.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00057808 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00024016 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32profile.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00246608 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00027488 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2017-02-01 20:25 - 2017-01-14 00:55 - 00241104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00022336 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00028616 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32ts.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01826104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2017-02-01 20:25 - 2017-01-14 00:54 - 00083912 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\sip.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01972536 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 03928896 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00531264 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00025432 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00133432 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00224064 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00207680 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00021840 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00069968 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022872 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00021848 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022872 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00350152 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00103232 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWinExtras.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00023896 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00025936 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2017-02-08 00:35 - 2017-01-14 00:51 - 00036296 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\librsync.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00033112 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2017-02-08 00:35 - 2016-12-22 07:58 - 00293392 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00084288 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2017-02-08 00:35 - 2017-01-14 01:02 - 00017864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\libEGL.dll 2017-02-08 00:35 - 2017-01-14 01:02 - 01631184 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00042816 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00171336 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00357688 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00060880 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32print.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00026456 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00546104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Control Panel\Desktop\\Wallpaper -> C:\Felix\Snowboard Wallpapers\Snowboard_wallpaper_Nicolas-Muller-_1920x1080.jpg DNS Servers: 192.168.8.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{45FE6330-5EDB-4BBA-AD1E-A374B3B6A209}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe FirewallRules: [{65AC40DA-528A-4B99-8191-C9DF7CCA74C5}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe FirewallRules: [{C658C94A-EA18-4D73-9092-29431F0613D4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D0095373-48F8-4752-A635-9D7EE8205D54}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{92166C44-F5F9-4262-85B0-C0BCA414350D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{21BD3293-333C-4113-A62F-3B1B015314E4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{82AE3F01-51C0-47F5-8230-1B5D0033D5B7}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{404EBC5E-B9C2-4F1B-B388-EC3F315C5EE3}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{B0B9C0E6-F146-4500-8E24-061DF14C6E7E}] => C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{8418201C-9554-41EF-BDD8-4A0214C7EA56}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{51400B8C-2652-47E7-BAA0-20F851AEED60}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{292C3273-784D-444D-A72A-07B72BAE2DC6}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe FirewallRules: [{05407D69-FEC3-4131-83C2-963DC16C3C50}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{725DFA50-D992-49F9-8FBB-030FD4FA3E02}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE FirewallRules: [{1C643327-D3D9-4C86-98B3-BD309B291847}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{79D54DC8-713C-4002-9994-5110D9BAA7FD}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{EDCF5330-8F2D-41B1-BCAF-90F8A6F0911D}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{7AD965C3-72B9-4502-9B4A-D5E0C11AD2A4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{035E7C89-46EB-4B48-B16B-774E3597A7F0}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{D7EF488B-238C-4322-A9DF-60F13532B285}] => D:\Programme\Office14\outlook.exe FirewallRules: [{E7839166-CB67-4A77-B741-436D6014E7E4}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{D7F85A1D-431A-4339-9C5D-D548E71AE4C3}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{5C57C510-467E-48BC-9931-59D2D6CC585A}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{060A138E-1803-43EB-9162-A35D4F1885B4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{8FE8F125-38C6-4572-8760-0CC4C5096ECE}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{BAC178C0-2AD2-4CA0-BCEE-A4A462C58EE5}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{AA832FDE-FD79-4A17-9A3F-248B9CDF3CEF}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [TCP Query User{C53A6FE7-92C7-4905-B188-D8021A9FDFE4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7AA8CD62-8D91-4BFA-B73C-4A6EEE87274D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [{B152DCDF-0293-412D-98CF-7D6ADD306767}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2A63C53E-CA1D-4327-B82E-7B185229CED9}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2DB78C5F-A7C8-45BD-A129-FDA7BAE6883E}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BC4EF10F-7A63-49D8-B337-9A78C66C3100}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{492C79F5-5C54-4D90-9A8F-4A9AAF923066}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{CF52B653-CC86-45D8-8691-5AF2A2B06EF8}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{DB5329C9-EE4F-4B33-B38D-C45A4AB2A05B}] => C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{5372604E-8F3D-4093-B976-300B633E8967}] => LPort=8743 FirewallRules: [{ECBCCDA5-FD33-4747-AF98-DF431E24B124}] => LPort=8643 FirewallRules: [{64EC97C1-6A4B-4C3B-B117-F2F1048E4733}] => LPort=7676 FirewallRules: [{5BBF33D8-C27E-4199-AAB1-F6067F5AA333}] => LPort=7679 FirewallRules: [{C5B6EB29-23F4-4159-AB41-8957B45B7FA7}] => LPort=24234 FirewallRules: [{234DB7E3-6A86-424F-99D1-5389F9160A31}] => LPort=7900 FirewallRules: [{46476EA0-2C91-4A7F-80C5-D431169E7174}] => LPort=1900 FirewallRules: [{7CD8061D-6BFC-48B8-9ED2-B68038C61E0E}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{E2D759B8-0E67-43E2-864A-D69614D4695D}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{97D85475-216E-44A1-AF62-25AFF6A16EE9}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{B88A5D7A-675B-48A7-B4E4-D4876A5F2EFC}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{8FB07FAE-56BF-418C-B975-1A14589EBDDD}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{81FB46EA-154F-4321-A492-3BB82707CCD3}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{AF783283-9B24-4C00-84CF-CC2B4D52FAB1}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B840725C-D52C-4E5E-9D78-5B9EE8245714}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{CB650059-4C14-4B70-B333-455E1B39C008}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 12-02-2017 19:30:31 Windows Update ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (02/12/2017 07:59:24 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/12/2017 07:59:12 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/12/2017 07:55:32 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:55:32 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:55:32 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:55:30 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:55:30 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:55:30 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/12/2017 07:31:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (02/08/2017 07:19:08 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3079 Systemfehler: ============= Error: (02/12/2017 08:20:07 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT) Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/12/2017 08:17:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/12/2017 08:17:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/12/2017 08:17:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} und der APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/12/2017 07:58:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden. Error: (02/12/2017 07:58:41 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: Der Benutzername oder das Kennwort ist falsch. Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (02/12/2017 07:55:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira.ServiceHost erreicht. Error: (02/12/2017 07:54:52 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 12.02.2017 um 19:34:23 unerwartet heruntergefahren. Error: (02/12/2017 07:41:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: NVIDIA - Display - 12/29/2016 12:00:00 AM - 21.21.13.7654 Error: (02/08/2017 02:07:10 AM) (Source: volsnap) (EventID: 36) (User: ) Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz Prozentuale Nutzung des RAM: 57% Installierter physikalischer RAM: 8066.02 MB Verfügbarer physikalischer RAM: 3438.58 MB Summe virtueller Speicher: 9474.02 MB Verfügbarer virtueller Speicher: 4174.86 MB ==================== Laufwerke ================================ Drive c: (Windows8_OS) (Fixed) (Total:890.73 GB) (Free:30.8 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:19.76 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 22.4 GB) (Disk ID: 48583CDC) Partition: GPT. ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 48583CDF) Partition: GPT. ==================== Ende von Addition.txt ============================ Code:
ATTFilter 22:19:23.0384 0x1afc TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01 22:19:23.0384 0x1afc UEFI system 22:20:25.0659 0x1afc ============================================================ 22:20:25.0659 0x1afc Current date / time: 2017/02/12 22:20:25.0659 22:20:25.0737 0x1afc SystemInfo: 22:20:25.0737 0x1afc 22:20:25.0737 0x1afc OS Version: 10.0.14393 ServicePack: 0.0 22:20:25.0737 0x1afc Product type: Workstation 22:20:25.0737 0x1afc ComputerName: IDEA-PC 22:20:25.0737 0x1afc UserName: Felix 22:20:25.0737 0x1afc Windows directory: C:\WINDOWS 22:20:25.0737 0x1afc System windows directory: C:\WINDOWS 22:20:25.0737 0x1afc Running under WOW64 22:20:25.0737 0x1afc Processor architecture: Intel x64 22:20:25.0737 0x1afc Number of processors: 4 22:20:25.0737 0x1afc Page size: 0x1000 22:20:25.0737 0x1afc Boot type: Normal boot 22:20:25.0737 0x1afc CodeIntegrityOptions = 0x00000001 22:20:25.0737 0x1afc ============================================================ 22:20:26.0407 0x1afc KLMD registered as C:\WINDOWS\system32\drivers\42686842.sys 22:20:26.0407 0x1afc KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.693, osProperties = 0x19 22:20:26.0735 0x1afc System UUID: {BE081366-5144-73D4-1C63-5240D96036CA} 22:20:27.0194 0x1afc Drive \Device\Harddisk0\DR0 - Size: 0x5976F6000 ( 22.37 Gb ), SectorSize: 0x200, Cylinders: 0xB67, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 22:20:27.0241 0x1afc Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 22:20:27.0288 0x1afc ============================================================ 22:20:27.0288 0x1afc \Device\Harddisk0\DR0: 22:20:27.0288 0x1afc GPT partitions: 22:20:27.0288 0x1afc \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {B8CB5058-C187-4719-BAF0-379CA2D4C97E}, UniqueGUID: {4613EE39-4727-4347-8134-173F590F716F}, Name: HFS, StartLBA 0x1000, BlocksNum 0x24B9800 22:20:27.0288 0x1afc \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {D3BFE2DE-3DAF-11DF-BA40-E3A556D89593}, UniqueGUID: {AACF0AFF-6B40-47FD-9702-F9903FF3E526}, Name: Basic data partition, StartLBA 0x24BB000, BlocksNum 0x800000 22:20:27.0288 0x1afc MBR partitions: 22:20:27.0288 0x1afc \Device\Harddisk1\DR1: 22:20:27.0334 0x1afc GPT partitions: 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {7B90BF87-9B3D-442C-8090-5AA50D38504F}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1F4000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {B9F1467C-0D1D-41B9-87E1-4D25797544BC}, Name: EFI system partition, StartLBA 0x1F4800, BlocksNum 0x82000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {BFBFAFE7-A34F-448A-9A5B-6213EB736C22}, UniqueGUID: {7B1DD7B5-BE09-4C37-8B89-89A97C6DF513}, Name: Basic data partition, StartLBA 0x276800, BlocksNum 0x1F4000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {0F59B35A-6AF4-4CF2-8B65-0ECDBFC0169F}, Name: Microsoft reserved partition, StartLBA 0x46A800, BlocksNum 0x40000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {9730F9BA-012D-4E51-BF21-626AA411DDBB}, Name: Basic data partition, StartLBA 0x4AA800, BlocksNum 0x6F575000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {BBA69484-912C-47EA-9CCC-B10216526E0D}, Name: , StartLBA 0x6FA1F800, BlocksNum 0xE1000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition7: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {08A344D1-1303-41BC-AA4A-CF37BB73770A}, Name: , StartLBA 0x6FB00800, BlocksNum 0xAF000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition8: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {1D7DCFD2-3B11-4B76-A105-9C4009E67C0F}, Name: Basic data partition, StartLBA 0x6FBAF800, BlocksNum 0x3200000 22:20:27.0397 0x1afc \Device\Harddisk1\DR1\Partition9: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {8BDC1AFE-78C5-463B-BC4B-2DFF443AE4DA}, Name: Basic data partition, StartLBA 0x72DAF800, BlocksNum 0x1957000 22:20:27.0397 0x1afc MBR partitions: 22:20:27.0397 0x1afc ============================================================ 22:20:27.0564 0x1afc C: <-> \Device\Harddisk1\DR1\Partition5 22:20:27.0672 0x1afc D: <-> \Device\Harddisk1\DR1\Partition8 22:20:27.0672 0x1afc ============================================================ 22:20:27.0672 0x1afc Initialize success 22:20:27.0672 0x1afc ============================================================ 22:21:21.0017 0x1508 ============================================================ 22:21:21.0017 0x1508 Scan started 22:21:21.0017 0x1508 Mode: Manual; SigCheck; TDLFS; 22:21:21.0017 0x1508 ============================================================ 22:21:21.0017 0x1508 KSN ping started 22:21:28.0176 0x1508 KSN ping finished: true 22:21:34.0704 0x1508 ================ Scan system memory ======================== 22:21:34.0704 0x1508 System memory - ok 22:21:34.0704 0x1508 ================ Scan services ============================= 22:21:36.0086 0x1508 1394ohci - ok 22:21:36.0115 0x1508 3ware - ok 22:21:36.0147 0x1508 ACPI - ok 22:21:36.0147 0x1508 AcpiDev - ok 22:21:36.0193 0x1508 acpiex - ok 22:21:36.0193 0x1508 acpipagr - ok 22:21:36.0269 0x1508 AcpiPmi - ok 22:21:36.0441 0x1508 acpitime - ok 22:21:36.0596 0x1508 [ 3B42D95D20CD2AACDB0564471AE43ED7, BF49568D7060159F61D5F6DE7ECDECCCD1F920A2881544BA83CF420C822F6653 ] ACPIVPC C:\WINDOWS\System32\drivers\AcpiVpc.sys 22:21:36.0690 0x1508 ACPIVPC - ok 22:21:36.0860 0x1508 [ D0B11E40EA74A98A5E133DF1F5276240, BAD5885CD8CC271D59DFA95159EFC3AC36D2BA11B6DA593AAED0C45F1C2F280F ] acsock C:\WINDOWS\system32\DRIVERS\acsock64.sys 22:21:36.0892 0x1508 acsock - ok 22:21:37.0173 0x1508 [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 22:21:37.0204 0x1508 AdobeARMservice - ok 22:21:37.0261 0x1508 ADP80XX - ok 22:21:37.0332 0x1508 AFD - ok 22:21:37.0367 0x1508 ahcache - ok 22:21:37.0414 0x1508 AJRouter - ok 22:21:37.0549 0x1508 ALG - ok 22:21:38.0193 0x1508 [ 5EE5E5DF9E92B3A5581B9DE7DCC05972, 6AD4D98F00C2B454807450EDB9ED3545BA91B608A853A59BDE7282808CBFF6B0 ] AllShare Framework DMS C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe 22:21:38.0224 0x1508 AllShare Framework DMS - detected UnsignedFile.Multi.Generic ( 1 ) 22:21:45.0361 0x1508 Detect skipped due to KSN trusted 22:21:45.0361 0x1508 AllShare Framework DMS - ok 22:21:45.0426 0x1508 AmdK8 - ok 22:21:45.0442 0x1508 AmdPPM - ok 22:21:45.0505 0x1508 amdsata - ok 22:21:45.0571 0x1508 amdsbs - ok 22:21:45.0633 0x1508 amdxata - ok 22:21:45.0774 0x1508 [ 0C3D62CB6B8F2B3CC42369BAC0F58AD5, F0121EACB6060DF1F6C5F79C15D5B483F301EF85B3C79F67806520BE9CEE398E ] AMPPAL C:\WINDOWS\System32\drivers\AMPPAL.sys 22:21:45.0805 0x1508 AMPPAL - ok 22:21:46.0393 0x1508 [ 98D7647EF729503A60EF870DA5C21D0D, 7E36E8E3D9D0BD940DC225E1DB7EFD90F76F7BE8DCAD9782255556C31D6FD476 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe 22:21:46.0425 0x1508 AntiVirMailService - ok 22:21:46.0896 0x1508 [ 229E752A26B53E155524D6530B95CDD4, B4D3DEA52860143D16A57EBA31CD3394B8B4FEA642EB3A736C8388447AB7E0E9 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 22:21:46.0914 0x1508 AntiVirSchedulerService - ok 22:21:47.0054 0x1508 [ 229E752A26B53E155524D6530B95CDD4, B4D3DEA52860143D16A57EBA31CD3394B8B4FEA642EB3A736C8388447AB7E0E9 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 22:21:47.0086 0x1508 AntiVirService - ok 22:21:47.0767 0x1508 [ F2B26CD2305E917B1EA1BF49E0C59E31, 8CCE64C68B80D56C7604DB6ABD187F66C624462328F4886C607F0A46D8E9DE92 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe 22:21:47.0798 0x1508 AntiVirWebService - ok 22:21:47.0798 0x1508 AppID - ok 22:21:47.0845 0x1508 AppIDSvc - ok 22:21:47.0876 0x1508 Appinfo - ok 22:21:48.0171 0x1508 [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 22:21:48.0202 0x1508 Apple Mobile Device - ok 22:21:48.0283 0x1508 applockerfltr - ok 22:21:48.0377 0x1508 AppReadiness - ok 22:21:48.0408 0x1508 AppXSvc - ok 22:21:48.0440 0x1508 arcsas - ok 22:21:48.0440 0x1508 AsyncMac - ok 22:21:48.0518 0x1508 atapi - ok 22:21:48.0627 0x1508 AudioEndpointBuilder - ok 22:21:48.0643 0x1508 Audiosrv - ok 22:21:48.0783 0x1508 [ 19A629CC661BBB49E25203B9626354F9, 9FDE67E19CE0B5973441A11EB0D5CD8187C1B47B3A2C866FD6BD939D31F42924 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys 22:21:48.0815 0x1508 avgntflt - ok 22:21:48.0942 0x1508 [ B34C86461D03F33E9B1A57699DCABED3, 127A63A3AEC796DDF7E19432CAF523CA23051058752B9772244655797B3B4CDB ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys 22:21:48.0974 0x1508 avipbb - ok 22:21:49.0370 0x1508 [ 2AEE4D1D7E668F1CCF97EDE93509B0EE, B082B3BBB27D3C8B26A754508C3B98BA803FEA707898FF18A120D6A2679098DF ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe 22:21:49.0386 0x1508 Avira.ServiceHost - ok 22:21:49.0436 0x1508 [ 79F7741A773FF194EEC64A8161AE26D5, 3DDEA5FBDCB74A2BACC895A44C8C2A947F09E2649ED61D781E99DD61DBFACA5D ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys 22:21:49.0436 0x1508 avkmgr - ok 22:21:49.0564 0x1508 [ 899D89FDF015BBAF628076987D74C295, 7534A10F652FBE559431B9B1C6BC13874E8BC7438D7AFD7553F96811FD3E59BD ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys 22:21:49.0595 0x1508 avnetflt - ok 22:21:49.0611 0x1508 AxInstSV - ok 22:21:49.0627 0x1508 b06bdrv - ok 22:21:49.0658 0x1508 BasicDisplay - ok 22:21:49.0720 0x1508 BasicRender - ok 22:21:49.0752 0x1508 bcmfn - ok 22:21:49.0767 0x1508 bcmfn2 - ok 22:21:49.0845 0x1508 BDESVC - ok 22:21:49.0877 0x1508 Beep - ok 22:21:49.0907 0x1508 BFE - ok 22:21:49.0934 0x1508 BITS - ok 22:21:50.0328 0x1508 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 22:21:50.0359 0x1508 Bonjour Service - ok 22:21:50.0375 0x1508 bowser - ok 22:21:50.0457 0x1508 BrokerInfrastructure - ok 22:21:50.0548 0x1508 Browser - ok 22:21:50.0626 0x1508 BthAvrcpTg - ok 22:21:50.0689 0x1508 BthEnum - ok 22:21:50.0783 0x1508 BthHFEnum - ok 22:21:50.0876 0x1508 bthhfhid - ok 22:21:50.0955 0x1508 BthHFSrv - ok 22:21:51.0117 0x1508 BthLEEnum - ok 22:21:51.0180 0x1508 BTHMODEM - ok 22:21:51.0180 0x1508 BthPan - ok 22:21:51.0195 0x1508 BTHPORT - ok 22:21:51.0227 0x1508 bthserv - ok 22:21:51.0227 0x1508 BTHUSB - ok 22:21:51.0294 0x1508 buttonconverter - ok 22:21:51.0403 0x1508 CapImg - ok 22:21:51.0403 0x1508 cdfs - ok 22:21:51.0481 0x1508 CDPSvc - ok 22:21:51.0512 0x1508 CDPUserSvc - ok 22:21:51.0564 0x1508 cdrom - ok 22:21:51.0626 0x1508 CertPropSvc - ok 22:21:51.0658 0x1508 cht4iscsi - ok 22:21:51.0658 0x1508 cht4vbd - ok 22:21:51.0798 0x1508 circlass - ok 22:21:51.0861 0x1508 CLFS - ok 22:21:51.0983 0x1508 ClipSVC - ok 22:21:52.0092 0x1508 clreg - ok 22:21:52.0186 0x1508 CmBatt - ok 22:21:52.0251 0x1508 CNG - ok 22:21:52.0257 0x1508 cnghwassist - ok 22:21:53.0430 0x1508 CompositeBus - ok 22:21:53.0446 0x1508 COMSysApp - ok 22:21:53.0477 0x1508 condrv - ok 22:21:53.0658 0x1508 CoreMessagingRegistrar - ok 22:21:54.0892 0x1508 [ A28D6FA203CE094BDE7ED8CEC6079E42, 