|
Plagegeister aller Art und deren Bekämpfung: System_Service_Exception (Bluescreens)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.02.2017, 18:34 | #1 |
| System_Service_Exception (Bluescreens) *Ich habe gestern schon das gleiche Thema eröffnet, aber anscheinend wurde es nicht eröffnet oder von jemandem von euch gelöscht. Falls letzteres zutrifft, dann tut es mir für den Repost leid, ich bin mir einfach nicht sicher, ob ich es vergessen habe es zu eröffnen oder nicht. Falls ihr es gelöscht habt, fehlt mir eine Mitteilung wegen der Begründung. ****** Hallo! Also das Problem ist, dass ich in letzter Zeit verhäuft Bluescreens mit dem Fehler "System_Service_Exception" kriege. Zuerst habe ich einen Treiber-Problem vermutet, jedoch sind/müssten alle Treiber auf dem neusten Stand sein. Zudem habe ich weitere Anzeichen bemerkt, die auf ein Viren-Befall andeutet wie verhäufte CPU-Auslastung. Dennoch kann es auch sein, dass ich mir das einfach nach dem Motto "Wer sucht, der findet" zu sehr einbilde. Bevor es aber zu spät ist, dachte ich, ich frag hier einfach mal nach und hoffe, dass sich während der Untersuchung mein Verdacht widerlegt oder bestätigt. Ich bedanke mich schon im Voraus an das Team, das hinter dem Forum steht, und an den Experten, der mich durch die Untersuchung führen wird! Ihr macht echt gute Arbeit hier, sowas in der Freizeit zu leisten. Grüße RTS-Log: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2017 durchgeführt von xx (Administrator) auf xx-PC (12-02-2017 21:29:21) Gestartet von C:\Users\xx\Desktop Geladene Profile: xx (Verfügbare Profile: xx) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKBackup\AVKBackupService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe (Mixesoft Project) C:\Users\xx\AppData\Local\Mixesoft\AppNHost\appnhost.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Spotify Ltd) C:\Users\xx\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Creative Technology Ltd) C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Macrovision Europe Ltd.) C:\Users\xx\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001 (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe () C:\Windows\System32\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (LogMeIn Inc.) E:\Program Files (x86)\Hamachi\x64\hamachi-2.exe (LogMeIn, Inc.) E:\Program Files (x86)\Hamachi\x64\LMIGuardianSvc.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe (Creative Labs) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe () C:\Program Files\Core Temp\Core Temp.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe () C:\Windows\SysWOW64\PnkBstrB.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor) HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry HKLM\...\Run: [ProxyCap] => E:\PROGRA~2\PROXYL~1\ProxyCap\pcapui.exe HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\Run: [CTSyncService] => C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd) HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [441160 2016-09-15] (G DATA Software AG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe, HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [GAINWARD] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2263664 2011-01-27] (Gainward Co.) HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [appnhost] => C:\Users\xx\AppData\Local\Mixesoft\AppNHost\appnhost.exe [453176 2014-08-08] (Mixesoft Project) HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [Spotify Web Helper] => C:\Users\xx\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-12] (Spotify Ltd) HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-10-01] (Microsoft Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{EB85FD32-39AC-4AE5-B5F7-28FECB86A3B2}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{FA86910A-4DA5-49F3-A860-AC14953F2E34}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp SearchScopes: HKU\S-1-5-21-3243579912-1492025509-2315471678-1000 -> {857448EC-C5BF-4a1f-B6F7-65DC45A7D9EE} URL = hxxps://www.google.com/search?q={searchTerms} BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-18] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-18] (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab FireFox: ======== FF DefaultProfile: ajpw9s9q.default FF ProfilePath: C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\ajpw9s9q.default [2016-11-13] FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-18] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-18] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "chrome://newtab/" CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default [2017-02-12] CHR Extension: (Google Präsentationen) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05] CHR Extension: (Google Docs) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05] CHR Extension: (Google Drive) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26] CHR Extension: (Google-Suche) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Tabellen) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05] CHR Extension: (HTTPS Everywhere) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2017-01-28] CHR Extension: (Google Docs Offline) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19] CHR Extension: (Google Mail) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR Extension: (Chrome Media Router) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-03] CHR Extension: (Privacy Badger) - C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2017-01-26] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [4950632 2016-10-06] (G DATA Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [984904 