5DCA8BA21F5FD0D9F00620E7592949ABCF3BA202CF7AF3D84F93DF7C13E2D4C9 ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe 22:21:54.0932 0x1508 cphs - ok 22:21:54.0981 0x1508 CryptSvc - ok 22:21:55.0012 0x1508 dam - ok 22:21:55.0044 0x1508 DcomLaunch - ok 22:21:55.0137 0x1508 DcpSvc - ok 22:21:55.0231 0x1508 defragsvc - ok 22:21:55.0282 0x1508 DeviceAssociationService - ok 22:21:55.0376 0x1508 DeviceInstall - ok 22:21:55.0445 0x1508 DevQueryBroker - ok 22:21:55.0513 0x1508 Dfsc - ok 22:21:55.0563 0x1508 Dhcp - ok 22:21:55.0813 0x1508 diagnosticshub.standardcollector.service - ok 22:21:55.0920 0x1508 DiagTrack - ok 22:21:56.0020 0x1508 disk - ok 22:21:56.0067 0x1508 DmEnrollmentSvc - ok 22:21:56.0083 0x1508 dmvsc - ok 22:21:56.0145 0x1508 dmwappushservice - ok 22:21:56.0223 0x1508 Dnscache - ok 22:21:56.0252 0x1508 dot3svc - ok 22:21:56.0255 0x1508 DPS - ok 22:21:56.0257 0x1508 drmkaud - ok 22:21:56.0273 0x1508 DsmSvc - ok 22:21:56.0289 0x1508 DsSvc - ok 22:21:56.0304 0x1508 DXGKrnl - ok 22:21:56.0320 0x1508 EapHost - ok 22:21:56.0320 0x1508 ebdrv - ok 22:21:56.0335 0x1508 EFS - ok 22:21:56.0382 0x1508 EhStorClass - ok 22:21:56.0468 0x1508 EhStorTcgDrv - ok 22:21:56.0515 0x1508 embeddedmode - ok 22:21:56.0580 0x1508 EntAppSvc - ok 22:21:56.0642 0x1508 ErrDev - ok 22:21:56.0767 0x1508 EventSystem - ok 22:21:56.0941 0x1508 [ 23B79B19F49A037EBA4A9A3BB03ED91D, 2E0918B20188CBFAC0E64A5B36739DF4638A343553908888DFDD708743370F3F ] ewusbnet C:\WINDOWS\system32\DRIVERS\ewusbnet.sys 22:21:56.0974 0x1508 ewusbnet - ok 22:21:57.0099 0x1508 [ D2EAA04AF43154B62FA85B08BAD0A7CA, B18F09CAD04AD61A1B8DCD3BBC70A82FB50008C147389D3245E39856BA940A87 ] excfs C:\WINDOWS\system32\DRIVERS\excfs.sys 22:21:57.0099 0x1508 excfs - ok 22:21:57.0178 0x1508 [ E6082A6C109238A725D83184724C4A36, 66F0D4798C357FFCC5A35E45BE8E5F0A97E7BCF98CFAA1BB2269F6D6B910A0A3 ] excsd C:\WINDOWS\system32\DRIVERS\excsd.sys 22:21:57.0193 0x1508 excsd - ok 22:21:57.0275 0x1508 exfat - ok 22:21:57.0453 0x1508 [ 68030FF4B7669E15916910885E2E6160, 324EC07A0135354A5D41ED841919D61C218ECA718DE8A8357B0D2AD0B621777B ] ExpressCache C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe 22:21:57.0485 0x1508 ExpressCache - ok 22:21:57.0543 0x1508 fastfat - ok 22:21:57.0611 0x1508 Fax - ok 22:21:57.0673 0x1508 fdc - ok 22:21:57.0720 0x1508 fdPHost - ok 22:21:57.0751 0x1508 FDResPub - ok 22:21:57.0892 0x1508 fhsvc - ok 22:21:57.0989 0x1508 FileCrypt - ok 22:21:58.0004 0x1508 FileInfo - ok 22:21:58.0051 0x1508 Filetrace - ok 22:21:58.0168 0x1508 flpydisk - ok 22:21:58.0183 0x1508 FltMgr - ok 22:21:58.0250 0x1508 FontCache - ok 22:21:58.0675 0x1508 FontCache3.0.0.0 - ok 22:21:58.0769 0x1508 FrameServer - ok 22:21:58.0784 0x1508 FsDepends - ok 22:21:58.0784 0x1508 Fs_Rec - ok 22:21:58.0831 0x1508 fvevol - ok 22:21:58.0909 0x1508 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 22:21:58.0925 0x1508 GEARAspiWDM - ok 22:21:59.0068 0x1508 gencounter - ok 22:21:59.0131 0x1508 genericusbfn - ok 22:21:59.0193 0x1508 GPIOClx0101 - ok 22:21:59.0259 0x1508 gpsvc - ok 22:21:59.0337 0x1508 GpuEnergyDrv - ok 22:21:59.0799 0x1508 [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:21:59.0827 0x1508 gupdate - ok 22:21:59.0845 0x1508 [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:21:59.0861 0x1508 gupdatem - ok 22:21:59.0984 0x1508 HDAudBus - ok 22:22:00.0004 0x1508 HidBatt - ok 22:22:00.0067 0x1508 HidBth - ok 22:22:00.0098 0x1508 hidi2c - ok 22:22:00.0192 0x1508 hidinterrupt - ok 22:22:00.0192 0x1508 HidIr - ok 22:22:00.0241 0x1508 hidserv - ok 22:22:00.0366 0x1508 HidUsb - ok 22:22:00.0429 0x1508 HomeGroupListener - ok 22:22:00.0468 0x1508 HomeGroupProvider - ok 22:22:00.0484 0x1508 HpSAMD - ok 22:22:00.0548 0x1508 HTTP - ok 22:22:00.0657 0x1508 [ 08B1A06A55F068A17A51BA26618CF50F, 8ADFC9D3003208A9B3BE12DCD1418A13C4D19E13E00EFEE556EF87B70F49B2E6 ] huawei_enumerator C:\WINDOWS\System32\drivers\ew_jubusenum.sys 22:22:00.0688 0x1508 huawei_enumerator - ok 22:22:00.0798 0x1508 HvHost - ok 22:22:00.0861 0x1508 hvservice - ok 22:22:00.0908 0x1508 hwpolicy - ok 22:22:01.0020 0x1508 hyperkbd - ok 22:22:01.0191 0x1508 i8042prt - ok 22:22:01.0204 0x1508 iagpio - ok 22:22:01.0206 0x1508 iai2c - ok 22:22:01.0285 0x1508 iaLPSS2i_GPIO2 - ok 22:22:01.0300 0x1508 iaLPSS2i_I2C - ok 22:22:01.0300 0x1508 iaLPSSi_GPIO - ok 22:22:01.0458 0x1508 iaLPSSi_I2C - ok 22:22:01.0704 0x1508 [ 6C91E425ACE29594BD574DE38AC9B76D, 697784E4C7AF08B1F35662D8AD871E6890CECE22B6E64985B7C1A66C10DA390D ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys 22:22:01.0736 0x1508 iaStorA - ok 22:22:01.0861 0x1508 iaStorAV - ok 22:22:01.0876 0x1508 iaStorV - ok 22:22:01.0939 0x1508 ibbus - ok 22:22:02.0032 0x1508 [ 62F0CB0A54EAF37E15EC385300957BB8, 55FCF7068D84D5AEEAF3149A5349BF13F1D18E34956217916ED7C1950885E63C ] ibtfltcoex C:\WINDOWS\system32\DRIVERS\ibtfltcoex.sys 22:22:02.0064 0x1508 ibtfltcoex - ok 22:22:02.0370 0x1508 [ ABEFA4BD23329FD9BD47496BF2E58774, 9689D4C6380735EE1CC7F480696CDDC229E0FA511942AC813314D353584D82DD ] IconMan_R C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe 22:22:02.0448 0x1508 IconMan_R - detected UnsignedFile.Multi.Generic ( 1 ) 22:22:09.0604 0x1508 Detect skipped due to KSN trusted 22:22:09.0604 0x1508 IconMan_R - ok 22:22:09.0682 0x1508 icssvc - ok 22:22:09.0955 0x1508 [ 9CE4D3A79D3180AC5A141E2F7E7137F4, 1D717D2156B78632895281779D2646AB066619EA1DB293A9505BF7C174F53271 ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys 22:22:10.0039 0x1508 igfx - ok 22:22:10.0082 0x1508 [ 6A9C613D0F5F9676D128F39B63ACE45B, 027B9568C740E336C7CBBE952309E2719E8FFA14E7DFC2B85B49E0C0CE7D2149 ] igfxCUIService1.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe 22:22:10.0084 0x1508 igfxCUIService1.0.0.0 - ok 22:22:10.0100 0x1508 IKEEXT - ok 22:22:10.0116 0x1508 IndirectKmd - ok 22:22:10.0209 0x1508 [ B1F193AB8FB72E9FC34B3A39314ED872, 408E98D9C8ABB928090DD9E5D1BB227EFBC997BF168437BAEF0461EB0D1DAE3D ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys 22:22:10.0246 0x1508 intaud_WaveExtensible - ok 22:22:10.0548 0x1508 [ 55FCBF5440EE61DBC5A6F637F7B4C776, 7D6F0DE6B8D38D4BA87592E9F39B402530007D43A23E8E7A57AA6CC30D53AC22 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys 22:22:10.0610 0x1508 IntcAzAudAddService - ok 22:22:10.0892 0x1508 [ 87871AB7AC797F922A6F3D4C874CED96, 2BCD89911E42827CD294DD7D1486A7845D1F98019E51958E0F488384401B2944 ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys 22:22:10.0907 0x1508 IntcDAud - ok 22:22:11.0439 0x1508 [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe 22:22:11.0455 0x1508 Intel(R) Capability Licensing Service Interface - ok 22:22:11.0502 0x1508 intelide - ok 22:22:11.0549 0x1508 intelpep - ok 22:22:11.0739 0x1508 intelppm - ok 22:22:11.0771 0x1508 iorate - ok 22:22:11.0786 0x1508 IpFilterDriver - ok 22:22:11.0802 0x1508 iphlpsvc - ok 22:22:11.0819 0x1508 IPMIDRV - ok 22:22:11.0829 0x1508 IPNAT - ok 22:22:12.0101 0x1508 [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 22:22:12.0133 0x1508 iPod Service - ok 22:22:12.0133 0x1508 irda - ok 22:22:12.0133 0x1508 IRENUM - ok 22:22:12.0180 0x1508 irmon - ok 22:22:12.0340 0x1508 [ 4D9B9A794F22415B8C3E0CCFBE61BC7A, 4CF01BC95F0AD7DC42AF8A0FCE032DF00610524A98CF52F531E9DE93137E7B87 ] irstrtdv C:\WINDOWS\System32\drivers\irstrtdv.sys 22:22:12.0371 0x1508 irstrtdv - ok 22:22:14.0401 0x1508 [ E145E934392E7A49FDC6775AC3A347F8, 8E5DBC8C34FB3B68851489E0860BA3ACE6CDF46BB5E2AEFD1DEF6E895566068B ] irstrtsv C:\WINDOWS\SysWOW64\irstrtsv.exe 22:22:14.0432 0x1508 irstrtsv - ok 22:22:14.0464 0x1508 isapnp - ok 22:22:14.0549 0x1508 iScsiPrt - ok 22:22:14.0674 0x1508 [ 48B904D31F2369D7B0122617038D3F5B, 8A43CB37667929CCCC37B6E79E82509BBCA6C8884B44059DC87BCA7C21BE7FE1 ] iwdbus C:\WINDOWS\System32\drivers\iwdbus.sys 22:22:14.0705 0x1508 iwdbus - ok 22:22:14.0954 0x1508 [ 78ABBE558F57144047F10A0F50FE4B2F, 6BE608F7697D83FD6C7E6EA422AC5637933BDC96B1044C12DE9A419CE7D6F6CE ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe 22:22:14.0986 0x1508 jhi_service - ok 22:22:15.0099 0x1508 kbdclass - ok 22:22:15.0099 0x1508 kbdhid - ok 22:22:15.0161 0x1508 kdnic - ok 22:22:15.0192 0x1508 KeyIso - ok 22:22:15.0192 0x1508 KSecDD - ok 22:22:15.0248 0x1508 KSecPkg - ok 22:22:15.0258 0x1508 ksthunk - ok 22:22:15.0320 0x1508 KtmRm - ok 22:22:15.0582 0x1508 [ 61959D7B5A83C524909325AE751F19F9, 1D6AC527C36E9986CDE7B852B11DC9DC8DE367CEEDE0AE481B1FB5C6E4F26C26 ] LAD C:\WINDOWS\System32\drivers\LAD.sys 22:22:15.0613 0x1508 LAD - ok 22:22:15.0644 0x1508 LanmanServer - ok 22:22:15.0785 0x1508 LanmanWorkstation - ok 22:22:16.0085 0x1508 [ 93138543A4D836E97543BA2B857BDBFF, 23B4C52AFDCA16D5DC49F08FE755B1AF457BEBBE1599EF7B9C310C105639384B ] Lenovo Smart Update Service C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe 22:22:16.0101 0x1508 Lenovo Smart Update Service - ok 22:22:16.0163 0x1508 lfsvc - ok 22:22:16.0261 0x1508 [ BE166935083F9C38EDFDC21B9A7A679B, 89C64DBE58E1B974208AAAA5CC757C599B1439C205C3C48BF16BA054A06DBC94 ] LHDmgr C:\WINDOWS\system32\DRIVERS\LhdX64.sys 22:22:16.0277 0x1508 LHDmgr - ok 22:22:16.0324 0x1508 LicenseManager - ok 22:22:16.0371 0x1508 lltdio - ok 22:22:16.0402 0x1508 lltdsvc - ok 22:22:16.0433 0x1508 lmhosts - ok 22:22:16.0743 0x1508 [ 2C24DC448DBE8DB9BE1441B824C57E79, DA2257EEC964A47D03C2BB13317FD788E51D4685E2395B303ED7B2575FEF3B19 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 22:22:16.0758 0x1508 LMS - ok 22:22:16.0847 0x1508 LSI_SAS - ok 22:22:16.0878 0x1508 LSI_SAS2i - ok 22:22:16.0894 0x1508 LSI_SAS3i - ok 22:22:16.0894 0x1508 LSI_SSS - ok 22:22:16.0987 0x1508 LSM - ok 22:22:16.0987 0x1508 luafv - ok 22:22:17.0063 0x1508 MapsBroker - ok 22:22:17.0117 0x1508 megasas - ok 22:22:17.0211 0x1508 megasas2i - ok 22:22:17.0371 0x1508 megasr - ok 22:22:17.0558 0x1508 [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] MEIx64 C:\WINDOWS\System32\drivers\HECIx64.sys 22:22:17.0573 0x1508 MEIx64 - ok 22:22:17.0636 0x1508 MessagingService - ok 22:22:17.0683 0x1508 mlx4_bus - ok 22:22:17.0808 0x1508 MMCSS - ok 22:22:17.0861 0x1508 Modem - ok 22:22:17.0893 0x1508 monitor - ok 22:22:17.0986 0x1508 mouclass - ok 22:22:18.0002 0x1508 mouhid - ok 22:22:18.0018 0x1508 mountmgr - ok 22:22:18.0291 0x1508 [ 269BDB3CB77EB77BABE2862BEAB1F208, EC693365C73D59244CB77E181042128A9901BA5C1109CD4F1B9A2008DF1F9582 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 22:22:18.0307 0x1508 MozillaMaintenance - ok 22:22:18.0307 0x1508 mpsdrv - ok 22:22:18.0354 0x1508 MpsSvc - ok 22:22:18.0401 0x1508 MRxDAV - ok 22:22:18.0479 0x1508 mrxsmb - ok 22:22:18.0510 0x1508 mrxsmb10 - ok 22:22:18.0557 0x1508 mrxsmb20 - ok 22:22:18.0607 0x1508 MsBridge - ok 22:22:18.0638 0x1508 MSDTC - ok 22:22:18.0763 0x1508 Msfs - ok 22:22:18.0919 0x1508 msgpiowin32 - ok 22:22:18.0966 0x1508 mshidkmdf - ok 22:22:19.0013 0x1508 mshidumdf - ok 22:22:19.0107 0x1508 msisadrv - ok 22:22:19.0248 0x1508 MSiSCSI - ok 22:22:19.0250 0x1508 msiserver - ok 22:22:19.0266 0x1508 MSKSSRV - ok 22:22:19.0266 0x1508 MsLldp - ok 22:22:19.0407 0x1508 MSPCLOCK - ok 22:22:19.0407 0x1508 MSPQM - ok 22:22:19.0422 0x1508 MsRPC - ok 22:22:19.0469 0x1508 mssmbios - ok 22:22:19.0469 0x1508 MSTEE - ok 22:22:19.0485 0x1508 MTConfig - ok 22:22:19.0500 0x1508 Mup - ok 22:22:19.0500 0x1508 mvumis - ok 22:22:19.0602 0x1508 NativeWifiP - ok 22:22:19.0972 0x1508 [ 988CDC4DAE2186F3A5ED6EE7D3E6B5CA, DB40F7705F0475FF774452E365152EBEDDC77D8ACE48419DABE02DD385C6B725 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe 22:22:20.0004 0x1508 NAUpdate - ok 22:22:20.0066 0x1508 NcaSvc - ok 22:22:20.0128 0x1508 NcbService - ok 22:22:20.0128 0x1508 NcdAutoSetup - ok 22:22:20.0206 0x1508 ndfltr - ok 22:22:20.0288 0x1508 NDIS - ok 22:22:20.0335 0x1508 NdisCap - ok 22:22:20.0491 0x1508 NdisImPlatform - ok 22:22:20.0580 0x1508 NdisTapi - ok 22:22:20.0580 0x1508 Ndisuio - ok 22:22:20.0650 0x1508 NdisVirtualBus - ok 22:22:20.0666 0x1508 NdisWan - ok 22:22:20.0681 0x1508 ndiswanlegacy - ok 22:22:20.0916 0x1508 ndproxy - ok 22:22:20.0916 0x1508 Ndu - ok 22:22:20.0994 0x1508 NetAdapterCx - ok 22:22:21.0009 0x1508 NetBIOS - ok 22:22:21.0025 0x1508 NetBT - ok 22:22:21.0041 0x1508 Netlogon - ok 22:22:21.0074 0x1508 Netman - ok 22:22:21.0287 0x1508 netprofm - ok 22:22:21.0303 0x1508 NetSetupSvc - ok 22:22:21.0723 0x1508 NetTcpPortSharing - ok 22:22:21.0832 0x1508 NETwNe64 - ok 22:22:21.0926 0x1508 NgcCtnrSvc - ok 22:22:21.0942 0x1508 NgcSvc - ok 22:22:22.0086 0x1508 [ FC91D7804B8FE5C2F0B12585C612F592, 0F43466D0F52D6A5282BD076005AC5F615C8CFCAC0D4B17B152E8AD0F556CB08 ] NitroDriverReadSpool8 C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe 22:22:22.0101 0x1508 NitroDriverReadSpool8 - ok 22:22:22.0146 0x1508 NlaSvc - ok 22:22:22.0259 0x1508 [ 21D28C3448983A072B907E9BAC93D223, 27EF785F8A26E461EE9CDA18445E4896EB5BAE73ABE77262639320D45BC6A512 ] nlsX86cc C:\WINDOWS\SysWOW64\NLSSRV32.EXE 22:22:22.0275 0x1508 nlsX86cc - ok 22:22:22.0321 0x1508 Npfs - ok 22:22:22.0353 0x1508 npsvctrig - ok 22:22:22.0400 0x1508 nsi - ok 22:22:22.0415 0x1508 nsiproxy - ok 22:22:22.0493 0x1508 NTFS - ok 22:22:22.0580 0x1508 Null - ok 22:22:26.0611 0x1508 [ 88F3EEDD47473E7206C0A049AE96A0F7, 3A02CF546993270E3DE2715F1065A4832CC1F2C6CCB62D87DDB939C423EF1EA1 ] nvlddmkm C:\WINDOWS\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys 22:22:26.0876 0x1508 nvlddmkm - ok 22:22:26.0939 0x1508 [ 63718B0FF94E14B883650DA9CD7DBED9, 37BA4B85E677E041277051B476A640E8FA270B423B5D41874050AAAE91619AFE ] nvpciflt C:\WINDOWS\system32\DRIVERS\nvpciflt.sys 22:22:26.0939 0x1508 nvpciflt - ok 22:22:26.0986 0x1508 nvraid - ok 22:22:26.0986 0x1508 nvstor - ok 22:22:27.0250 0x1508 [ 845AF450F71A11B7358C6EFE9A76A894, 8042DF2402D00E210536552AC8202F6112F75C2F1506B0BED8DD3F04AF7BEF3F ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe 22:22:27.0281 0x1508 nvUpdatusService - ok 22:22:27.0328 0x1508 OneSyncSvc - ok 22:22:27.0469 0x1508 [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 22:22:27.0500 0x1508 ose64 - ok 22:22:27.0817 0x1508 [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 22:22:27.0911 0x1508 osppsvc - ok 22:22:27.0942 0x1508 p2pimsvc - ok 22:22:28.0143 0x1508 p2psvc - ok 22:22:28.0303 0x1508 Parport - ok 22:22:28.0412 0x1508 partmgr - ok 22:22:28.0474 0x1508 PcaSvc - ok 22:22:28.0546 0x1508 pci - ok 22:22:28.0674 0x1508 pciide - ok 22:22:28.0700 0x1508 pcmcia - ok 22:22:28.0708 0x1508 pcw - ok 22:22:28.0739 0x1508 pdc - ok 22:22:28.0739 0x1508 PEAUTH - ok 22:22:28.0770 0x1508 percsas2i - ok 22:22:28.0770 0x1508 percsas3i - ok 22:22:30.0730 0x1508 PerfHost - ok 22:22:30.0746 0x1508 PhoneSvc - ok 22:22:30.0921 0x1508 PimIndexMaintenanceSvc - ok 22:22:31.0014 0x1508 pla - ok 22:22:31.0090 0x1508 PlugPlay - ok 22:22:31.0121 0x1508 PNRPAutoReg - ok 22:22:31.0126 0x1508 PNRPsvc - ok 22:22:31.0226 0x1508 PolicyAgent - ok 22:22:31.0236 0x1508 Power - ok 22:22:31.0267 0x1508 PptpMiniport - ok 22:22:32.0380 0x1508 [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll 22:22:32.0489 0x1508 PrintNotify - ok 22:22:32.0536 0x1508 Processor - ok 22:22:32.0555 0x1508 ProfSvc - ok 22:22:32.0664 0x1508 Psched - ok 22:22:32.0747 0x1508 QWAVE - ok 22:22:32.0778 0x1508 QWAVEdrv - ok 22:22:32.0794 0x1508 RasAcd - ok 22:22:32.0877 0x1508 RasAgileVpn - ok 22:22:32.0971 0x1508 RasAuto - ok 22:22:32.0986 0x1508 Rasl2tp - ok 22:22:33.0064 0x1508 RasMan - ok 22:22:33.0091 0x1508 RasPppoe - ok 22:22:33.0126 0x1508 RasSstp - ok 22:22:33.0270 0x1508 rdbss - ok 22:22:33.0301 0x1508 rdpbus - ok 22:22:33.0317 0x1508 RDPDR - ok 22:22:33.0379 0x1508 RdpVideoMiniport - ok 22:22:33.0379 0x1508 rdyboost - ok 22:22:33.0379 0x1508 ReFSv1 - ok 22:22:33.0427 0x1508 RemoteAccess - ok 22:22:33.0521 0x1508 RemoteRegistry - ok 22:22:33.0579 0x1508 RetailDemo - ok 22:22:33.0626 0x1508 RFCOMM - ok 22:22:33.0673 0x1508 RmSvc - ok 22:22:33.0769 0x1508 RpcEptMapper - ok 22:22:33.0847 0x1508 RpcLocator - ok 22:22:33.0878 0x1508 RpcSs - ok 22:22:33.0925 0x1508 rspndr - ok 22:22:33.0956 0x1508 rt640x64 - ok 22:22:34.0148 0x1508 [ 3940780911A7BD1793B7CEEC9E4429C2, 539511D26D2EE348F80D9EFA414FD731983B14D8218E498217E7A0A0E439E41C ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys 22:22:34.0195 0x1508 RTSUER - ok 22:22:34.0292 0x1508 s3cap - ok 22:22:34.0417 0x1508 SamSs - ok 22:22:34.0885 0x1508 [ 964E210576799C93263A32C70331E833, 80EB44272CB38F0210B4305E617390BF8E78A98B23AFD67751608628A652CF95 ] Samsung Link Service C:\Program Files\Samsung\Samsung Link\Samsung Link.exe 22:22:34.0900 0x1508 Samsung Link Service - ok 22:22:34.0978 0x1508 sbp2port - ok 22:22:35.0057 0x1508 SCardSvr - ok 22:22:35.0162 0x1508 ScDeviceEnum - ok 22:22:35.0307 0x1508 scfilter - ok 22:22:35.0354 0x1508 Schedule - ok 22:22:35.0370 0x1508 scmbus - ok 22:22:35.0496 0x1508 scmdisk0101 - ok 22:22:35.0496 0x1508 SCPolicySvc - ok 22:22:35.0548 0x1508 sdbus - ok 22:22:35.0563 0x1508 SDRSVC - ok 22:22:35.0579 0x1508 sdstor - ok 22:22:35.0642 0x1508 seclogon - ok 22:22:35.0704 0x1508 SENS - ok 22:22:35.0735 0x1508 SensorDataService - ok 22:22:35.0779 0x1508 SensorService - ok 22:22:35.0898 0x1508 SensrSvc - ok 22:22:35.0898 0x1508 SerCx - ok 22:22:35.0898 0x1508 SerCx2 - ok 22:22:36.0052 0x1508 Serenum - ok 22:22:36.0064 0x1508 Serial - ok 22:22:36.0082 0x1508 sermouse - ok 22:22:36.0142 0x1508 SessionEnv - ok 22:22:36.0205 0x1508 sfloppy - ok 22:22:36.0205 0x1508 SharedAccess - ok 22:22:36.0284 0x1508 ShellHWDetection - ok 22:22:36.0318 0x1508 shpamsvc - ok 22:22:36.0474 0x1508 SiSRaid2 - ok 22:22:36.0573 0x1508 SiSRaid4 - ok 22:22:37.0135 0x1508 [ 0B70786BD1062CD4C6B58E412B9C3E55, 60ED027642FFF97BFFA55AE3EFFCCBB6D6AD8196D35E9ED06F9AF431E3C0402A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 22:22:37.0165 0x1508 SkypeUpdate - ok 22:22:37.0279 0x1508 [ 8A6571231D93C08434A56E19E33A35CB, 78A12B58D129D5B2017C9A94734656B9F1ED41345DF1D01F82702D4D95C1BE3F ] SmbDrvI C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys 22:22:37.0293 0x1508 SmbDrvI - ok 22:22:37.0403 0x1508 smphost - ok 22:22:37.0434 0x1508 SmsRouter - ok 22:22:37.0512 0x1508 SNMPTRAP - ok 22:22:37.0562 0x1508 spaceport - ok 22:22:37.0609 0x1508 SpbCx - ok 22:22:37.0734 0x1508 Spooler - ok 22:22:37.0763 0x1508 sppsvc - ok 22:22:37.0826 0x1508 srv - ok 22:22:37.0877 0x1508 srv2 - ok 22:22:37.0892 0x1508 srvnet - ok 22:22:37.0970 0x1508 SSDPSRV - ok 22:22:38.0033 0x1508 SstpSvc - ok 22:22:38.0436 0x1508 [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe 22:22:38.0467 0x1508 ss_conn_service - ok 22:22:38.0581 0x1508 StateRepository - ok 22:22:38.0769 0x1508 stexstor - ok 22:22:38.0800 0x1508 stisvc - ok 22:22:38.0839 0x1508 storahci - ok 22:22:39.0018 0x1508 storflt - ok 22:22:39.0034 0x1508 stornvme - ok 22:22:39.0179 0x1508 storqosflt - ok 22:22:39.0244 0x1508 StorSvc - ok 22:22:39.0253 0x1508 storufs - ok 22:22:39.0427 0x1508 storvsc - ok 22:22:39.0505 0x1508 svsvc - ok 22:22:39.0642 0x1508 swenum - ok 22:22:39.0705 0x1508 swprv - ok 22:22:39.0803 0x1508 Synth3dVsc - ok 22:22:40.0162 0x1508 [ 7DC2B34FB6F1798F2D13453E0321D025, 60EF12A8824384DD88D9C5D188E8FB137F0F85A63C06AAF720CB2D616EB847F4 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys 22:22:40.0194 0x1508 SynTP - ok 22:22:40.0566 0x1508 [ 6FBDBC24B1642868E041463795CBFA44, E9FA0DB094E7B2129ABD325BC91A48D6646380D6AA97BE6233C220E0C98637AF ] SynTPEnhService C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe 22:22:40.0606 0x1508 SynTPEnhService - ok 22:22:40.0684 0x1508 SysMain - ok 22:22:40.0841 0x1508 SystemEventsBroker - ok 22:22:40.0872 0x1508 TabletInputService - ok 22:22:40.0903 0x1508 TapiSrv - ok 22:22:40.0934 0x1508 Tcpip - ok 22:22:40.0950 0x1508 Tcpip6 - ok 22:22:41.0028 0x1508 tcpipreg - ok 22:22:41.0076 0x1508 tdx - ok 22:22:41.0076 0x1508 terminpt - ok 22:22:41.0140 0x1508 TermService - ok 22:22:41.0360 0x1508 [ 8F14DE79EBE73D6D717B8455E64DDA86, 7561D79B1F213AC4877E7972CCD2926228330CDDE244FA8E3B77F4FB192BACC8 ] TGCM_ImportWiFiSvc C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe 22:22:41.0376 0x1508 TGCM_ImportWiFiSvc - ok 22:22:41.0423 0x1508 Themes - ok 22:22:41.0469 0x1508 TieringEngineService - ok 22:22:41.0548 0x1508 tiledatamodelsvc - ok 22:22:41.0563 0x1508 TimeBrokerSvc - ok 22:22:41.0579 0x1508 TPM - ok 22:22:41.0594 0x1508 TrkWks - ok 22:22:41.0719 0x1508 TrustedInstaller - ok 22:22:41.0735 0x1508 tsusbflt - ok 22:22:41.0957 0x1508 TsUsbGD - ok 22:22:41.0972 0x1508 tunnel - ok 22:22:42.0004 0x1508 tzautoupdate - ok 22:22:42.0088 0x1508 UASPStor - ok 22:22:42.0090 0x1508 UcmCx0101 - ok 22:22:42.0169 0x1508 UcmTcpciCx0101 - ok 22:22:42.0235 0x1508 UcmUcsi - ok 22:22:42.0236 0x1508 Ucx01000 - ok 22:22:42.0332 0x1508 UdeCx - ok 22:22:42.0347 0x1508 udfs - ok 22:22:42.0410 0x1508 UEFI - ok 22:22:42.0425 0x1508 Ufx01000 - ok 22:22:42.0504 0x1508 UfxChipidea - ok 22:22:42.0551 0x1508 ufxsynopsys - ok 22:22:42.0632 0x1508 UI0Detect - ok 22:22:42.0648 0x1508 umbus - ok 22:22:42.0741 0x1508 UmPass - ok 22:22:42.0773 0x1508 UmRdpService - ok 22:22:42.0824 0x1508 UnistoreSvc - ok 22:22:43.0327 0x1508 [ E1A119AD21F5AFE22EB516C549306D3D, 48769D5E7A78B7A2C00F1F6798AC133CF3E0B2C76F71D3719BD741DDD8F2D229 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 22:22:43.0357 0x1508 UNS - ok 22:22:43.0373 0x1508 upnphost - ok 22:22:43.0451 0x1508 UrsChipidea - ok 22:22:43.0467 0x1508 UrsCx01000 - ok 22:22:43.0549 0x1508 UrsSynopsys - ok 22:22:43.0642 0x1508 [ 8047D8AFA070A4C3B9FCBDBF77A84C45, D8B47716EE57391E3B9CBE3B35FF1F933F08E40B1C8C12EB5BE2438D9E409FF0 ] usb3Hub C:\WINDOWS\System32\drivers\usb3Hub.sys 22:22:43.0658 0x1508 usb3Hub - ok 22:22:43.0767 0x1508 [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64 C:\WINDOWS\System32\Drivers\usbaapl64.sys 22:22:43.0811 0x1508 USBAAPL64 - ok 22:22:43.0860 0x1508 usbccgp - ok 22:22:44.0048 0x1508 usbcir - ok 22:22:44.0079 0x1508 usbehci - ok 22:22:44.0126 0x1508 usbhub - ok 22:22:44.0157 0x1508 USBHUB3 - ok 22:22:44.0184 0x1508 usbohci - ok 22:22:44.0317 0x1508 usbprint - ok 22:22:44.0335 0x1508 usbser - ok 22:22:44.0398 0x1508 USBSTOR - ok 22:22:44.0445 0x1508 usbuhci - ok 22:22:44.0445 0x1508 USBXHCI - ok 22:22:44.0548 0x1508 UserDataSvc - ok 22:22:44.0564 0x1508 UserManager - ok 22:22:44.0673 0x1508 UsoSvc - ok 22:22:44.0689 0x1508 VaultSvc - ok 22:22:44.0782 0x1508 vdrvroot - ok 22:22:44.0845 0x1508 vds - ok 22:22:44.0907 0x1508 VerifierExt - ok 22:22:44.0923 0x1508 vhdmp - ok 22:22:44.0923 0x1508 vhf - ok 22:22:45.0395 0x1508 [ 73A8377232E54A485E204165892B58FD, 9B3B9F14BB0C2967B8BCAC6E8C81ED6772CE5F6B014009BEB9946741FF78F771 ] vm331avs C:\WINDOWS\System32\Drivers\vm331avs.sys 22:22:45.0426 0x1508 vm331avs - ok 22:22:45.0504 0x1508 vmbus - ok 22:22:45.0504 0x1508 VMBusHID - ok 22:22:45.0611 0x1508 vmgid - ok 22:22:45.0626 0x1508 vmicguestinterface - ok 22:22:45.0642 0x1508 vmicheartbeat - ok 22:22:45.0658 0x1508 vmickvpexchange - ok 22:22:45.0673 0x1508 vmicrdv - ok 22:22:45.0673 0x1508 vmicshutdown - ok 22:22:45.0673 0x1508 vmictimesync - ok 22:22:45.0689 0x1508 vmicvmsession - ok 22:22:45.0689 0x1508 vmicvss - ok 22:22:45.0705 0x1508 volmgr - ok 22:22:45.0705 0x1508 volmgrx - ok 22:22:45.0705 0x1508 volsnap - ok 22:22:45.0783 0x1508 volume - ok 22:22:45.0881 0x1508 vpci - ok 22:22:46.0006 0x1508 [ 6D1FEF6AB025EAEDA5977587AB36B6EF, 1C65F5D7200EA918AD6D5FCCD60D5C2B5240B57E0AE65ECFB94076CD45C1852E ] vpnagent C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe 22:22:46.0038 0x1508 vpnagent - ok 22:22:46.0096 0x1508 [ 0F42C39016F82F345C0F2DB2D5B90EB4, 2E957E72BB8D0293F61FA7385BA9400DF7759E1E3D35FE24F3877A6460988F4D ] vpnva C:\WINDOWS\System32\drivers\vpnva64-6.sys 22:22:46.0104 0x1508 vpnva - ok 22:22:46.0106 0x1508 vsmraid - ok 22:22:46.0120 0x1508 VSS - ok 22:22:46.0223 0x1508 VSTXRAID - ok 22:22:46.0295 0x1508 vwifibus - ok 22:22:46.0311 0x1508 vwififlt - ok 22:22:46.0327 0x1508 vwifimp - ok 22:22:46.0413 0x1508 W32Time - ok 22:22:46.0428 0x1508 WacomPen - ok 22:22:46.0579 0x1508 WalletService - ok 22:22:46.0610 0x1508 wanarp - ok 22:22:46.0610 0x1508 wanarpv6 - ok 22:22:46.0657 0x1508 wbengine - ok 22:22:46.0673 0x1508 WbioSrvc - ok 22:22:46.0720 0x1508 wcifs - ok 22:22:46.0798 0x1508 Wcmsvc - ok 22:22:46.0798 0x1508 wcncsvc - ok 22:22:46.0814 0x1508 wcnfs - ok 22:22:46.0862 0x1508 WdBoot - ok 22:22:46.0868 0x1508 Wdf01000 - ok 22:22:46.0876 0x1508 WdFilter - ok 22:22:46.0896 0x1508 WdiServiceHost - ok 22:22:46.0896 0x1508 WdiSystemHost - ok 22:22:46.0942 0x1508 wdiwifi - ok 22:22:47.0067 0x1508 WdNisDrv - ok 22:22:47.0228 0x1508 WdNisSvc - ok 22:22:47.0274 0x1508 WebClient - ok 22:22:47.0289 0x1508 Wecsvc - ok 22:22:47.0399 0x1508 WEPHOSTSVC - ok 22:22:47.0414 0x1508 wercplsupport - ok 22:22:47.0446 0x1508 WerSvc - ok 22:22:47.0446 0x1508 WFPLWFS - ok 22:22:47.0508 0x1508 WiaRpc - ok 22:22:47.0580 0x1508 WIMMount - ok 22:22:47.0595 0x1508 WinDefend - ok 22:22:47.0674 0x1508 WindowsTrustedRT - ok 22:22:47.0689 0x1508 WindowsTrustedRTProxy - ok 22:22:47.0830 0x1508 WinHttpAutoProxySvc - ok 22:22:47.0930 0x1508 WinMad - ok 22:22:48.0055 0x1508 Winmgmt - ok 22:22:48.0117 0x1508 WinRM - ok 22:22:48.0216 0x1508 WINUSB - ok 22:22:48.0216 0x1508 WinVerbs - ok 22:22:48.0276 0x1508 wisvc - ok 22:22:48.0276 0x1508 WlanSvc - ok 22:22:48.0292 0x1508 wlidsvc - ok 22:22:48.0308 0x1508 WmiAcpi - ok 22:22:48.0308 0x1508 wmiApSrv - ok 22:22:48.0355 0x1508 WMPNetworkSvc - ok 22:22:48.0386 0x1508 Wof - ok 22:22:48.0401 0x1508 workfolderssvc - ok 22:22:48.0417 0x1508 WPDBusEnum - ok 22:22:48.0495 0x1508 WpdUpFltr - ok 22:22:48.0495 0x1508 WpnService - ok 22:22:48.0564 0x1508 WpnUserService - ok 22:22:48.0595 0x1508 ws2ifsl - ok 22:22:48.0642 0x1508 wscsvc - ok 22:22:48.0673 0x1508 WSDPrintDevice - ok 22:22:48.0705 0x1508 WSDScan - ok 22:22:48.0705 0x1508 WSearch - ok 22:22:48.0835 0x1508 [ 72B4E9DF6456C43C42A1419B09486045, 536BA7377B5BEA7EA46864453933111DB88DB8FB689C68915ACD7261A996E61D ] wsvd C:\WINDOWS\system32\DRIVERS\wsvd.sys 22:22:48.0856 0x1508 wsvd - ok 22:22:48.0888 0x1508 wuauserv - ok 22:22:48.0888 0x1508 WudfPf - ok 22:22:48.0919 0x1508 WUDFRd - ok 22:22:48.0997 0x1508 wudfsvc - ok 22:22:49.0091 0x1508 WwanSvc - ok 22:22:49.0122 0x1508 XblAuthManager - ok 22:22:49.0218 0x1508 XblGameSave - ok 22:22:49.0282 0x1508 xboxgip - ok 22:22:49.0391 0x1508 XboxNetApiSvc - ok 22:22:49.0547 0x1508 [ 24E57041608ED6A9D7FDAD0D9EC214E2, 895A16072F5EFFF57A7DCA21917540726BF816A2746EC47A066AAD363F69E5D7 ] XHCIPort C:\WINDOWS\System32\drivers\XHCIPort.sys 22:22:49.0563 0x1508 XHCIPort - ok 22:22:49.0610 0x1508 xinputhid - ok 22:22:49.0610 0x1508 ================ Scan global =============================== 22:22:49.0970 0x1508 [ Global ] - ok 22:22:49.0970 0x1508 ================ Scan MBR ================================== 22:22:49.0970 0x1508 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0 22:22:50.0048 0x1508 \Device\Harddisk0\DR0 - ok 22:22:50.0129 0x1508 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1 22:22:51.0454 0x1508 \Device\Harddisk1\DR1 - ok 22:22:51.0454 0x1508 ================ Scan VBR ================================== 22:22:51.0454 0x1508 [ 4442C0A6C04745FB6E5882AD4133A05F ] \Device\Harddisk0\DR0\Partition1 22:22:51.0470 0x1508 \Device\Harddisk0\DR0\Partition1 - ok 22:22:51.0470 0x1508 [ 59014596487591A949E8A045D0E522A6 ] \Device\Harddisk0\DR0\Partition2 22:22:51.0470 0x1508 \Device\Harddisk0\DR0\Partition2 - ok 22:22:51.0501 0x1508 [ 60110377D545070931DE2C735CC49B23 ] \Device\Harddisk1\DR1\Partition1 22:22:51.0501 0x1508 \Device\Harddisk1\DR1\Partition1 - ok 22:22:51.0548 0x1508 [ 1A7093003BA2FCD59A56245DD826495B ] \Device\Harddisk1\DR1\Partition2 22:22:51.0551 0x1508 \Device\Harddisk1\DR1\Partition2 - ok 22:22:51.0567 0x1508 [ BA4366A4E9E493BADFFECE0B067B5CA8 ] \Device\Harddisk1\DR1\Partition3 22:22:51.0567 0x1508 \Device\Harddisk1\DR1\Partition3 - ok 22:22:51.0613 0x1508 [ 2D524F05766D084E9BC1747B63390F77 ] \Device\Harddisk1\DR1\Partition4 22:22:51.0613 0x1508 \Device\Harddisk1\DR1\Partition4 - ok 22:22:51.0660 0x1508 [ 52B95B5A5511A5358F9FEF004E291253 ] \Device\Harddisk1\DR1\Partition5 22:22:51.0692 0x1508 \Device\Harddisk1\DR1\Partition5 - ok 22:22:51.0723 0x1508 [ 85667DFBE8D94B5EFF93FF83FF44ACBD ] \Device\Harddisk1\DR1\Partition6 22:22:51.0754 0x1508 \Device\Harddisk1\DR1\Partition6 - ok 22:22:51.0785 0x1508 [ D72F8FE5DE14D91AF9254F4DD5441C81 ] \Device\Harddisk1\DR1\Partition7 22:22:51.0785 0x1508 \Device\Harddisk1\DR1\Partition7 - ok 22:22:51.0835 0x1508 [ 67576F561E36183297764E14D59AF4B1 ] \Device\Harddisk1\DR1\Partition8 22:22:51.0862 0x1508 \Device\Harddisk1\DR1\Partition8 - ok 22:22:52.0003 0x1508 [ 7E665B8C94FE1CD22464F8DC964092EA ] \Device\Harddisk1\DR1\Partition9 22:22:52.0088 0x1508 \Device\Harddisk1\DR1\Partition9 - ok 22:22:52.0089 0x1508 ================ Scan generic autorun ====================== 22:22:54.0705 0x1508 [ F4289711A51D52B537354ABB5DB95EA2, 494FFA26BADAB67DB8E8C42B439A725106089D588C4AD44A038A86C60FC5C44B ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 22:22:55.0103 0x1508 RtHDVCpl - ok 22:22:55.0752 0x1508 [ CEE343A27FE95BD6510E78A0EA7E012C, DC2D659EFEFF56B69F4CEB706C7F3EBECEE99C845FEFBB1D936130755B7D4BA1 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe 22:22:55.0798 0x1508 RtHDVBg_Dolby - ok 22:22:56.0689 0x1508 [ DF99547E3CD8C828202546ED9C4D7D25, 83013EEE760004E812CD63662843D1F3972AFBF83B4739935FC746F470FA7188 ] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe 22:22:57.0289 0x1508 Energy Management - ok 22:22:57.0383 0x1508 [ D41309D7717CC5D62C2E0C5EB6B127B3, 50F46F762320C9B2560AA356B31EB564651F92BDA2DBCE34E3E349A65E347FAC ] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe 22:22:57.0383 0x1508 EnergyUtility - ok 22:22:57.0690 0x1508 [ 39CF316EB5842AE27CC0D3CC4E2840DE, BC4D4ED926F988B7B70CC87B7EC92D148DA6BC39C5C514751F1B0CA69D0F9081 ] D:\Programme\Office14\BCSSync.exe 22:22:57.0736 0x1508 BCSSync - ok 22:22:58.0158 0x1508 [ 81B72C1A79FA177859EA9E7EA849108F, 085F8E8FDC747D83D7276578A396B70A590F0C403CF28E9D5CB8593F2E9F4C69 ] C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe 22:22:58.0174 0x1508 Samsung Link - ok 22:22:58.0174 0x1508 SynTPEnh - ok 22:22:58.0428 0x1508 [ DD2764BF044F573EB40EF4ED65A53474, 920D1AF6E284F4E3E1D200B660F5DB65938D51D5E7FBD1AF6EBB2E0BB8F30F15 ] C:\Program Files (x86)\USB Camera\VM331STI.EXE 22:22:58.0459 0x1508 331BigDog - ok 22:22:58.0544 0x1508 332BigDog - ok 22:22:58.0986 0x1508 [ C9FA5D8E2D841B03025FEFA837D07F0A, CFEC08018E0391AD28F69300F00F8322A791876C1DA21365EA6BF320F8270A33 ] C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe 22:22:59.0033 0x1508 Smart Update - ok 22:22:59.0399 0x1508 [ A1741C3B79F9DF8895E05EF43579E74B, 446094FDBA93518ABE1CDEC50E24AB60BC7CA78022A289AF5C21461778FD8001 ] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe 22:22:59.0415 0x1508 YouCam Mirage - ok 22:22:59.0595 0x1508 [ 79EDDBCBFFC23585BC1495AFC03CC4D7, 325A6C067A52BAD7070C1C758EA69645FD8083AC6D0ABA8340BDBE1A712E005F ] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe 22:22:59.0610 0x1508 YouCam Tray - ok 22:23:00.0021 0x1508 [ B7995C675014EEBE77A0BEB7AFCCFC08, 41D186C63273301CF0A1C1EE7B6EB0BB75A251DD441532C5CEB7A4095FB103CD ] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe 22:23:00.0036 0x1508 RemoteControl10 - ok 22:23:00.0036 0x1508 mcui_exe - ok 22:23:00.0492 0x1508 [ 43E946AAD268FEAFB1E286677E70CB5D, 7798926B3CF11D1CF7DFF9B3D67AD3DC67010A62F3132CAEA273EB299A61B176 ] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe 22:23:00.0528 0x1508 Intel AppUp(SM) center - ok 22:23:00.0877 0x1508 [ 3A767D4CF95CAC1299554B89C4DE5920, E18D2BD562981A4BA54A677C8838ABE9056D1704EC2CC1A8B465390CAC9D1875 ] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe 22:23:00.0908 0x1508 KiesTrayAgent - ok 22:23:01.0686 0x1508 [ CDFFB0058BA113ED8C6099DE11FAAD49, D258D1F340734113C1E538C32DF15011009C19A9E88E0F471E3D8387D4EA7AEB ] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE 22:23:01.0749 0x1508 CanonQuickMenu - ok 22:23:01.0890 0x1508 [ B793DDE01D181ED91F333BF10FE2FC50, F9BA0FD8EC0C0E9D7E5969BC9ED0D0322EDFC8E65B11F642A7118B41F5BF197F ] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe 22:23:01.0905 0x1508 IJNetworkScannerSelectorEX - ok 22:23:01.0999 0x1508 [ 0EF0822810009D58118CCDFD098FA9F4, 9FAA263057898BCDBCB0A064C463F48D149474AA339A3C4C47626CC118750D2D ] C:\Program Files (x86)\iTunes\iTunesHelper.exe 22:23:02.0015 0x1508 iTunesHelper - ok 22:23:02.0137 0x1508 [ 1BC31F797516DC7B7446B62A849D5905, 49B35A41F1C3739800CBA2A559C2AEFE89FBC090F8305681AF3B379B639E16AA ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 22:23:02.0152 0x1508 avgnt - ok 22:23:02.0301 0x1508 [ FB4A23C4A1D1108B8FFBCE8053259008, AC370998F118EE488F5B35B4CD3C8FC1092B85805FC1ACDBF0897B307EF9DB0E ] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe 22:23:02.0333 0x1508 Cisco AnyConnect Secure Mobility Agent for Windows - ok 22:23:02.0536 0x1508 [ 3E04F1E482357B1FC8B088197C3D9FF8, 85524ADDC27ADC831EBBD24E079B412CFDC69E5F594BD153319087665A28D546 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 22:23:02.0567 0x1508 Adobe ARM - ok 22:23:02.0708 0x1508 [ 258E2CD2C4984A977106C9EF7CA8AF69, D8F6409D5F5782CC27D159D18E914A3DB59D8644D7017CA6F84F0CF30E95174C ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe 22:23:02.0723 0x1508 Avira SystrayStartTrigger - ok 22:23:02.0929 0x1508 OneDriveSetup - ok 22:23:02.0945 0x1508 OneDriveSetup - ok 22:23:02.0945 0x1508 OneDriveSetup - ok 22:23:03.0056 0x1508 WAB Migrate - ok 22:23:03.0399 0x1508 [ 6F8574160EE5D7E22FD8BB4DD1F6EF79, 92DB7E3C3054BBB0958F852ACA9BF56931ECEDDD10862198D39E3C42F666E850 ] C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe 22:23:03.0462 0x1508 Spotify Web Helper - ok 22:23:03.0915 0x1508 [ CD7DC286D2FDFACB965C3E10967B2199, 30FFB133E70D694BE6968E86E999C797EE7349DCC4E9ACFB338412C039374388 ] C:\Users\Felix\AppData\Local\Microsoft\OneDrive\OneDrive.exe 22:23:03.0946 0x1508 OneDrive - ok 22:23:04.0147 0x1508 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe 22:23:04.0180 0x1508 Dropbox Update - ok 22:23:04.0396 0x1508 GoogleDriveSync - ok 22:23:04.0789 0x1508 [ 5ABED82D8CA1208EE94E40B07FBB831A, BF623AF3F8AFED8C852E068A2DA19B227541399AAB9D0119FC418397965663F9 ] C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms 22:23:05.0281 0x1508 Moveslink2 - detected UnsignedFile.Multi.Generic ( 1 ) 22:23:12.0492 0x1508 Moveslink2 ( UnsignedFile.Multi.Generic ) - warning 22:23:19.0736 0x1508 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.24.143 ), 0x41000 ( enabled : updated ) 22:23:19.0736 0x1508 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x62100 ( disabled : updated ) 22:23:19.0783 0x1508 Win FW state via NFP2: enabled ( trusted ) 22:23:26.0939 0x1508 ============================================================ 22:23:26.0939 0x1508 Scan finished 22:23:26.0939 0x1508 ============================================================ 22:23:26.0939 0x22d4 Detected object count: 1 22:23:26.0939 0x22d4 Actual detected object count: 1 22:25:33.0642 0x22d4 Moveslink2 ( UnsignedFile.Multi.Generic ) - skipped by user 22:25:33.0642 0x22d4 Moveslink2 ( UnsignedFile.Multi.Generic ) - User select action: Skip VG Felix |
13.02.2017, 17:28 | #6 |
/// TB-Ausbilder | Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Servus, Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
13.02.2017, 23:21 | #7 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Log Datei von AdwCleaner: Code:
ATTFilter # AdwCleaner v6.043 - Bericht erstellt am 13/02/2017 um 21:46:13 # Aktualisiert am 27/01/2017 von Malwarebytes # Datenbank : 2017-02-13.1 [Server] # Betriebssystem : Windows 10 Home (X64) # Benutzername : Felix - IDEA-PC # Gestartet von : C:\Users\Felix\Desktop\AdwCleaner_6.043.exe # Modus: Löschen # Unterstützung : https://www.malwarebytes.com/support ***** [ Dienste ] ***** ***** [ Ordner ] ***** ***** [ Dateien ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** [-] [C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: gimp.softonic.de ************************* :: "Tracing" Schlüssel gelöscht :: Winsock Einstellungen zurückgesetzt :: "Image File Execution Options" Schlüssel gelöscht :: "Prefetch" Dateien gelöscht :: Proxy Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [4011 Bytes] - [07/02/2017 21:05:44] C:\AdwCleaner\AdwCleaner[C2].txt - [1210 Bytes] - [13/02/2017 21:46:13] C:\AdwCleaner\AdwCleaner[S0].txt - [3841 Bytes] - [07/02/2017 21:04:53] C:\AdwCleaner\AdwCleaner[S1].txt - [1530 Bytes] - [13/02/2017 21:45:18] ########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1429 Bytes] ########## Log Datei von mbam: Code:
ATTFilter Malwarebytes www.malwarebytes.com -Protokolldetails- Scan-Datum: 13.02.17 Scan-Zeit: 21:56 Protokolldatei: mbam.txt Administrator: Ja -Softwaredaten- Version: 3.0.6.1469 Komponentenversion: 1.0.50 Version des Aktualisierungspakets: 1.0.1254 Lizenz: Testversion -Systemdaten- Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: idea-PC\Felix -Scan-Übersicht- Scan-Typ: Bedrohungs-Scan Ergebnis: Abgeschlossen Gescannte Objekte: 459619 Abgelaufene Zeit: 15 Min., 38 Sek. -Scan-Optionen- Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert -Scan-Details- Prozess: 0 (keine bösartigen Elemente erkannt) Modul: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswert: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Daten-Stream: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Datei: 4 PUP.Optional.DownloadSponsor, C:\USERS\FELIX\APPDATA\LOCAL\TEMP\DMR\DMR_72.EXE, In Quarantäne, [641], [365036],1.0.1254 PUP.Optional.ChipDigital, C:\USERS\FELIX\DOWNLOADS\VLC MEDIA PLAYER 64 BIT - CHIP-INSTALLER.EXE, In Quarantäne, [19299], [282424],1.0.1254 PUP.Optional.PCKeeper, C:\USERS\FELIX\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_app.pckeeper.com_0.localstorage, In Quarantäne, [1059], [254972],1.0.1254 PUP.Optional.PCKeeper, C:\USERS\FELIX\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_app.pckeeper.com_0.localstorage-journal, In Quarantäne, [1059], [254972],1.0.1254 Physischer Sektor: 0 (keine bösartigen Elemente erkannt) (end) Log Datei von JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.0 (12.05.2016) Operating System: Windows 10 Home x64 Ran by Felix (Administrator) on 13.02.2017 at 22:46:45,93 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 3 Successfully deleted: C:\Users\Felix\AppData\Local\nico mak computing (Folder) Successfully deleted: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default\searchplugins\avast-search.xml (File) Successfully deleted: C:\WINDOWS\wininit.ini (File) Registry: 3 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{495008F0-48AF-4DFF-8CA5-B8CDDE6A94A6} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (Registry Key) Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 13.02.2017 at 22:51:04,73 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2017 durchgeführt von Felix (Administrator) auf IDEA-PC (13-02-2017 22:53:16) Gestartet von C:\Users\Felix\Desktop Geladene Profile: Felix (Verfügbare Profile: UpdatusUser & Felix) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13265480 2013-01-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1273416 2013-01-15] (Realtek Semiconductor) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-07-03] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-07-03] (Lenovo(beijing) Limited) HKLM\...\Run: [BCSSync] => D:\Programme\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-09-29] (Copyright 2013 SAMSUNG) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-12-06] (Synaptics Incorporated) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro) HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE HKLM-x32\...\Run: [Smart Update] => C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe [1706576 2012-08-02] (Lenovo) HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [708496 2015-02-19] (Cisco Systems, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-1078537693-2019248843-686258836-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02132017224119696\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Spotify Web Helper] => C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2344768 2015-11-21] (Spotify Ltd) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Dropbox Update] => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-07] (Dropbox, Inc.) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-11-30] (Google) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Moveslink2] => C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-12-06] ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Motion Control.lnk [2013-07-03] ShortcutTarget: Motion Control.lnk -> C:\Program Files (x86)\Lenovo\MotionControl\MotionControl.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Benachrichtigungsdienst.lnk [2015-12-06] ShortcutTarget: Update Benachrichtigungsdienst.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-12-06] ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.) Startup: C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-02-08] ShortcutTarget: Dropbox.lnk -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{1833352f-fa61-454f-b341-8d0423cc773b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{7dc836cf-237c-445f-9503-b94866736e8b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/ HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com SearchScopes: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> DefaultScope {495008F0-48AF-4DFF-8CA5-B8CDDE6A94A6} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programme\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-08] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-08] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) FireFox: ======== FF ProfilePath: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default [2017-02-07] FF SelectedSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchUrl: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF Keyword.URL: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF Homepage: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/ FF NewTab: Mozilla\Firefox\Profiles\7wdsyub7.default -> about:newtab FF Extension: (Avira Browser Safety) - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default\Extensions\abs@avira.com [2015-04-08] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2014-10-15] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-28] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Programme\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-28] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2012-12-13] (Nitro PDF) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default [2017-02-13] CHR Extension: (Google Präsentationen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05] CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05] CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03] CHR Extension: (Device screens) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckbkecggifaleckpgbldoafpgpfeglim [2017-01-29] CHR Extension: (Google-Suche) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Tabellen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05] CHR Extension: (Avira Browserschutz) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-20] CHR Extension: (Google Docs Offline) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23] CHR Extension: (Citavi Picker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2016-10-05] CHR Extension: (Google Mail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-06] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1078537693-2019248843-686258836-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [Datei ist nicht signiert] S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert] R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation) R2 irstrtsv; C:\WINDOWS\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-13] (Nitro PDF Software) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-09-29] (Copyright 2013 SAMSUNG) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-12-06] (Synaptics Incorporated) R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-08-02] (Telefónica I+D) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153904 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2015-12-04] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-05-12] (Avira Operations GmbH & Co. KG) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] () S3 ewusbnet; C:\WINDOWS\system32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.) R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation) R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation) R3 irstrtdv; C:\WINDOWS\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) R3 LAD; C:\WINDOWS\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>) R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-13] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-13] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-13] (Malwarebytes) R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-13] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-13] (Malwarebytes) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-12-06] (Synaptics Incorporated) R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\WINDOWS\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-07-21] (Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) R3 XHCIPort; C:\WINDOWS\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-13 22:51 - 2017-02-13 22:51 - 00001273 _____ C:\Users\Felix\Desktop\JRT.txt 2017-02-13 22:45 - 2017-02-13 22:46 - 01663040 _____ (Malwarebytes) C:\Users\Felix\Desktop\JRT.exe 2017-02-13 22:42 - 2017-02-13 22:42 - 00001825 _____ C:\Users\Felix\Desktop\mbam.txt 2017-02-13 22:35 - 2017-02-13 22:35 - 00000000 ___HD C:\OneDriveTemp 2017-02-13 21:56 - 2017-02-13 21:56 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-02-13 21:55 - 2017-02-13 22:41 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-02-13 21:55 - 2017-02-13 22:41 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-02-13 21:55 - 2017-02-13 22:41 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-02-13 21:55 - 2017-02-13 22:37 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-02-13 21:55 - 2017-02-13 21:55 - 00001923 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\Program Files\Malwarebytes 2017-02-13 21:55 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-02-13 21:53 - 2017-02-13 21:54 - 55566792 _____ (Malwarebytes ) C:\Users\Felix\Desktop\mb3-setup-consumer-3.0.6.1469.exe 2017-02-13 21:53 - 2017-02-13 21:53 - 00001511 _____ C:\Users\Felix\Desktop\AdwCleaner[C2].txt 2017-02-13 21:38 - 2017-02-13 21:38 - 04015056 _____ C:\Users\Felix\Desktop\AdwCleaner_6.043.exe 2017-02-12 22:19 - 2017-02-13 21:41 - 00101334 _____ C:\TDSSKiller.3.1.0.12_12.02.2017_22.19.23_log.txt 2017-02-12 22:19 - 2017-02-12 22:19 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Felix\Desktop\tdsskiller.exe 2017-02-12 22:11 - 2017-02-12 22:12 - 00062716 _____ C:\Users\Felix\Desktop\Addition.txt 2017-02-12 22:09 - 2017-02-13 22:54 - 00031122 _____ C:\Users\Felix\Desktop\FRST.txt 2017-02-12 22:07 - 2017-02-13 22:53 - 00000000 ____D C:\FRST 2017-02-12 22:04 - 2017-02-12 22:07 - 02421248 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe 2017-02-12 21:56 - 2017-02-12 21:57 - 00000000 ____D C:\Users\Felix\Desktop\Sonstiges 2017-02-12 19:39 - 2016-12-29 14:10 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-02-12 19:34 - 2017-02-12 19:35 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2017-02-08 00:35 - 2017-02-08 00:35 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-02-07 23:29 - 2017-02-07 23:29 - 04284888 _____ (AVAST Software) C:\Users\Felix\Downloads\avast-browser-cleanup-sfx121.exe 2017-02-07 23:29 - 2017-02-07 23:29 - 00004386 _____ C:\WINDOWS\System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00003512 _____ C:\WINDOWS\System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00001201 _____ C:\Users\Felix\Desktop\Avast Browser Cleanup.lnk 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Avast Browser Cleanup 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\AVAST Software 2017-02-07 20:58 - 2017-02-13 21:46 - 00000000 ____D C:\AdwCleaner 2017-02-07 20:48 - 2017-02-07 20:58 - 04015056 _____ C:\Users\Felix\Downloads\adwcleaner_6.043.exe 2017-02-07 20:43 - 2017-02-07 20:47 - 00916922 _____ C:\Users\Felix\Downloads\Nicht bestätigt 586294.crdownload 2017-02-07 20:40 - 2017-02-07 20:40 - 00003396 _____ C:\WINDOWS\System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} 2017-02-06 22:27 - 2017-02-07 06:34 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2017-02-06 22:27 - 2017-02-07 06:33 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2017-02-06 22:27 - 2017-02-06 22:27 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2017-02-06 21:55 - 2017-02-06 21:56 - 01496584 _____ C:\Users\Felix\Downloads\SpyBot Search Destroy - CHIP-Installer.exe 2017-02-04 20:17 - 2017-02-04 20:17 - 00002347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-02-04 20:17 - 2017-02-04 20:17 - 00002335 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-02-04 20:12 - 2017-02-04 20:12 - 01129376 _____ (Google Inc.) C:\Users\Felix\Downloads\ChromeSetup (1).exe 2017-01-29 21:25 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-29 21:25 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-29 18:31 - 2017-02-13 22:36 - 00000000 ____D C:\Users\Felix\AppData\Local\Deployment 2017-01-29 18:24 - 2017-01-30 21:02 - 00000000 ____D C:\Users\Felix\AppData\Local\ConnectedDevicesPlatform 2017-01-29 18:21 - 2017-01-29 18:21 - 00000020 ___SH C:\Users\Felix\ntuser.ini 2017-01-29 18:14 - 2017-01-29 18:14 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-01-29 18:12 - 2017-01-29 18:12 - 00000000 ____D C:\ProgramData\USOShared 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Vorlagen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Startmenü 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagerr.xml 2017-01-29 17:46 - 2017-02-13 22:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-01-29 17:46 - 2017-01-29 17:46 - 00003916 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003670 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003648 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core 2017-01-29 17:46 - 2017-01-29 17:46 - 00003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d 2017-01-29 17:46 - 2017-01-29 17:46 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-01-29 17:46 - 2017-01-29 17:46 - 00003324 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1437387024 2017-01-29 17:46 - 2017-01-29 17:46 - 00003296 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1FA74D7C-CE39-44F9-83AC-3C7817F51C3A} 2017-01-29 17:46 - 2017-01-29 17:46 - 00002978 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-01-29 17:46 - 2017-01-29 17:46 - 00002938 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1078537693-2019248843-686258836-1002 2017-01-29 17:46 - 2017-01-29 17:46 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-29 17:46 - 2017-01-29 17:46 - 00002334 _____ C:\WINDOWS\System32\Tasks\MirageAgent 2017-01-29 17:46 - 2017-01-29 17:46 - 00002214 _____ C:\WINDOWS\System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} 2017-01-29 17:46 - 2017-01-29 17:46 - 00001908 _____ C:\WINDOWS\System32\Tasks\Dolby Selector 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero 2017-01-29 17:28 - 2017-01-29 17:28 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2017-01-29 17:18 - 2017-01-29 17:29 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-01-29 17:15 - 2017-02-13 21:46 - 00000000 ____D C:\Users\Felix 2017-01-29 17:15 - 2017-01-29 17:44 - 00000000 ____D C:\Users\UpdatusUser 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Anwendungsdaten 2017-01-29 17:08 - 2017-02-13 22:33 - 00000000 ____D C:\ProgramData\NVIDIA 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\Program Files (x86)\USB Camera 2017-01-29 17:08 - 2016-12-29 14:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00147000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-01-29 17:08 - 2016-12-22 00:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-01-29 17:07 - 2017-02-12 19:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-01-29 17:07 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-01-29 17:06 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files\Intel 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Synaptics 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Realtek 2017-01-29 17:06 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-01-29 17:06 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-01-29 17:04 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-01-29 16:59 - 2017-02-13 22:30 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-01-29 16:59 - 2017-01-29 18:18 - 00337992 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-29 16:59 - 2017-01-29 17:00 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-01-29 16:57 - 2017-01-29 18:06 - 00000000 ___DC C:\WINDOWS\Panther 2017-01-29 16:51 - 2017-02-12 19:34 - 00000000 ____D C:\Windows.old 2017-01-29 16:46 - 2017-01-29 16:46 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2017-01-29 16:46 - 2017-01-29 16:46 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml 2017-01-29 16:46 - 2017-01-29 16:46 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2017-01-29 16:46 - 2017-01-29 16:46 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll |
13.02.2017, 23:22 | #8 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Frst part 2: Code:
ATTFilter 2017-01-29 16:45 - 2017-01-29 16:45 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\system32\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS 2017-01-29 16:45 - 2017-01-29 16:45 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2017-01-29 16:45 - 2017-01-29 16:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2017-01-29 16:22 - 2017-01-29 16:22 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-01-29 16:15 - 2017-01-29 17:29 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-01-29 16:13 - 2017-01-29 16:13 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll 2017-01-29 16:13 - 2017-01-29 16:13 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2017-01-29 16:13 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-01-29 16:13 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-01-17 21:40 - 2017-01-29 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-01-17 21:40 - 2017-01-17 21:40 - 00000000 ____D C:\Program Files\7-Zip 2017-01-17 21:36 - 2017-01-17 21:39 - 01496584 _____ C:\Users\Felix\Downloads\7 Zip 64 Bit - CHIP-Installer.exe 2017-01-17 05:56 - 2017-01-17 05:56 - 34717624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 28209080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00951224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00904760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00048696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2017-01-17 05:55 - 2017-01-17 05:55 - 02961336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 02594744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01598392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01047096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 00985144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 40134200 _____ C:\WINDOWS\system32\nvcompiler.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 35233336 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-01-17 05:53 - 2017-01-17 05:53 - 11017016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10907368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10453152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09246832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09000336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 08847016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 03509152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00698544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00586784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-01-17 00:59 - 2017-01-17 00:59 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-01-14 18:45 - 2017-01-14 18:45 - 00941917 _____ C:\Users\Felix\Desktop\PDF.pdf 2017-01-14 18:42 - 2017-01-14 18:42 - 00208292 _____ C:\Users\Felix\Desktop\eticket.pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-13 22:47 - 2014-10-14 20:05 - 00000000 ___RD C:\Users\Felix\OneDrive 2017-02-13 22:38 - 2015-07-20 11:09 - 00000000 ____D C:\Program Files (x86)\Opera 2017-02-13 22:38 - 2014-10-08 23:00 - 00000000 ___RD C:\Users\Felix\Dropbox 2017-02-13 22:34 - 2014-11-14 22:41 - 00000000 __SHD C:\Users\Felix\IntelGraphicsProfiles 2017-02-13 22:32 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-13 21:41 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-13 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-12 22:12 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-02-12 21:59 - 2015-03-06 21:41 - 00000000 ____D C:\Users\Felix\Desktop\Lisa_Canada_2 2017-02-12 19:59 - 2016-07-16 23:51 - 00551060 _____ C:\WINDOWS\system32\perfh007.dat 2017-02-12 19:59 - 2016-07-16 23:51 - 00103296 _____ C:\WINDOWS\system32\perfc007.dat 2017-02-12 19:59 - 2015-10-22 14:20 - 01566054 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-08 00:35 - 2014-10-08 22:57 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Dropbox 2017-02-07 21:16 - 2014-12-17 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-02-07 21:16 - 2014-10-07 20:39 - 00000000 ____D C:\ProgramData\Package Cache 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\ProgramData\Avira 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\Program Files (x86)\Avira 2017-02-07 20:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-07 20:38 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-02-06 22:03 - 2014-10-07 21:39 - 00000000 ____D C:\Felix 2017-02-04 20:17 - 2014-10-07 20:34 - 00000000 ____D C:\Program Files (x86)\Google 2017-01-30 21:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat 2017-01-29 18:46 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Local\Packages 2017-01-29 18:36 - 2015-10-22 15:04 - 00002432 _____ C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-29 18:23 - 2015-09-10 06:37 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-29 18:12 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate 2017-01-29 18:12 - 2014-11-14 22:40 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration 2017-01-29 18:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-01-29 17:46 - 2014-11-14 22:35 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries 2017-01-29 17:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-01-29 17:29 - 2016-07-16 07:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM 2017-01-29 17:29 - 2016-02-28 12:12 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto 2017-01-29 17:29 - 2015-12-06 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2017-01-29 17:29 - 2015-12-06 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2017-01-29 17:29 - 2015-10-30 19:44 - 00000000 ____D C:\WINDOWS\ShellNew 2017-01-29 17:29 - 2015-07-20 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2017-01-29 17:29 - 2015-04-10 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic 2017-01-29 17:29 - 2015-01-15 00:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-01-29 17:29 - 2014-11-27 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-01-29 17:29 - 2014-11-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2017-01-29 17:29 - 2014-10-23 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Benutzerregistrierung 2017-01-29 17:29 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Manual 2017-01-29 17:29 - 2014-10-23 19:58 - 00000000 ____D C:\WINDOWS\system32\STRING 2017-01-29 17:29 - 2014-10-15 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citavi 4 2017-01-29 17:29 - 2014-10-14 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP640 series 2017-01-29 17:29 - 2014-10-08 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-01-29 17:29 - 2013-07-03 11:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Photos 2017-01-29 17:28 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-01-29 17:28 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated 2017-01-29 17:23 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-01-29 17:23 - 2016-07-16 23:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2017-01-29 17:23 - 2014-10-23 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2017-01-29 17:23 - 2013-07-03 10:33 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles 2017-01-29 17:21 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2017-01-29 17:21 - 2014-11-12 00:10 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense 2017-01-29 17:21 - 2014-10-14 19:11 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\InputMethod 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-01-29 17:20 - 2015-07-27 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS 2017-01-29 17:20 - 2015-05-04 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco 2017-01-29 17:20 - 2014-11-26 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\o2 2017-01-29 17:20 - 2014-10-23 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series 2017-01-29 17:20 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2017-01-29 17:20 - 2014-10-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2017-01-29 17:20 - 2014-09-24 08:43 - 00000000 ____D C:\Program Files\Embedded Lockdown Manager 2017-01-29 17:18 - 2013-07-03 10:59 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:17 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:13 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help 2017-01-29 16:57 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing 2017-01-29 16:48 - 2016-07-16 12:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-01-29 16:15 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2017-01-29 15:24 - 2015-06-20 07:45 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job 2017-01-29 14:01 - 2014-10-08 19:26 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2017-01-24 19:24 - 2015-06-20 07:45 - 00001188 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job 2017-01-17 05:52 - 2016-09-12 21:10 - 03972960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-01-15 20:39 - 2014-10-23 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-14 18:42 - 2014-10-23 19:45 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Nitro PDF ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-10-07 20:08 - 2014-10-13 17:37 - 0003372 _____ () C:\Users\Felix\AppData\Roaming\AbsoluteReminder.xml 2015-04-18 19:24 - 2015-04-18 19:24 - 0000889 _____ () C:\Users\Felix\AppData\Local\recently-used.xbel 2013-07-03 10:28 - 2013-07-03 10:28 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-02-08 19:04 ==================== Ende von FRST.txt ============================ |