2016-09-15] (G DATA Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3044496 2016-09-27] (G Data Software AG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1465352 2017-01-13] () R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [76848 2017-02-06] (CyberGhost S.R.L) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert] R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [20512 2014-03-13] (Micro-Star Int'l Co., Ltd.) R2 GDBackupSvc; C:\Program Files (x86)\G Data\InternetSecurity\AVKBackup\AVKBackupService.exe [4072264 2016-09-30] (G DATA Software AG) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3286120 2016-09-15] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [822600 2016-09-27] (G DATA Software AG) R2 Hamachi2Svc; E:\Program Files (x86)\Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.) S4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation) S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2017-02-07] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184208 2017-02-07] (Electronic Arts) S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1318128 2017-02-02] (Overwolf LTD) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-12-28] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-12-28] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [226168 2017-02-12] () R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert] S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [31808 2014-10-04] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2014-10-01] (FNet Co., Ltd.) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [180808 2016-10-13] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [37400 2016-10-13] (G Data Software AG) R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [30280 2016-10-13] (G DATA Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [304200 2016-10-13] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [88136 2016-10-13] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [74824 2016-10-13] (G DATA Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [116296 2016-10-19] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [153160 2016-10-13] (G Data Software AG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation) S3 TBPanel; kein ImagePath S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments) U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation) R3 ALSysIO; \??\C:\Users\x~1\AppData\Local\Temp\ALSysIO64.sys [X] <==== ACHTUNG ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-12 21:29 - 2017-02-12 21:29 - 00021688 _____ C:\Users\xx\Desktop\FRST.txt 2017-02-12 21:29 - 2017-02-12 21:29 - 00000000 ____D C:\FRST 2017-02-12 21:28 - 2017-02-12 21:28 - 02421248 _____ (Farbar) C:\Users\xx\Desktop\FRST64.exe 2017-02-11 22:12 - 2017-02-11 22:12 - 00406144 _____ C:\Windows\Minidump\021117-9016-01.dmp 2017-02-08 17:25 - 2016-11-15 00:27 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-02-08 17:25 - 2016-11-14 23:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-02-08 17:25 - 2016-11-12 20:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-02-08 17:25 - 2016-11-12 20:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-02-08 17:25 - 2016-11-12 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-02-08 17:25 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-02-08 17:25 - 2016-11-12 20:21 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-02-08 17:25 - 2016-11-12 20:15 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-02-08 17:25 - 2016-11-12 20:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-02-08 17:25 - 2016-11-12 20:09 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-02-08 17:25 - 2016-11-12 20:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-02-08 17:25 - 2016-11-12 20:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-02-08 17:25 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-02-08 17:25 - 2016-11-12 20:07 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-02-08 17:25 - 2016-11-12 19:56 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-02-08 17:25 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-02-08 17:25 - 2016-11-12 19:52 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-02-08 17:25 - 2016-11-12 19:41 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-02-08 17:25 - 2016-11-12 19:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-02-08 17:25 - 2016-11-12 19:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-02-08 17:25 - 2016-11-12 19:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-02-08 17:25 - 2016-11-12 19:30 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-02-08 17:25 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-02-08 17:25 - 2016-11-12 19:29 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-02-08 17:25 - 2016-11-12 19:29 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-02-08 17:25 - 2016-11-12 19:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-02-08 17:25 - 2016-11-12 19:27 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-02-08 17:25 - 2016-11-12 19:20 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-02-08 17:25 - 2016-11-12 19:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-02-08 17:25 - 2016-11-12 19:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-02-08 17:25 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-02-08 17:25 - 2016-11-12 19:15 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-02-08 17:25 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-02-08 17:25 - 2016-11-12 19:14 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-02-08 