13.02.2017, 23:23 | #9 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) FRST addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-02-2017 durchgeführt von Felix (13-02-2017 22:55:28) Gestartet von C:\Users\Felix\Desktop Windows 10 Home Version 1607 (X64) (2017-01-29 17:06:53) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1078537693-2019248843-686258836-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1078537693-2019248843-686258836-503 - Limited - Disabled) Felix (S-1-5-21-1078537693-2019248843-686258836-1002 - Administrator - Enabled) => C:\Users\Felix Gast (S-1-5-21-1078537693-2019248843-686258836-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1078537693-2019248843-686258836-1006 - Limited - Enabled) UpdatusUser (S-1-5-21-1078537693-2019248843-686258836-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avast Browser Cleanup (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Avast Browser Cleanup) (Version: 12.1.2272.125 - AVAST Software) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG) Avira Connect (HKLM-x32\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Avira Connect (x32 Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden Benutzerhandbuch (x32 Version: 1.0.0.9 - Lenovo) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MG4200 series Benutzerregistrierung (HKLM-x32\...\Canon MG4200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon MG4200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4200_series) (Version: 1.01 - Canon Inc.) Canon MG4200 series On-screen Manual (HKLM-x32\...\Canon MG4200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - ) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.07021 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.07021 - Cisco Systems, Inc.) Hidden Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dropbox (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Dropbox) (Version: 19.4.13 - Dropbox, Inc.) Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo) Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden ExpressCache (HKLM\...\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}) (Version: 1.0.86 - Diskeeper Corporation) FUSSBALL MANAGER 08 (HKLM-x32\...\FUSSBALL MANAGER 08) (Version: - Electronic Arts) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.) Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.) Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden HUAWEI DataCard Driver 4.05.00.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.05.00.00 - Huawei technologies Co., Ltd.) Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) WiDi (HKLM\...\{6097158B-0184-4140-BEC3-7885794D2571}) (Version: 3.5.40.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333}) (Version: 1.12.824.1 - Vimicro) Lenovo MediaShow6 (HKLM-x32\...\InstallShield_{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}) (Version: 6.0.4326 - CyberLink Corp.) Lenovo MediaShow6 (x32 Version: 6.0.4326 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden Lenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: 4.8.5 - CEWE COLOR AG u Co. OHG) Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden Lenovo Smart Update (HKLM-x32\...\{29B7C0EB-A1E6-4BC3-8344-70EDE4F189F1}) (Version: 1.6.77 - Lenovo Corporation) Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.) Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) Hidden LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo) Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Mobile Connection Manager (HKLM-x32\...\o2DE) (Version: - Mobile Connection Manager) Motion Control (HKLM\...\Motion Control) (Version: 1.1.2.43 - Lenovo) Moveslink2 (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\09caaf8ee8bfbd57) (Version: 1.4.4.199 - Suunto) Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla) Nero BurningROM 2015 (HKLM-x32\...\{7DEF9F2B-97EE-432E-91D9-FF39816B29D6}) (Version: 16.0.02700 - Nero AG) Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1007 - Nero AG) Nitro Pro 8 (HKLM\...\{34BE77EE-B563-49D7-A8A0-FFD76D29BBD3}) (Version: 8.0.10.7 - Nitro) NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Opera Stable 36.0.2130.46 (HKLM-x32\...\Opera 36.0.2130.46) (Version: 36.0.2130.46 - Opera Software) PDF Split And Merge Basic (HKLM\...\{9A40D2F8-9458-458B-95E3-B57797C574E1}) (Version: 2.2.3 - Andrea Vacondio) Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.) Prerequisite installer (x32 Version: 16.0.0004 - Nero AG) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6823 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden Samsung Link 2.0.0.1409291832 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1409291832 - Copyright 2013 SAMSUNG) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Smart Switch (x32 Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Hidden Spotify (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated) UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (HKLM\...\C48768A2A32F4649238F7DCF737A260911895FDE) (Version: 06/08/2012 1.0.0.3 - Lenovo Corporation) Windows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo) Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo) WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EF}) (Version: 20.0.11659 - WinZip Computing, S.L. ) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll () CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0093FEC3-5026-43DC-972E-AE00B5D57B3E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {065F4AA9-800C-4567-AD26-CC870783F473} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {0CD3CFF0-1311-413D-9355-34BF28F19B29} - System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} => pcalua.exe -a E:\DirectX\dxsetup.exe -d E:\DirectX Task: {27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe Task: {3BA21BE5-2D85-4264-A1C3-593680B1A950} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {52B3D700-4DE1-457C-B726-D66ACBA282D2} - System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" -c -uninstall Task: {6196F863-51CD-4C13-A345-5875CF00AA15} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {6BF1C634-5EB3-4FC9-97C0-8AA903808802} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {88A53FE0-7A77-4342-83AA-B5CC40885327} - System32\Tasks\Opera scheduled Autoupdate 1437387024 => C:\Program Files (x86)\Opera\launcher.exe [2016-04-11] (Opera Software) Task: {A40D0F35-DD9E-4B47-B05B-5E69282CD534} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {A9FF28BC-5EFE-4AEB-ABDA-46A81CE4A58E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {B237B92D-221D-41B7-9AB6-87182A992624} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {B78F5F03-D490-48BA-994E-E792884ED74A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {B797FBF4-ECB5-4493-A40F-027F5D320299} - System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUSched.exe [2017-02-07] (AVAST Software) Task: {B7CF7494-7397-44A7-BB02-447104BFBB9A} - System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {C5B22835-7074-43F6-AF77-316BA7E66FE5} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe Task: {C65B4662-8C3B-43A5-8D90-49DFDE268BE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {C89DE650-468A-49EB-B537-7F10CC269736} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {D02DB910-7851-41EF-8E35-7906B8911D96} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {D48E25CA-5966-4EF6-BD38-DAE9298B10D0} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-03-04] (Nero AG) Task: {DC47EA05-B5E9-4B24-A823-3AAA870E0B47} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {DCA23760-D455-445D-AD6B-B2BC6541B3CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {E3F3B51D-C67D-44BC-897A-63F77070149D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {E6D4DB78-47B2-431A-A8F8-64B0EAB76878} - \WPD\SqmUpload_S-1-5-21-1078537693-2019248843-686258836-1002 -> Keine Datei <==== ACHTUNG Task: {EC2C41BD-109A-41AC-A7FE-DD0C745CE4C0} - System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUUpdate.exe [2015-03-18] (AVAST Software) Task: {F7BD20D1-F463-4395-9333-5E25C5BA3420} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {F8F85967-B05C-403E-A897-93280F61E08C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 00025088 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02633728 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02540544 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll 2013-12-21 10:25 - 2013-12-21 10:25 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll 2013-12-21 10:26 - 2013-12-21 10:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00030720 _____ () C:\WINDOWS\SYSTEM32\MediaDB64.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00908800 _____ () C:\WINDOWS\SYSTEM32\ContentDirectoryPresenter64.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00049152 _____ () C:\WINDOWS\SYSTEM32\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00016896 _____ () C:\WINDOWS\SYSTEM32\boost_system-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00058880 _____ () C:\WINDOWS\SYSTEM32\boost_thread-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00299520 _____ () C:\WINDOWS\SYSTEM32\boost_serialization-vc90-mt-1_47.dll 2017-01-29 17:36 - 2017-01-29 17:36 - 00669696 _____ () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-02-06 20:02 - 2017-02-06 20:03 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-02-06 20:02 - 2017-02-06 20:03 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 42895872 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\roottools.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2017-02-04 20:17 - 2017-02-01 10:47 - 02459992 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll 2017-02-04 20:17 - 2017-02-01 10:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll 2015-02-19 22:37 - 2015-02-19 22:37 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll 2013-10-22 08:48 - 2013-10-22 08:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll 2013-04-19 15:38 - 2013-04-19 15:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll 2013-10-25 18:49 - 2013-10-25 18:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll 2013-07-03 10:21 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1078537693-2019248843-686258836-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02132017224119696\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Control Panel\Desktop\\Wallpaper -> C:\Felix\Snowboard Wallpapers\Snowboard_wallpaper_Nicolas-Muller-_1920x1080.jpg DNS Servers: 192.168.8.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{45FE6330-5EDB-4BBA-AD1E-A374B3B6A209}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe FirewallRules: [{65AC40DA-528A-4B99-8191-C9DF7CCA74C5}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe FirewallRules: [{C658C94A-EA18-4D73-9092-29431F0613D4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D0095373-48F8-4752-A635-9D7EE8205D54}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{92166C44-F5F9-4262-85B0-C0BCA414350D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{21BD3293-333C-4113-A62F-3B1B015314E4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{82AE3F01-51C0-47F5-8230-1B5D0033D5B7}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{404EBC5E-B9C2-4F1B-B388-EC3F315C5EE3}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{B0B9C0E6-F146-4500-8E24-061DF14C6E7E}] => C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{8418201C-9554-41EF-BDD8-4A0214C7EA56}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{51400B8C-2652-47E7-BAA0-20F851AEED60}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{292C3273-784D-444D-A72A-07B72BAE2DC6}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe FirewallRules: [{05407D69-FEC3-4131-83C2-963DC16C3C50}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{725DFA50-D992-49F9-8FBB-030FD4FA3E02}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE FirewallRules: [{1C643327-D3D9-4C86-98B3-BD309B291847}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{79D54DC8-713C-4002-9994-5110D9BAA7FD}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{EDCF5330-8F2D-41B1-BCAF-90F8A6F0911D}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{7AD965C3-72B9-4502-9B4A-D5E0C11AD2A4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{035E7C89-46EB-4B48-B16B-774E3597A7F0}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{D7EF488B-238C-4322-A9DF-60F13532B285}] => D:\Programme\Office14\outlook.exe FirewallRules: [{E7839166-CB67-4A77-B741-436D6014E7E4}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{D7F85A1D-431A-4339-9C5D-D548E71AE4C3}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{5C57C510-467E-48BC-9931-59D2D6CC585A}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{060A138E-1803-43EB-9162-A35D4F1885B4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{8FE8F125-38C6-4572-8760-0CC4C5096ECE}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{BAC178C0-2AD2-4CA0-BCEE-A4A462C58EE5}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{AA832FDE-FD79-4A17-9A3F-248B9CDF3CEF}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [TCP Query User{C53A6FE7-92C7-4905-B188-D8021A9FDFE4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7AA8CD62-8D91-4BFA-B73C-4A6EEE87274D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [{B152DCDF-0293-412D-98CF-7D6ADD306767}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2A63C53E-CA1D-4327-B82E-7B185229CED9}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2DB78C5F-A7C8-45BD-A129-FDA7BAE6883E}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BC4EF10F-7A63-49D8-B337-9A78C66C3100}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{492C79F5-5C54-4D90-9A8F-4A9AAF923066}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{CF52B653-CC86-45D8-8691-5AF2A2B06EF8}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{DB5329C9-EE4F-4B33-B38D-C45A4AB2A05B}] => C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{5372604E-8F3D-4093-B976-300B633E8967}] => LPort=8743 FirewallRules: [{ECBCCDA5-FD33-4747-AF98-DF431E24B124}] => LPort=8643 FirewallRules: [{64EC97C1-6A4B-4C3B-B117-F2F1048E4733}] => LPort=7676 FirewallRules: [{5BBF33D8-C27E-4199-AAB1-F6067F5AA333}] => LPort=7679 FirewallRules: [{C5B6EB29-23F4-4159-AB41-8957B45B7FA7}] => LPort=24234 FirewallRules: [{234DB7E3-6A86-424F-99D1-5389F9160A31}] => LPort=7900 FirewallRules: [{46476EA0-2C91-4A7F-80C5-D431169E7174}] => LPort=1900 FirewallRules: [{7CD8061D-6BFC-48B8-9ED2-B68038C61E0E}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{E2D759B8-0E67-43E2-864A-D69614D4695D}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{97D85475-216E-44A1-AF62-25AFF6A16EE9}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{B88A5D7A-675B-48A7-B4E4-D4876A5F2EFC}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{8FB07FAE-56BF-418C-B975-1A14589EBDDD}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{81FB46EA-154F-4321-A492-3BB82707CCD3}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{AF783283-9B24-4C00-84CF-CC2B4D52FAB1}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B840725C-D52C-4E5E-9D78-5B9EE8245714}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{CB650059-4C14-4B70-B333-455E1B39C008}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 13-02-2017 22:46:46 JRT Pre-Junkware Removal ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (02/13/2017 10:47:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (02/13/2017 10:37:56 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 3.1.0.415, Zeitstempel: 0x5881b7a1 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000035793 ID des fehlerhaften Prozesses: 0xba0 Startzeit der fehlerhaften Anwendung: 0x01d28640ca0860f4 Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: 9de32605-a3ab-4859-9340-76f5bd18efa6 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:33:15 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/13/2017 10:12:56 PM) (Source: SideBySide) (EventID: 9) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\WinZip\adxloader.dll.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files\WinZip\adxloader.dll.Manifest" in Zeile 2. Das Stammelement der Manifestdatei muss assembliert sein. Error: (02/13/2017 09:47:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Systemfehler: ============= Error: (02/13/2017 10:40:48 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT) Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/13/2017 10:39:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Malwarebytes Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (02/13/2017 10:37:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} und der APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/13/2017 10:36:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden. Error: (02/13/2017 10:36:36 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: Der Benutzername oder das Kennwort ist falsch. Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (02/13/2017 10:34:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (02/13/2017 10:34:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst FontCache3.0.0.0 erreicht. Error: (02/13/2017 10:33:44 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/13/2017 10:33:44 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/13/2017 10:32:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz Prozentuale Nutzung des RAM: 49% Installierter physikalischer RAM: 8066.02 MB Verfügbarer physikalischer RAM: 4080.63 MB Summe virtueller Speicher: 9474.02 MB Verfügbarer virtueller Speicher: 5465.71 MB ==================== Laufwerke ================================ Drive c: (Windows8_OS) (Fixed) (Total:890.73 GB) (Free:32.31 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:19.76 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 22.4 GB) (Disk ID: 48583CDC) Partition: GPT. ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 48583CDF) Partition: GPT. ==================== Ende von Addition.txt ============================ So, das sollte alles gewesen sein. VG Felix |
14.02.2017, 17:14 | #10 |
/// TB-Ausbilder | Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Servus, Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start CloseProcesses: BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei FF SelectedSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchUrl: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF Keyword.URL: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF Homepage: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/ FF NewTab: Mozilla\Firefox\Profiles\7wdsyub7.default -> about:newtab C:\Users\Felix\Downloads\*CHIP-Installer*.exe Task: {065F4AA9-800C-4567-AD26-CC870783F473} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {52B3D700-4DE1-457C-B726-D66ACBA282D2} - System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" -c -uninstall Task: {6196F863-51CD-4C13-A345-5875CF00AA15} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {6BF1C634-5EB3-4FC9-97C0-8AA903808802} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {B237B92D-221D-41B7-9AB6-87182A992624} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {B78F5F03-D490-48BA-994E-E792884ED74A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {C89DE650-468A-49EB-B537-7F10CC269736} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {D02DB910-7851-41EF-8E35-7906B8911D96} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {DCA23760-D455-445D-AD6B-B2BC6541B3CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {E3F3B51D-C67D-44BC-897A-63F77070149D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {E6D4DB78-47B2-431A-A8F8-64B0EAB76878} - \WPD\SqmUpload_S-1-5-21-1078537693-2019248843-686258836-1002 -> Keine Datei <==== ACHTUNG RemoveProxy: CMD: ipconfig /flushdns CMD: netsh winsock reset EmptyTemp: end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Setze Google Chrome nach dieser Anleitung zurück. Schritt 3
Gibt es jetzt noch Probleme mit Chrome? Wenn ja, welche? Bitte poste mit deiner nächsten Antwort
|
14.02.2017, 20:06 | #11 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Fixlog.txt: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-02-2017 durchgeführt von Felix (14-02-2017 19:42:05) Run:1 Gestartet von C:\Users\Felix\Desktop Geladene Profile: Felix (Verfügbare Profile: UpdatusUser & Felix) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** start CloseProcesses: BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei FF SelectedSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchEngine: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF DefaultSearchUrl: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\7wdsyub7.default -> Avast Search FF Keyword.URL: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/search/web?q={searchTerms} FF Homepage: Mozilla\Firefox\Profiles\7wdsyub7.default -> hxxps://search.avast.com/AV752/ FF NewTab: Mozilla\Firefox\Profiles\7wdsyub7.default -> about:newtab C:\Users\Felix\Downloads\*CHIP-Installer*.exe Task: {065F4AA9-800C-4567-AD26-CC870783F473} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {52B3D700-4DE1-457C-B726-D66ACBA282D2} - System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" -c -uninstall Task: {6196F863-51CD-4C13-A345-5875CF00AA15} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {6BF1C634-5EB3-4FC9-97C0-8AA903808802} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {B237B92D-221D-41B7-9AB6-87182A992624} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {B78F5F03-D490-48BA-994E-E792884ED74A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {C89DE650-468A-49EB-B537-7F10CC269736} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {D02DB910-7851-41EF-8E35-7906B8911D96} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {DCA23760-D455-445D-AD6B-B2BC6541B3CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {E3F3B51D-C67D-44BC-897A-63F77070149D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {E6D4DB78-47B2-431A-A8F8-64B0EAB76878} - \WPD\SqmUpload_S-1-5-21-1078537693-2019248843-686258836-1002 -> Keine Datei <==== ACHTUNG RemoveProxy: CMD: ipconfig /flushdns CMD: netsh winsock reset EmptyTemp: end ***************** Prozesse erfolgreich geschlossen. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} => Schlüssel erfolgreich entfernt HKCR\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} => Schlüssel nicht gefunden. Firefox SelectedSearchEngine erfolgreich entfernt Firefox DefaultSearchEngine erfolgreich entfernt Firefox DefaultSearchUrl erfolgreich entfernt Firefox SearchEngineOrder.1 erfolgreich entfernt Firefox "Keyword.URL" erfolgreich entfernt Firefox "homepage" erfolgreich entfernt Firefox "newtab" erfolgreich entfernt =========== "C:\Users\Felix\Downloads\*CHIP-Installer*.exe" ========== C:\Users\Felix\Downloads\7 Zip 64 Bit - CHIP-Installer.exe => erfolgreich verschoben C:\Users\Felix\Downloads\SpyBot Search Destroy - CHIP-Installer.exe => erfolgreich verschoben ========= Ende -> "C:\Users\Felix\Downloads\*CHIP-Installer*.exe" ======== HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{065F4AA9-800C-4567-AD26-CC870783F473} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{065F4AA9-800C-4567-AD26-CC870783F473} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27DFE8E2-A5AA-4E92-A89F-19B589ED62E4} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52B3D700-4DE1-457C-B726-D66ACBA282D2} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52B3D700-4DE1-457C-B726-D66ACBA282D2} => Schlüssel erfolgreich entfernt C:\WINDOWS\System32\Tasks\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => erfolgreich verschoben HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F5F28A24-8DE9-4FC4-A49E-331E59D30708} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6196F863-51CD-4C13-A345-5875CF00AA15} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6196F863-51CD-4C13-A345-5875CF00AA15} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6BF1C634-5EB3-4FC9-97C0-8AA903808802} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6BF1C634-5EB3-4FC9-97C0-8AA903808802} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B237B92D-221D-41B7-9AB6-87182A992624} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B237B92D-221D-41B7-9AB6-87182A992624} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B78F5F03-D490-48BA-994E-E792884ED74A} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B78F5F03-D490-48BA-994E-E792884ED74A} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C89DE650-468A-49EB-B537-7F10CC269736} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C89DE650-468A-49EB-B537-7F10CC269736} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D02DB910-7851-41EF-8E35-7906B8911D96} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D02DB910-7851-41EF-8E35-7906B8911D96} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DCA23760-D455-445D-AD6B-B2BC6541B3CF} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCA23760-D455-445D-AD6B-B2BC6541B3CF} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3F3B51D-C67D-44BC-897A-63F77070149D} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3F3B51D-C67D-44BC-897A-63F77070149D} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E6D4DB78-47B2-431A-A8F8-64B0EAB76878} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6D4DB78-47B2-431A-A8F8-64B0EAB76878} => Schlüssel erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1078537693-2019248843-686258836-1002 => Schlüssel erfolgreich entfernt ========= RemoveProxy: ========= HKU\S-1-5-21-1078537693-2019248843-686258836-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt HKU\S-1-5-21-1078537693-2019248843-686258836-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt ========= Ende von RemoveProxy: ========= ========= ipconfig /flushdns ========= Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. ========= Ende von CMD: ========= ========= netsh winsock reset ========= Der Winsock-Katalog wurde zurckgesetzt. Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen. ========= Ende von CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 32768 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 33779864 B Java, Flash, Steam htmlcache => 2844 B Windows/system/drivers => 2883212 B Edge => 71636963 B Chrome => 645877489 B Firefox => 100183546 B Opera => 12782402 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 128 B LocalService => 18504064 B NetworkService => 1261568 B UpdatusUser => 0 B Felix => 200889805 B RecycleBin => 4882301479 B EmptyTemp: => 5.6 GB temporäre Dateien entfernt. ================================ Das System musste neu gestartet werden. ==== Ende von Fixlog 19:44:15 ==== Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-02-2017 durchgeführt von Felix (Administrator) auf IDEA-PC (14-02-2017 19:57:33) Gestartet von C:\Users\Felix\Desktop Geladene Profile: Felix (Verfügbare Profile: UpdatusUser & Felix) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Spotify Ltd) C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Suunto) C:\Users\Felix\AppData\Local\Apps\2.0\6AO9PYBW.MNP\LNO9QCND.KAL\move..tion_391e8feca7b0cf78_0001.0004_6f8afc924d2bed6c\Moveslink2.exe (Nico Mak Computing) C:\Program Files\WinZip\FAHWindow64.exe (Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe (WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (Dropbox, Inc.) C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe (AVAST Software) C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\bcusched.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13265480 2013-01-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1273416 2013-01-15] (Realtek Semiconductor) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-07-03] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-07-03] (Lenovo(beijing) Limited) HKLM\...\Run: [BCSSync] => D:\Programme\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-09-29] (Copyright 2013 SAMSUNG) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-12-06] (Synaptics Incorporated) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro) HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE HKLM-x32\...\Run: [Smart Update] => C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe [1706576 2012-08-02] (Lenovo) HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [708496 2015-02-19] (Cisco Systems, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Spotify Web Helper] => C:\Users\Felix\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2344768 2015-11-21] (Spotify Ltd) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Dropbox Update] => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-07] (Dropbox, Inc.) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-11-30] (Google) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Run: [Moveslink2] => C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\amd64\FileSyncShell64.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Felix\AppData\Local\Microsoft\OneDrive\17.3.6743.1212_1\FileSyncShell.dll [2017-01-29] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-12-06] ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Motion Control.lnk [2013-07-03] ShortcutTarget: Motion Control.lnk -> C:\Program Files (x86)\Lenovo\MotionControl\MotionControl.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Benachrichtigungsdienst.lnk [2015-12-06] ShortcutTarget: Update Benachrichtigungsdienst.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-12-06] ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.) Startup: C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-02-08] ShortcutTarget: Dropbox.lnk -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{1833352f-fa61-454f-b341-8d0423cc773b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{7dc836cf-237c-445f-9503-b94866736e8b}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/ HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com SearchScopes: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> DefaultScope {495008F0-48AF-4DFF-8CA5-B8CDDE6A94A6} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programme\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-08] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-08] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKU\S-1-5-21-1078537693-2019248843-686258836-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) FireFox: ======== FF ProfilePath: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default [2017-02-14] FF Extension: (Avira Browser Safety) - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\7wdsyub7.default\Extensions\abs@avira.com [2015-04-08] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2014-10-15] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-28] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Programme\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-28] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2012-12-13] (Nitro PDF) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default [2017-02-14] CHR Extension: (Google Präsentationen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05] CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05] CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03] CHR Extension: (Device screens) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckbkecggifaleckpgbldoafpgpfeglim [2017-01-29] CHR Extension: (Google-Suche) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Tabellen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05] CHR Extension: (Avira Browserschutz) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-20] CHR Extension: (Google Docs Offline) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23] CHR Extension: (Citavi Picker) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2016-10-05] CHR Extension: (Google Mail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-06] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1078537693-2019248843-686258836-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [Datei ist nicht signiert] S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert] R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation) R2 irstrtsv; C:\WINDOWS\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-13] (Nitro PDF Software) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-09-29] (Copyright 2013 SAMSUNG) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-12-06] (Synaptics Incorporated) R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-08-02] (Telefónica I+D) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153904 2016-12-16] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2015-12-04] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-05-12] (Avira Operations GmbH & Co. KG) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] () S3 ewusbnet; C:\WINDOWS\system32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.) R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation) R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation) R3 irstrtdv; C:\WINDOWS\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) R3 LAD; C:\WINDOWS\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>) R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-13] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-14] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-14] (Malwarebytes) R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-14] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-14] (Malwarebytes) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-12-06] (Synaptics Incorporated) R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\WINDOWS\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-07-21] (Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) R3 XHCIPort; C:\WINDOWS\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-14 19:49 - 2017-02-14 19:49 - 00000000 ____D C:\Users\Felix\AppData\Local\Nico Mak Computing 2017-02-14 19:42 - 2017-02-14 19:44 - 00010995 _____ C:\Users\Felix\Desktop\Fixlog.txt 2017-02-14 19:41 - 2017-02-14 19:41 - 00000000 ____D C:\Users\Felix\Desktop\FRST-OlderVersion 2017-02-13 22:51 - 2017-02-13 22:51 - 00001273 _____ C:\Users\Felix\Desktop\JRT.txt 2017-02-13 22:45 - 2017-02-13 22:46 - 01663040 _____ (Malwarebytes) C:\Users\Felix\Desktop\JRT.exe 2017-02-13 22:42 - 2017-02-13 22:42 - 00001825 _____ C:\Users\Felix\Desktop\mbam.txt 2017-02-13 22:35 - 2017-02-13 22:35 - 00000000 ___HD C:\OneDriveTemp 2017-02-13 21:56 - 2017-02-13 21:56 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-02-13 21:55 - 2017-02-14 19:53 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-02-13 21:55 - 2017-02-14 19:53 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-02-13 21:55 - 2017-02-14 19:53 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-02-13 21:55 - 2017-02-14 19:47 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-02-13 21:55 - 2017-02-13 21:55 - 00001923 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-13 21:55 - 2017-02-13 21:55 - 00000000 ____D C:\Program Files\Malwarebytes 2017-02-13 21:55 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-02-13 21:53 - 2017-02-13 21:54 - 55566792 _____ (Malwarebytes ) C:\Users\Felix\Desktop\mb3-setup-consumer-3.0.6.1469.exe 2017-02-13 21:53 - 2017-02-13 21:53 - 00001511 _____ C:\Users\Felix\Desktop\AdwCleaner[C2].txt 2017-02-13 21:38 - 2017-02-13 21:38 - 04015056 _____ C:\Users\Felix\Desktop\AdwCleaner_6.043.exe 2017-02-12 22:19 - 2017-02-13 21:41 - 00101334 _____ C:\TDSSKiller.3.1.0.12_12.02.2017_22.19.23_log.txt 2017-02-12 22:19 - 2017-02-12 22:19 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Felix\Desktop\tdsskiller.exe 2017-02-12 22:11 - 2017-02-13 22:56 - 00051429 _____ C:\Users\Felix\Desktop\Addition.txt 2017-02-12 22:09 - 2017-02-14 19:58 - 00032367 _____ C:\Users\Felix\Desktop\FRST.txt 2017-02-12 22:07 - 2017-02-14 19:57 - 00000000 ____D C:\FRST 2017-02-12 22:04 - 2017-02-14 19:41 - 02422272 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe 2017-02-12 21:56 - 2017-02-12 21:57 - 00000000 ____D C:\Users\Felix\Desktop\Sonstiges 2017-02-12 19:39 - 2016-12-29 14:10 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-02-12 19:34 - 2017-02-12 19:35 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2017-02-08 00:35 - 2017-02-08 00:35 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-02-07 23:29 - 2017-02-07 23:29 - 04284888 _____ (AVAST Software) C:\Users\Felix\Downloads\avast-browser-cleanup-sfx121.exe 2017-02-07 23:29 - 2017-02-07 23:29 - 00004386 _____ C:\WINDOWS\System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00003512 _____ C:\WINDOWS\System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 2017-02-07 23:29 - 2017-02-07 23:29 - 00001201 _____ C:\Users\Felix\Desktop\Avast Browser Cleanup.lnk 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Avast Browser Cleanup 2017-02-07 23:29 - 2017-02-07 23:29 - 00000000 ____D C:\Users\Felix\AppData\Roaming\AVAST Software 2017-02-07 20:58 - 2017-02-13 21:46 - 00000000 ____D C:\AdwCleaner 2017-02-07 20:48 - 2017-02-07 20:58 - 04015056 _____ C:\Users\Felix\Downloads\adwcleaner_6.043.exe 2017-02-07 20:43 - 2017-02-07 20:47 - 00916922 _____ C:\Users\Felix\Downloads\Nicht bestätigt 586294.crdownload 2017-02-06 22:27 - 2017-02-07 06:34 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2017-02-06 22:27 - 2017-02-07 06:33 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2017-02-06 22:27 - 2017-02-06 22:27 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2017-02-04 20:17 - 2017-02-04 20:17 - 00002347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-02-04 20:17 - 2017-02-04 20:17 - 00002335 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-02-04 20:12 - 2017-02-04 20:12 - 01129376 _____ (Google Inc.) C:\Users\Felix\Downloads\ChromeSetup (1).exe 2017-01-29 21:25 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-29 21:25 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-29 18:31 - 2017-02-14 19:51 - 00000000 ____D C:\Users\Felix\AppData\Local\Deployment 2017-01-29 18:24 - 2017-01-30 21:02 - 00000000 ____D C:\Users\Felix\AppData\Local\ConnectedDevicesPlatform 2017-01-29 18:21 - 2017-01-29 18:21 - 00000020 ___SH C:\Users\Felix\ntuser.ini 2017-01-29 18:14 - 2017-01-29 18:14 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-01-29 18:12 - 2017-01-29 18:12 - 00000000 ____D C:\ProgramData\USOShared 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Vorlagen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Startmenü 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2017-01-29 18:06 - 2017-01-29 18:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2017-01-29 18:02 - 2017-01-29 18:05 - 00011433 _____ C:\WINDOWS\diagerr.xml 2017-01-29 17:46 - 2017-02-14 19:46 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-01-29 17:46 - 2017-01-29 17:46 - 00003916 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003670 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-01-29 17:46 - 2017-01-29 17:46 - 00003648 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core 2017-01-29 17:46 - 2017-01-29 17:46 - 00003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d 2017-01-29 17:46 - 2017-01-29 17:46 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-01-29 17:46 - 2017-01-29 17:46 - 00003324 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1437387024 2017-01-29 17:46 - 2017-01-29 17:46 - 00003296 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1FA74D7C-CE39-44F9-83AC-3C7817F51C3A} 2017-01-29 17:46 - 2017-01-29 17:46 - 00002978 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-01-29 17:46 - 2017-01-29 17:46 - 00002938 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1078537693-2019248843-686258836-1002 2017-01-29 17:46 - 2017-01-29 17:46 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-29 17:46 - 2017-01-29 17:46 - 00002334 _____ C:\WINDOWS\System32\Tasks\MirageAgent 2017-01-29 17:46 - 2017-01-29 17:46 - 00002214 _____ C:\WINDOWS\System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} 2017-01-29 17:46 - 2017-01-29 17:46 - 00001908 _____ C:\WINDOWS\System32\Tasks\Dolby Selector 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2017-01-29 17:46 - 2017-01-29 17:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero 2017-01-29 17:28 - 2017-01-29 17:28 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2017-01-29 17:28 - 2017-01-29 17:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2017-01-29 17:18 - 2017-01-29 17:29 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-01-29 17:15 - 2017-02-13 21:46 - 00000000 ____D C:\Users\Felix 2017-01-29 17:15 - 2017-01-29 17:44 - 00000000 ____D C:\Users\UpdatusUser 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Vorlagen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Startmenü 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Netzwerkumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Lokale Einstellungen 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Eigene Dateien 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Druckumgebung 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Videos 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Musik 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Documents\Eigene Bilder 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Verlauf 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\AppData\Local\Anwendungsdaten 2017-01-29 17:15 - 2017-01-29 17:15 - 00000000 _SHDL C:\Users\Felix\Anwendungsdaten 2017-01-29 17:08 - 2017-02-14 19:46 - 00000000 ____D C:\ProgramData\NVIDIA 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-01-29 17:08 - 2017-01-29 17:08 - 00000000 ____D C:\Program Files (x86)\USB Camera 2017-01-29 17:08 - 2016-12-29 14:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00147000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-01-29 17:08 - 2016-12-22 00:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-01-29 17:07 - 2017-02-12 19:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-01-29 17:07 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-01-29 17:06 - 2017-01-29 17:20 - 00000000 ____D C:\Program Files\Intel 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Synaptics 2017-01-29 17:06 - 2017-01-29 17:06 - 00000000 ____D C:\Program Files\Realtek 2017-01-29 17:06 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-01-29 17:06 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-01-29 17:04 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-01-29 16:59 - 2017-02-14 19:38 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-01-29 16:59 - 2017-01-29 18:18 - 00337992 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-29 16:59 - 2017-01-29 17:00 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-01-29 16:57 - 2017-01-29 18:06 - 00000000 ___DC C:\WINDOWS\Panther 2017-01-29 16:51 - 2017-02-12 19:34 - 00000000 ____D C:\Windows.old 2017-01-29 16:46 - 2017-01-29 16:46 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2017-01-29 16:46 - 2017-01-29 16:46 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2017-01-29 16:46 - 2017-01-29 16:46 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2017-01-29 16:46 - 2017-01-29 16:46 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml 2017-01-29 16:46 - 2017-01-29 16:46 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2017-01-29 16:46 - 2017-01-29 16:46 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2017-01-29 16:46 - 2017-01-29 16:46 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2017-01-29 16:46 - 2017-01-29 16:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys 2017-01-29 16:46 - 2017-01-29 16:46 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2017-01-29 16:46 - 2017-01-29 16:46 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01060352 _____ (Microsoft Corporation) |