17:25 - 2016-11-12 19:14 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-02-08 17:25 - 2016-11-12 19:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-02-08 17:25 - 2016-11-12 19:11 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-02-08 17:25 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-02-08 17:25 - 2016-11-12 19:08 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-02-08 17:25 - 2016-11-12 19:08 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-02-08 17:25 - 2016-11-12 19:03 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-02-08 17:25 - 2016-11-12 18:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-02-08 17:25 - 2016-11-12 18:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-02-08 17:25 - 2016-11-12 18:52 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-02-08 17:25 - 2016-11-12 18:51 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-02-08 17:25 - 2016-11-12 18:49 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-02-08 17:25 - 2016-11-12 18:47 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-02-08 17:25 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-02-08 17:25 - 2016-11-12 18:40 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-02-08 17:25 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-02-08 17:25 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-02-08 17:25 - 2016-11-12 18:36 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-02-08 17:25 - 2016-11-12 18:36 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-02-08 17:25 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-02-08 17:25 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-02-08 17:25 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-02-08 17:25 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-02-08 17:25 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-02-08 17:25 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-02-08 17:24 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-02-08 17:24 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-02-08 17:24 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-02-08 17:24 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-02-08 17:24 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-02-08 17:24 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-02-08 17:24 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-02-08 17:24 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-02-08 17:24 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-02-08 17:24 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-02-08 17:24 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-02-08 17:24 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-02-08 17:24 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-02-08 17:24 - 2016-11-21 19:12 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2017-02-08 17:24 - 2016-11-20 17:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2017-02-08 17:24 - 2016-11-20 15:07 - 00467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2017-02-08 17:24 - 2016-11-17 17:41 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2017-02-08 17:24 - 2016-11-12 20:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-02-08 17:24 - 2016-11-12 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-02-08 17:24 - 2016-11-12 20:25 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-02-08 17:24 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-02-08 17:24 - 2016-11-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-02-08 17:24 - 2016-11-12 19:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-02-08 17:24 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-02-08 17:24 - 2016-11-10 17:32 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2017-02-08 17:24 - 2016-11-10 17:19 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2017-02-08 17:24 - 2016-11-09 17:41 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2017-02-08 17:24 - 2016-11-09 17:33 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2017-02-08 17:24 - 2016-11-09 17:33 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2017-02-08 17:24 - 2016-11-09 17:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2017-02-08 17:24 - 2016-11-09 17:33 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2017-02-08 17:24 - 2016-11-09 17:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2017-02-08 17:24 - 2016-11-09 17:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2017-02-08 17:24 - 2016-11-09 17:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2017-02-08 17:24 - 2016-11-09 17:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2017-02-08 17:24 - 2016-11-09 17:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2017-02-08 17:24 - 2016-11-09 17:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2017-02-08 17:24 - 2016-11-09 17:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2017-02-08 17:24 - 2016-11-09 17:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2017-02-08 17:24 - 2016-11-09 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2017-02-08 17:24 - 2016-11-06 17:33 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-02-08 17:24 - 2016-11-06 17:16 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-02-08 17:24 - 2016-11-06 17:01 - 03219456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-02-08 17:24 - 2016-10-27 16:33 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2017-02-08 17:24 - 2016-10-27 16:20 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2017-02-08 17:24 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-02-08 17:24 