14.02.2017, 20:07 | #12 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) FRST.txt part2: Code:
ATTFilter C:\WINDOWS\system32\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-01-29 16:45 - 2017-01-29 16:45 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00788624 _____ C:\WINDOWS\system32\locale.nls 2017-01-29 16:45 - 2017-01-29 16:45 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl 2017-01-29 16:45 - 2017-01-29 16:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS 2017-01-29 16:45 - 2017-01-29 16:45 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2017-01-29 16:45 - 2017-01-29 16:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2017-01-29 16:45 - 2017-01-29 16:45 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb 2017-01-29 16:45 - 2017-01-29 16:45 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL 2017-01-29 16:45 - 2017-01-29 16:45 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2017-01-29 16:22 - 2017-01-29 16:22 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-01-29 16:15 - 2017-01-29 17:29 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files\MSBuild 2017-01-29 16:15 - 2017-01-29 16:15 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-01-29 16:13 - 2017-01-29 16:13 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll 2017-01-29 16:13 - 2017-01-29 16:13 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2017-01-29 16:13 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-01-29 16:13 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-01-29 16:13 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-01-17 21:40 - 2017-01-29 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-01-17 21:40 - 2017-01-17 21:40 - 00000000 ____D C:\Program Files\7-Zip 2017-01-17 05:56 - 2017-01-17 05:56 - 34717624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 28209080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00951224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00904760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00048696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2017-01-17 05:55 - 2017-01-17 05:55 - 02961336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 02594744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01598392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01047096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 00985144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 40134200 _____ C:\WINDOWS\system32\nvcompiler.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 35233336 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-01-17 05:53 - 2017-01-17 05:53 - 11017016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10907368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10453152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09246832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09000336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 08847016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 03509152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00698544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00586784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-01-17 00:59 - 2017-01-17 00:59 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-14 19:53 - 2014-10-08 23:00 - 00000000 ___RD C:\Users\Felix\Dropbox 2017-02-14 19:51 - 2015-07-20 11:09 - 00000000 ____D C:\Program Files (x86)\Opera 2017-02-14 19:51 - 2014-10-14 20:05 - 00000000 ___RD C:\Users\Felix\OneDrive 2017-02-14 19:48 - 2014-11-14 22:41 - 00000000 __SHD C:\Users\Felix\IntelGraphicsProfiles 2017-02-14 19:45 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-13 21:41 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-13 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-12 22:12 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-02-12 21:59 - 2015-03-06 21:41 - 00000000 ____D C:\Users\Felix\Desktop\Lisa_Canada_2 2017-02-12 19:59 - 2016-07-16 23:51 - 00551060 _____ C:\WINDOWS\system32\perfh007.dat 2017-02-12 19:59 - 2016-07-16 23:51 - 00103296 _____ C:\WINDOWS\system32\perfc007.dat 2017-02-12 19:59 - 2015-10-22 14:20 - 01566054 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-08 00:35 - 2014-10-08 22:57 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Dropbox 2017-02-07 21:16 - 2014-12-17 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-02-07 21:16 - 2014-10-07 20:39 - 00000000 ____D C:\ProgramData\Package Cache 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\ProgramData\Avira 2017-02-07 21:12 - 2014-12-17 20:26 - 00000000 ____D C:\Program Files (x86)\Avira 2017-02-07 20:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-07 20:38 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-02-06 22:03 - 2014-10-07 21:39 - 00000000 ____D C:\Felix 2017-02-04 20:17 - 2014-10-07 20:34 - 00000000 ____D C:\Program Files (x86)\Google 2017-01-30 21:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat 2017-01-29 18:46 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Local\Packages 2017-01-29 18:36 - 2015-10-22 15:04 - 00002432 _____ C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-29 18:23 - 2015-09-10 06:37 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-29 18:12 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate 2017-01-29 18:12 - 2014-11-14 22:40 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-29 18:06 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-01-29 18:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration 2017-01-29 18:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-01-29 17:46 - 2014-11-14 22:35 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media 2017-01-29 17:45 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries 2017-01-29 17:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-01-29 17:29 - 2016-07-16 07:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM 2017-01-29 17:29 - 2016-02-28 12:12 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto 2017-01-29 17:29 - 2015-12-06 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2017-01-29 17:29 - 2015-12-06 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2017-01-29 17:29 - 2015-10-30 19:44 - 00000000 ____D C:\WINDOWS\ShellNew 2017-01-29 17:29 - 2015-07-20 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2017-01-29 17:29 - 2015-04-10 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic 2017-01-29 17:29 - 2015-01-15 00:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-01-29 17:29 - 2014-11-27 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-01-29 17:29 - 2014-11-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2017-01-29 17:29 - 2014-10-23 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Benutzerregistrierung 2017-01-29 17:29 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Manual 2017-01-29 17:29 - 2014-10-23 19:58 - 00000000 ____D C:\WINDOWS\system32\STRING 2017-01-29 17:29 - 2014-10-15 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citavi 4 2017-01-29 17:29 - 2014-10-14 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP640 series 2017-01-29 17:29 - 2014-10-08 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2017-01-29 17:29 - 2014-10-07 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-01-29 17:29 - 2013-07-03 11:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2017-01-29 17:29 - 2013-07-03 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:29 - 2013-07-03 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Photos 2017-01-29 17:28 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-01-29 17:28 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated 2017-01-29 17:23 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-01-29 17:23 - 2016-07-16 23:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\IME 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2017-01-29 17:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2017-01-29 17:23 - 2014-10-23 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2017-01-29 17:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2017-01-29 17:23 - 2013-07-03 10:33 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles 2017-01-29 17:21 - 2016-11-11 23:37 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2017-01-29 17:21 - 2014-11-12 00:10 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense 2017-01-29 17:21 - 2014-10-14 19:11 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\InputMethod 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System 2017-01-29 17:20 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-01-29 17:20 - 2015-07-27 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA SPORTS 2017-01-29 17:20 - 2015-05-04 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco 2017-01-29 17:20 - 2014-11-26 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\o2 2017-01-29 17:20 - 2014-10-23 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series 2017-01-29 17:20 - 2014-10-23 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2017-01-29 17:20 - 2014-10-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2017-01-29 17:20 - 2014-09-24 08:43 - 00000000 ____D C:\Program Files\Embedded Lockdown Manager 2017-01-29 17:18 - 2013-07-03 10:59 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:17 - 2014-10-07 20:07 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-01-29 17:13 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-01-29 17:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System 2017-01-29 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help 2017-01-29 16:57 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-01-29 16:49 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-01-29 16:49 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing 2017-01-29 16:48 - 2016-07-16 12:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-01-29 16:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-01-29 16:15 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2017-01-29 16:15 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2017-01-29 16:14 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2017-01-29 15:24 - 2015-06-20 07:45 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job 2017-01-29 14:01 - 2014-10-08 19:26 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2017-01-24 19:24 - 2015-06-20 07:45 - 00001188 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job 2017-01-17 05:52 - 2016-09-12 21:10 - 03972960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-01-15 20:39 - 2014-10-23 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-10-07 20:08 - 2014-10-13 17:37 - 0003372 _____ () C:\Users\Felix\AppData\Roaming\AbsoluteReminder.xml 2015-04-18 19:24 - 2015-04-18 19:24 - 0000889 _____ () C:\Users\Felix\AppData\Local\recently-used.xbel 2013-07-03 10:28 - 2013-07-03 10:28 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-02-08 19:04 ==================== Ende von FRST.txt ============================ |
14.02.2017, 20:11 | #13 |
| Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Addition.txt: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-02-2017 durchgeführt von Felix (14-02-2017 19:59:40) Gestartet von C:\Users\Felix\Desktop Windows 10 Home Version 1607 (X64) (2017-01-29 17:06:53) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1078537693-2019248843-686258836-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1078537693-2019248843-686258836-503 - Limited - Disabled) Felix (S-1-5-21-1078537693-2019248843-686258836-1002 - Administrator - Enabled) => C:\Users\Felix Gast (S-1-5-21-1078537693-2019248843-686258836-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1078537693-2019248843-686258836-1006 - Limited - Enabled) UpdatusUser (S-1-5-21-1078537693-2019248843-686258836-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avast Browser Cleanup (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Avast Browser Cleanup) (Version: 12.1.2272.125 - AVAST Software) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG) Avira Connect (HKLM-x32\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Avira Connect (x32 Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden Benutzerhandbuch (x32 Version: 1.0.0.9 - Lenovo) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MG4200 series Benutzerregistrierung (HKLM-x32\...\Canon MG4200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon MG4200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4200_series) (Version: 1.01 - Canon Inc.) Canon MG4200 series On-screen Manual (HKLM-x32\...\Canon MG4200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - ) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.07021 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.07021 - Cisco Systems, Inc.) Hidden Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dropbox (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Dropbox) (Version: 19.4.13 - Dropbox, Inc.) Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo) Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden ExpressCache (HKLM\...\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}) (Version: 1.0.86 - Diskeeper Corporation) FUSSBALL MANAGER 08 (HKLM-x32\...\FUSSBALL MANAGER 08) (Version: - Electronic Arts) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.) Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.) Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden HUAWEI DataCard Driver 4.05.00.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.05.00.00 - Huawei technologies Co., Ltd.) Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) WiDi (HKLM\...\{6097158B-0184-4140-BEC3-7885794D2571}) (Version: 3.5.40.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333}) (Version: 1.12.824.1 - Vimicro) Lenovo MediaShow6 (HKLM-x32\...\InstallShield_{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}) (Version: 6.0.4326 - CyberLink Corp.) Lenovo MediaShow6 (x32 Version: 6.0.4326 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden Lenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: 4.8.5 - CEWE COLOR AG u Co. OHG) Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.) Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden Lenovo Smart Update (HKLM-x32\...\{29B7C0EB-A1E6-4BC3-8344-70EDE4F189F1}) (Version: 1.6.77 - Lenovo Corporation) Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.) Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) Hidden LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo) Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Mobile Connection Manager (HKLM-x32\...\o2DE) (Version: - Mobile Connection Manager) Motion Control (HKLM\...\Motion Control) (Version: 1.1.2.43 - Lenovo) Moveslink2 (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\09caaf8ee8bfbd57) (Version: 1.4.4.199 - Suunto) Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla) Nero BurningROM 2015 (HKLM-x32\...\{7DEF9F2B-97EE-432E-91D9-FF39816B29D6}) (Version: 16.0.02700 - Nero AG) Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1007 - Nero AG) Nitro Pro 8 (HKLM\...\{34BE77EE-B563-49D7-A8A0-FFD76D29BBD3}) (Version: 8.0.10.7 - Nitro) NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Opera Stable 36.0.2130.46 (HKLM-x32\...\Opera 36.0.2130.46) (Version: 36.0.2130.46 - Opera Software) PDF Split And Merge Basic (HKLM\...\{9A40D2F8-9458-458B-95E3-B57797C574E1}) (Version: 2.2.3 - Andrea Vacondio) Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.) Prerequisite installer (x32 Version: 16.0.0004 - Nero AG) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6823 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden Samsung Link 2.0.0.1409291832 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1409291832 - Copyright 2013 SAMSUNG) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Smart Switch (x32 Version: 4.0.15064.11 - Samsung Electronics Co., Ltd.) Hidden Spotify (HKU\S-1-5-21-1078537693-2019248843-686258836-1002\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated) UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (HKLM\...\C48768A2A32F4649238F7DCF737A260911895FDE) (Version: 06/08/2012 1.0.0.3 - Lenovo Corporation) Windows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo) Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo) WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EF}) (Version: 20.0.11659 - WinZip Computing, S.L. ) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll () CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1078537693-2019248843-686258836-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0093FEC3-5026-43DC-972E-AE00B5D57B3E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {0CD3CFF0-1311-413D-9355-34BF28F19B29} - System32\Tasks\{5971D186-1817-4543-85AD-26773F0D42FB} => pcalua.exe -a E:\DirectX\dxsetup.exe -d E:\DirectX Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe Task: {3BA21BE5-2D85-4264-A1C3-593680B1A950} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {88A53FE0-7A77-4342-83AA-B5CC40885327} - System32\Tasks\Opera scheduled Autoupdate 1437387024 => C:\Program Files (x86)\Opera\launcher.exe [2016-04-11] (Opera Software) Task: {A40D0F35-DD9E-4B47-B05B-5E69282CD534} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {A9FF28BC-5EFE-4AEB-ABDA-46A81CE4A58E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {B797FBF4-ECB5-4493-A40F-027F5D320299} - System32\Tasks\avastBCLS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUSched.exe [2017-02-07] (AVAST Software) Task: {B7CF7494-7397-44A7-BB02-447104BFBB9A} - System32\Tasks\GoogleUpdateTaskMachineUA1cff60de7c5444d => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {C5B22835-7074-43F6-AF77-316BA7E66FE5} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe Task: {C65B4662-8C3B-43A5-8D90-49DFDE268BE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.) Task: {D48E25CA-5966-4EF6-BD38-DAE9298B10D0} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-03-04] (Nero AG) Task: {DC47EA05-B5E9-4B24-A823-3AAA870E0B47} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.) Task: {EC2C41BD-109A-41AC-A7FE-DD0C745CE4C0} - System32\Tasks\avast! BCU UpdateS-1-5-21-1078537693-2019248843-686258836-1002 => C:\Users\Felix\AppData\Roaming\AVAST Software\Browser Cleanup\BCUUpdate.exe [2015-03-18] (AVAST Software) Task: {F7BD20D1-F463-4395-9333-5E25C5BA3420} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {F8F85967-B05C-403E-A897-93280F61E08C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002Core.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1078537693-2019248843-686258836-1002UA.job => C:\Users\Felix\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 00025088 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02633728 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll 2014-10-14 20:54 - 2014-09-29 17:32 - 02540544 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll 2013-12-21 10:25 - 2013-12-21 10:25 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll 2013-12-21 10:26 - 2013-12-21 10:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00030720 _____ () C:\WINDOWS\SYSTEM32\MediaDB64.dll 2013-10-22 08:52 - 2013-10-22 08:52 - 00908800 _____ () C:\WINDOWS\SYSTEM32\ContentDirectoryPresenter64.dll 2013-12-21 10:27 - 2013-12-21 10:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00016896 _____ () C:\WINDOWS\SYSTEM32\boost_system-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00058880 _____ () C:\WINDOWS\SYSTEM32\boost_thread-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00049152 _____ () C:\WINDOWS\SYSTEM32\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:19 - 2013-07-23 18:19 - 00299520 _____ () C:\WINDOWS\SYSTEM32\boost_serialization-vc90-mt-1_47.dll 2017-02-14 19:46 - 2017-02-14 19:46 - 00669696 _____ () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-02-13 21:55 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll 2017-01-29 17:08 - 2016-12-29 14:16 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-01-29 16:45 - 2017-01-29 16:45 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-29 16:45 - 2017-01-29 16:45 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-29 16:46 - 2017-01-29 16:46 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2013-07-03 10:27 - 2012-03-21 04:05 - 00051776 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe 2014-10-14 20:54 - 2014-09-29 17:32 - 00049664 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-02-06 20:02 - 2017-02-06 20:03 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 42895872 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-02-06 20:02 - 2017-02-06 20:03 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\roottools.dll 2017-02-04 20:17 - 2017-02-01 10:47 - 02459992 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll 2017-02-04 20:17 - 2017-02-01 10:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll 2015-02-19 22:37 - 2015-02-19 22:37 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll 2013-07-23 18:18 - 2013-07-23 18:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll 2013-10-22 08:48 - 2013-10-22 08:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll 2013-10-24 15:53 - 2013-10-24 15:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll 2013-04-19 15:38 - 2013-04-19 15:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll 2013-12-11 15:46 - 2013-12-11 15:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll 2013-10-25 18:49 - 2013-10-25 18:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll 2013-12-11 15:45 - 2013-12-11 15:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll 2013-10-25 18:53 - 2013-10-25 18:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll 2013-10-25 18:48 - 2013-10-25 18:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll 2013-02-14 18:42 - 2013-02-14 18:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll 2017-02-14 19:48 - 2017-02-14 19:48 - 00098816 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32api.