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-02-08 17:24 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-02-08 17:24 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-02-08 17:24 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-02-08 17:24 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-02-08 17:24 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-02-08 17:24 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-02-08 17:24 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-02-08 17:24 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-02-08 17:24 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-02-08 17:24 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2017-02-08 17:24 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-02-08 17:24 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-02-08 17:24 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-02-08 17:24 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-02-08 17:24 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-02-08 17:24 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-02-08 17:24 - 2016-10-11 14:18 - 00419648 _____ C:\Windows\SysWOW64\locale.nls 2017-02-08 17:24 - 2016-10-11 14:17 - 00419648 _____ C:\Windows\system32\locale.nls 2017-02-08 17:24 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2017-02-08 17:24 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2017-02-08 17:24 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2017-02-08 17:24 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2017-02-08 17:24 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2017-02-08 17:24 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2017-02-08 17:24 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2017-02-08 17:24 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2017-02-08 17:24 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2017-02-07 21:37 - 2016-09-12 22:17 - 00077032 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-02-07 21:37 - 2016-09-12 22:08 - 01226752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 01629184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-02-07 21:37 - 2016-09-09 16:54 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-02-07 21:37 - 2016-08-29 16:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-02-07 21:37 - 2016-08-29 16:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-02-07 21:37 - 2016-08-29 16:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-02-07 21:37 - 2016-08-29 16:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-02-07 21:37 - 2016-08-29 16:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2017-02-07 21:37 - 2016-08-29 15:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2017-02-07 21:37 - 2016-08-16 21:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2017-02-07 21:37 - 2016-08-16 21:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2017-02-07 21:37 - 2016-07-07 16:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-02-07 21:37 - 2016-07-07 16:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2017-02-07 21:37 - 2016-07-07 16:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2017-02-07 21:37 - 2016-07-07 16:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2017-02-07 21:37 - 2016-05-13 23:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-02-07 21:37 - 2016-05-13 23:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-02-07 21:37 - 2016-05-13 23:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-02-07 21:37 - 2016-05-13 23:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2017-02-07 21:37 - 2016-05-13 22:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-02-07 21:37 - 2016-05-13 22:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-02-07 21:37 - 2016-05-13 22:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-02-07 21:37 - 2016-05-13 22:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-02-07 21:37 - 2016-05-13 22:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2017-02-07 21:37 - 2016-05-13 22:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2017-02-07 21:37 - 2016-05-13 22:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2017-02-07 21:37 - 2016-05-13 22:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-02-07 21:37 - 2016-05-13 22:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-02-07 21:37 - 2016-05-13 22:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-02-07 21:37 - 2016-05-13 22:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-02-07 21:37 - 2016-05-13 22:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2017-02-07 21:37 - 2016-05-12 16:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2017-02-07 21:37 - 2016-03-16 19:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2017-02-07 21:37 - 2016-03-16 19:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2017-02-07 21:37 - 2016-03-16 19:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2017-02-07 21:37 - 2016-03-09 20:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2017-02-07 21:37 - 2016-03-09 19:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2017-02-07 21:37 - 2016-03-09 19:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2017-02-07 21:37 - 2016-03-09 19:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2017-02-07 21:37 - 2016-02-05 19:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2017-02-07 21:37 - 2016-02-05 19:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2017-02-07 21:37 - 2016-02-05 18:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2017-02-07 21:37 - 2016-02-02 19:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-02-07 21:37 - 2016-01-21 01:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2017-02-07 21:37 - 2016-01-11 20:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-02-07 21:37 - 2015-11-19 15:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2017-02-07 21:37 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2017-02-07 21:37 - 2015-06-03 21:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-02-06 23:29 - 2017-02-06 23:29 - 00000000 ____D C:\Users\xx\AppData\Roaming\NuGet 2017-02-06 23:29 - 2017-02-06 23:29 - 00000000 ____D C:\Users\xx\AppData\LocalLow\Temp 2017-02-06 23:23 - 2017-02-06 23:23 - 00000000 ____D C:\Users\xx\.dnx 2017-02-06 23:19 - 2017-02-06 23:19 - 00001535 _____ C:\Users\xx\Desktop\Visual Studio 2015.lnk 2017-02-06 23:14 - 2017-02-06 23:23 - 00000000 ____D C:\Users\xx\Documents\Visual Studio 2015 2017-02-06 23:10 - 2017-02-06 23:10 - 00000000 ____D C:\Program Files (x86)\AppInsights 2017-02-06 23:06 - 2017-02-06 23:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0 2017-02-06 23:01 - 2017-02-06 23:01 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2017-02-06 23:01 - 2017-02-06 23:01 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2017-02-06 22:59 - 2017-02-06 23:06 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2017-02-06 22:59 - 2017-02-06 22:59 - 00000000 ____D C:\ProgramData\PreEmptive Solutions 2017-02-06 22:59 - 2017-02-06 22:59 - 00000000 ____D C:\Program Files (x86)\ShellDir 2017-02-06 22:57 - 2017-02-06 22:57 - 00000000 ____D C:\ProgramData\Microsoft DNX 2017-02-06 22:57 - 2017-02-06 22:57 - 00000000 ____D C:\Program Files\Microsoft DNX 2017-02-06 22:56 - 2017-02-06 22:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Web Tools 2017-02-06 22:53 - 2017-02-06 22:53 - 00000000 ____D C:\Program Files\IIS Express 2017-02-06 22:53 - 2017-02-06 22:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Office365 Tools 2017-02-06 22:53 - 2017-02-06 22:53 - 00000000 ____D C:\Program Files (x86)\IIS Express 2017-02-06 22:52 - 2017-02-06 22:52 - 00000000 ____D C:\ProgramData\NuGet 2017-02-06 22:52 - 2017-02-06 22:52 - 00000000 ____D C:\Program Files\IIS 2017-02-06 22:52 - 2017-02-06 22:52 - 00000000 ____D C:\Program Files (x86)\NuGet 2017-02-06 22:52 - 2017-02-06 22:52 - 00000000 ____D C:\Program Files (x86)\Microsoft WCF Data Services 2017-02-06 22:52 - 2017-02-06 22:52 - 00000000 ____D C:\Program Files (x86)\IIS 2017-02-06 22:51 - 2017-02-06 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression 2017-02-06 22:50 - 2017-02-06 23:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2017-02-06 22:50 - 2017-02-06 22:50 - 00001534 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk 2017-02-06 22:50 - 2017-02-06 22:50 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 12.0 2017-02-06 22:49 - 2017-02-06 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015 2017-02-06 22:48 - 2017-02-06 22:48 - 00000000 ____D C:\Windows\symbols 2017-02-06 22:48 - 2017-02-06 22:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2017-02-06 22:46 - 2017-02-06 23:07 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2017-02-06 22:46 - 2017-02-06 23:07 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2017-02-06 22:46 - 2017-02-06 22:50 - 00000000 ____D C:\Windows\SysWOW64\1031 2017-02-06 22:46 - 2017-02-06 22:46 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk 2017-02-06 22:46 - 2017-02-06 22:46 - 00000000 ____D C:\Windows\SysWOW64\1033 2017-02-06 22:46 - 2017-02-06 22:46 - 00000000 ____D C:\Windows\system32\1033 2017-02-06 22:44 - 2017-02-06 23:06 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2017-02-06 22:44 - 2017-02-06 23:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0 2017-02-06 22:44 - 2017-02-06 23:00 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2017-02-06 22:44 - 2017-02-06 22:46 - 00000000 ____D C:\Windows\system32\1031 2017-02-06 22:44 - 2017-02-06 22:44 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 14.0 2017-02-06 22:40 - 2017-02-06 22:40 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-02-05 22:51 - 2017-02-07 22:57 - 00000000 ____D C:\Users\xx\Desktop\StuBo_Q1_BOW_2017 2017-02-04 15:10 - 2017-02-04 15:10 - 00385280 _____ C:\Windows\Minidump\020417-8611-01.dmp 2017-02-04 14:34 - 2017-02-04 14:34 - 00406192 _____ C:\Windows\Minidump\020417-8455-01.dmp 2017-02-04 13:39 - 2017-01-20 15:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2017-02-04 13:36 - 2017-01-24 00:04 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2017-02-04 13:36 - 2017-01-24 00:04 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 40192056 _____ C:\Windows\system32\nvcompiler.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 34934720 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 28209720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 19008392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 16403200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 14677456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 13378448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 11123424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 03623992 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 03185720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 01051072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00990264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00609216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00412720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00173272 