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00110080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\pywintypes27.dll 2017-02-14 19:48 - 2017-02-14 19:48 - 00364544 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\pythoncom27.dll 2017-02-14 19:48 - 2017-02-14 19:48 - 00320512 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32com.shell.shell.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00914432 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_hashlib.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 01176576 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._core_.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00806400 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._gdi_.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00816128 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._windows_.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 01067008 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._controls_.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00733184 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._misc_.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00682496 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\pysqlite2._sqlite.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00088064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_ctypes.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00686080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\unicodedata.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00119808 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32file.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00108544 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32security.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00007168 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\hashobjs_ext.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00017920 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\thumbnails_ext.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00088064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\usb_ext.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00012800 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\common.time34.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00018432 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32event.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00167936 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32gui.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00046080 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_socket.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 01303552 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_ssl.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00128512 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_elementtree.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00127488 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\pyexpat.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00038912 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32inet.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00036864 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_psutil_windows.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00524248 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\windows._lib_cacheinvalidation.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00011264 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32crypt.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00123392 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._wizard.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00077312 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._html2.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00027648 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_multiprocessing.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00020480 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\_yappi.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00035840 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32process.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00078848 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\wx._animate.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00024064 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32pipe.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00010240 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\select.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00025600 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32pdh.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00017408 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32profile.pyd 2017-02-14 19:48 - 2017-02-14 19:48 - 00022528 ____R () C:\Users\Felix\AppData\Local\Temp\_MEI66242\win32ts.pyd 2016-11-07 20:50 - 2016-11-07 20:50 - 06950432 _____ () C:\Users\Felix\AppData\Local\Apps\2.0\6AO9PYBW.MNP\LNO9QCND.KAL\move..tion_391e8feca7b0cf78_0001.0004_6f8afc924d2bed6c\BLLWrapper.DLL 2013-07-03 10:48 - 2012-07-18 13:27 - 00021072 _____ () C:\Program Files (x86)\Lenovo\Lenovo Smart Update\HookDll.dll 2017-02-08 00:35 - 2017-02-07 05:48 - 00801600 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll 2017-02-01 20:25 - 2017-01-14 00:53 - 00035792 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00100296 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00018888 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\select.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00019776 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2017-02-01 20:25 - 2017-01-14 00:53 - 00694224 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00020824 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2017-02-01 20:25 - 2017-01-14 00:54 - 00123856 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01682768 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00020816 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00145864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2017-02-08 00:35 - 2017-01-14 00:54 - 00019408 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00116688 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2017-02-01 20:25 - 2017-01-14 00:56 - 00105928 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32api.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00052544 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00038712 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\fastpath.pyd 2017-02-08 00:35 - 2017-01-14 00:53 - 00392144 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2017-02-08 00:35 - 2017-01-14 00:56 - 00020936 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00024528 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32event.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00116176 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32security.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00381760 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00124880 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32file.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00026456 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00024016 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00175560 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32gui.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00030160 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00043472 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32process.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00048592 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32service.pyd 2017-02-01 20:25 - 2017-01-14 00:56 - 00057808 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00024016 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32profile.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00246608 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00027488 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2017-02-01 20:25 - 2017-01-14 00:55 - 00241104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00022336 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00028616 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32ts.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01826104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2017-02-01 20:25 - 2017-01-14 00:54 - 00083912 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\sip.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 01972536 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 03928896 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00531264 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00025432 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00133432 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00224064 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00207680 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00021840 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00069968 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022872 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00021848 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00022872 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00350152 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00103232 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWinExtras.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00023896 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00025936 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2017-02-08 00:35 - 2017-01-14 00:51 - 00036296 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\librsync.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00033112 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2017-02-08 00:35 - 2016-12-22 07:58 - 00293392 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00084288 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2017-02-08 00:35 - 2017-01-14 01:02 - 00017864 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\libEGL.dll 2017-02-08 00:35 - 2017-01-14 01:02 - 01631184 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2017-02-08 00:35 - 2017-02-07 05:50 - 00042816 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00171336 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00357688 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2017-02-01 20:25 - 2017-01-14 00:57 - 00060880 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\win32print.pyd 2017-02-01 20:25 - 2017-02-07 05:50 - 00026456 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2017-02-08 00:35 - 2017-02-07 05:50 - 00546104 _____ () C:\Users\Felix\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2013-07-03 10:21 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1078537693-2019248843-686258836-1002\Control Panel\Desktop\\Wallpaper -> C:\Felix\Snowboard Wallpapers\Snowboard_wallpaper_Nicolas-Muller-_1920x1080.jpg DNS Servers: 192.168.8.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{45FE6330-5EDB-4BBA-AD1E-A374B3B6A209}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe FirewallRules: [{65AC40DA-528A-4B99-8191-C9DF7CCA74C5}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe FirewallRules: [{C658C94A-EA18-4D73-9092-29431F0613D4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D0095373-48F8-4752-A635-9D7EE8205D54}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{92166C44-F5F9-4262-85B0-C0BCA414350D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{21BD3293-333C-4113-A62F-3B1B015314E4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{82AE3F01-51C0-47F5-8230-1B5D0033D5B7}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{404EBC5E-B9C2-4F1B-B388-EC3F315C5EE3}C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\felix\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{B0B9C0E6-F146-4500-8E24-061DF14C6E7E}] => C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{8418201C-9554-41EF-BDD8-4A0214C7EA56}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{51400B8C-2652-47E7-BAA0-20F851AEED60}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{292C3273-784D-444D-A72A-07B72BAE2DC6}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe FirewallRules: [{05407D69-FEC3-4131-83C2-963DC16C3C50}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{725DFA50-D992-49F9-8FBB-030FD4FA3E02}] => C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE FirewallRules: [{1C643327-D3D9-4C86-98B3-BD309B291847}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{79D54DC8-713C-4002-9994-5110D9BAA7FD}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{EDCF5330-8F2D-41B1-BCAF-90F8A6F0911D}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{7AD965C3-72B9-4502-9B4A-D5E0C11AD2A4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{035E7C89-46EB-4B48-B16B-774E3597A7F0}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{D7EF488B-238C-4322-A9DF-60F13532B285}] => D:\Programme\Office14\outlook.exe FirewallRules: [{E7839166-CB67-4A77-B741-436D6014E7E4}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{D7F85A1D-431A-4339-9C5D-D548E71AE4C3}] => D:\Programme\Office14\GROOVE.EXE FirewallRules: [{5C57C510-467E-48BC-9931-59D2D6CC585A}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{060A138E-1803-43EB-9162-A35D4F1885B4}] => D:\Programme\Office14\ONENOTE.EXE FirewallRules: [{8FE8F125-38C6-4572-8760-0CC4C5096ECE}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{BAC178C0-2AD2-4CA0-BCEE-A4A462C58EE5}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{AA832FDE-FD79-4A17-9A3F-248B9CDF3CEF}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [TCP Query User{C53A6FE7-92C7-4905-B188-D8021A9FDFE4}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7AA8CD62-8D91-4BFA-B73C-4A6EEE87274D}C:\users\felix\appdata\roaming\spotify\spotify.exe] => C:\users\felix\appdata\roaming\spotify\spotify.exe FirewallRules: [{B152DCDF-0293-412D-98CF-7D6ADD306767}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2A63C53E-CA1D-4327-B82E-7B185229CED9}] => C:\Users\Felix\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{2DB78C5F-A7C8-45BD-A129-FDA7BAE6883E}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BC4EF10F-7A63-49D8-B337-9A78C66C3100}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{492C79F5-5C54-4D90-9A8F-4A9AAF923066}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{CF52B653-CC86-45D8-8691-5AF2A2B06EF8}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{DB5329C9-EE4F-4B33-B38D-C45A4AB2A05B}] => C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{5372604E-8F3D-4093-B976-300B633E8967}] => LPort=8743 FirewallRules: [{ECBCCDA5-FD33-4747-AF98-DF431E24B124}] => LPort=8643 FirewallRules: [{64EC97C1-6A4B-4C3B-B117-F2F1048E4733}] => LPort=7676 FirewallRules: [{5BBF33D8-C27E-4199-AAB1-F6067F5AA333}] => LPort=7679 FirewallRules: [{C5B6EB29-23F4-4159-AB41-8957B45B7FA7}] => LPort=24234 FirewallRules: [{234DB7E3-6A86-424F-99D1-5389F9160A31}] => LPort=7900 FirewallRules: [{46476EA0-2C91-4A7F-80C5-D431169E7174}] => LPort=1900 FirewallRules: [{7CD8061D-6BFC-48B8-9ED2-B68038C61E0E}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{E2D759B8-0E67-43E2-864A-D69614D4695D}] => C:\Program Files\Samsung\Samsung Link\Samsung Link.exe FirewallRules: [{97D85475-216E-44A1-AF62-25AFF6A16EE9}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{B88A5D7A-675B-48A7-B4E4-D4876A5F2EFC}] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe FirewallRules: [{8FB07FAE-56BF-418C-B975-1A14589EBDDD}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{81FB46EA-154F-4321-A492-3BB82707CCD3}] => C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{AF783283-9B24-4C00-84CF-CC2B4D52FAB1}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B840725C-D52C-4E5E-9D78-5B9EE8245714}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{CB650059-4C14-4B70-B333-455E1B39C008}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 13-02-2017 22:46:46 JRT Pre-Junkware Removal ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 07:46:22 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (02/14/2017 06:23:30 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1204 Error: (02/14/2017 06:23:30 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1204 Error: (02/14/2017 06:23:30 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/13/2017 10:47:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Systemfehler: ============= Error: (02/14/2017 07:56:01 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT) Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/14/2017 07:52:49 PM) (Source: DCOM) (EventID: 10029) (User: NT-AUTORITÄT) Description: Das Zeitlimit für die Aktivierung der CLSID "{3185A766-B338-11E4-A71E-12E3F512A338}" wurde überschritten, während auf das Beenden von Dienst "wisvc" gewartet wurde. Error: (02/14/2017 07:52:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden. Error: (02/14/2017 07:52:05 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: Der Benutzername oder das Kennwort ist falsch. Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (02/14/2017 07:50:23 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde nicht richtig gestartet. Error: (02/14/2017 07:50:23 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde nicht richtig gestartet. Error: (02/14/2017 07:47:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (02/14/2017 07:47:48 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst FontCache3.0.0.0 erreicht. Error: (02/14/2017 07:47:29 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/14/2017 07:47:29 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz Prozentuale Nutzung des RAM: 53% Installierter physikalischer RAM: 8066.02 MB Verfügbarer physikalischer RAM: 3718.95 MB Summe virtueller Speicher: 9474.02 MB Verfügbarer virtueller Speicher: 4940.1 MB ==================== Laufwerke ================================ Drive c: (Windows8_OS) (Fixed) (Total:890.73 GB) (Free:35.29 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:19.76 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 22.4 GB) (Disk ID: 48583CDC) Partition: GPT. ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 48583CDF) Partition: GPT. ==================== Ende von Addition.txt ============================ während dem Ausführen der letzten Schritte haben sich nun keine - nicht gewollten - Tabs mehr geöffnet. Bis jetzt würde ich also sagen, dass das Problem gelöst ist. Falls sich doch noch neue Tabs, öffnen gebe ich dir Bescheid. Vielen Dank für deine super Unterstützung. Beste Grüße Felix |
14.02.2017, 21:06 | #14 | ||||||||||
/// TB-Ausbilder | Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Cleanup: Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank: Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional: Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Lade Software von einem sauberen Portal wie . Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
17.02.2017, 20:52 | #15 |
/// TB-Ausbilder | Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) Ich bin froh, dass wir helfen konnten In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
Themen zu Chrome öffnet immer Werbung und neue Tabs (trotz AdBlocker) |
ahnung, avast, avira, browser, doppel, doppelt, einfach, folge, folgen, google, google chrome, klicken, nervige, neu, neue, popup, popup werbung, problem, probleme, seite, seiten, thread, trotz, trotz adblocker, werbung, worte, öffnet, öffnet tabs selbständig |