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00156792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00150760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00135840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2017-02-04 13:36 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json 2017-02-04 13:36 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\system32\nv-vk64.json 2017-02-04 13:20 - 2017-01-20 19:39 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2017-02-04 13:20 - 2017-01-20 19:39 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2017-02-04 13:20 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys 2017-02-04 13:20 - 2017-01-20 19:39 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2017-02-04 12:58 - 2017-02-04 13:00 - 00182528 _____ C:\Windows\ntbtlog.txt 2017-02-04 12:58 - 2017-02-04 12:58 - 00386144 _____ C:\Windows\Minidump\020417-10108-01.dmp 2017-02-04 12:56 - 2017-02-04 12:56 - 00385264 _____ C:\Windows\Minidump\020417-9141-01.dmp 2017-01-29 00:05 - 2017-01-29 00:05 - 00406160 _____ C:\Windows\Minidump\012917-8720-01.dmp 2017-01-28 18:01 - 2017-01-28 18:01 - 00406128 _____ C:\Windows\Minidump\012817-9453-01.dmp 2017-01-28 11:35 - 2017-02-06 17:41 - 00000000 ____D C:\Users\xx\AppData\Local\Arma 3 2017-01-28 11:35 - 2017-01-28 12:15 - 00000000 ____D C:\Users\xx\Documents\Arma 3 2017-01-28 11:35 - 2017-01-28 11:35 - 00000000 ____D C:\ProgramData\Bohemia Interactive 2017-01-28 11:27 - 2017-01-28 11:27 - 00000000 ____D C:\Users\xx\AppData\Local\Bohemia_Interactive 2017-01-28 11:26 - 2017-02-06 17:41 - 00000000 ____D C:\Users\xx\AppData\Local\Arma 3 Launcher 2017-01-27 15:20 - 2017-01-27 15:20 - 00000000 ____D C:\Users\xx\Documents\streumon 2017-01-27 14:53 - 2017-01-27 14:53 - 00000222 _____ C:\Users\xx\Desktop\Arma 3.url 2017-01-26 17:25 - 2017-01-26 17:25 - 00000221 _____ C:\Users\xx\Desktop\E.Y.E Divine Cybermancy.url 2017-01-23 21:28 - 2017-01-23 21:28 - 00406176 _____ C:\Windows\Minidump\012317-8704-01.dmp 2017-01-23 16:22 - 2017-01-23 16:22 - 00406208 _____ C:\Windows\Minidump\012317-8626-01.dmp 2017-01-21 18:02 - 2017-01-21 18:02 - 00000000 ____D C:\Users\xx\AppData\LocalLow\Jannik Nickel 2017-01-21 18:00 - 2017-01-21 18:00 - 00000000 ____D C:\Users\xx\Desktop\Ancient Warfare 2 2017-01-19 21:13 - 2017-01-19 21:13 - 00000000 ____D C:\Users\xx\AppData\Local\Just Cause 3 Multiplayer 2017-01-19 21:12 - 2017-01-19 21:12 - 00000946 _____ C:\Users\Public\Desktop\Just Cause 3 Multiplayer.lnk 2017-01-19 21:12 - 2017-01-19 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Just Cause 3 Multiplayer 2017-01-13 19:14 - 2017-01-13 19:14 - 00000000 ____D C:\Users\xx\AppData\Local\TeamSpeak 3 2017-01-13 19:14 - 2017-01-13 19:14 - 00000000 ____D C:\Users\xx\.TeamSpeak 3 2017-01-13 17:27 - 2017-01-13 17:27 - 00406152 _____ C:\Windows\Minidump\011317-8626-01.dmp ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-12 21:28 - 2016-11-25 17:22 - 00001208 _____ C:\Users\xx\Desktop\x.txt 2017-02-12 21:28 - 2014-10-01 14:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2017-02-12 21:27 - 2016-04-09 21:07 - 00007620 _____ C:\Users\xx\AppData\Local\Resmon.ResmonCfg 2017-02-12 21:12 - 2014-10-04 12:59 - 00000000 ____D C:\Users\xx\AppData\Roaming\Origin 2017-02-12 21:12 - 2014-10-04 12:57 - 00000000 ____D C:\ProgramData\Origin 2017-02-12 19:25 - 2014-10-13 20:23 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2017-02-12 19:25 - 2014-10-13 20:23 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2017-02-12 14:07 - 2014-10-04 12:54 - 00000000 ____D C:\Program Files (x86)\Steam 2017-02-12 14:02 - 2016-01-15 23:12 - 00000000 ____D C:\Users\xx\AppData\Local\LogMeIn Hamachi 2017-02-12 13:19 - 2009-07-14 18:58 - 00699092 _____ C:\Windows\system32\perfh007.dat 2017-02-12 13:19 - 2009-07-14 18:58 - 00149232 _____ C:\Windows\system32\perfc007.dat 2017-02-12 13:19 - 2009-07-14 06:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI 2017-02-12 13:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2017-02-12 13:13 - 2014-10-01 13:11 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-12 13:11 - 2009-07-14 05:45 - 00023856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-02-12 13:11 - 2009-07-14 05:45 - 00023856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-02-12 13:03 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-02-11 23:46 - 2014-10-05 21:27 - 00000000 ____D C:\Users\xx\AppData\Roaming\TS3Client 2017-02-11 22:12 - 2014-10-10 17:53 - 784875966 _____ C:\Windows\MEMORY.DMP 2017-02-11 22:12 - 2014-10-10 17:53 - 00000000 ____D C:\Windows\Minidump 2017-02-11 22:00 - 2014-10-01 22:05 - 00000000 ____D C:\Users\xx\AppData\Local\CrashDumps 2017-02-11 19:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2017-02-10 22:21 - 2016-09-09 21:08 - 00001068 _____ C:\Users\xx\Downloads\x.txt 2017-02-10 21:53 - 2015-09-25 16:38 - 00000000 ____D C:\Users\xx\AppData\Local\Spotify 2017-02-10 21:18 - 2015-09-25 16:38 - 00000000 ____D C:\Users\xx\AppData\Roaming\Spotify 2017-02-10 19:14 - 2014-10-04 13:13 - 00000000 ____D C:\Program Files (x86)\Overwolf 2017-02-09 19:20 - 2009-07-14 05:45 - 00385552 _____ C:\Windows\system32\FNTCACHE.DAT 2017-02-08 22:21 - 2014-10-02 09:28 - 01592628 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-02-08 22:20 - 2014-10-01 20:40 - 00000000 ____D C:\Windows\system32\MRT 2017-02-08 22:19 - 2014-10-01 20:40 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-02-08 18:53 - 2014-10-10 15:12 - 00000000 ____D C:\Users\xx\AppData\Local\ElevatedDiagnostics 2017-02-08 17:09 - 2014-12-12 14:42 - 00000000 ____D C:\Windows\system32\appraiser 2017-02-08 17:09 - 2014-10-01 20:41 - 00000000 ___SD C:\Windows\system32\CompatTel 2017-02-08 17:09 - 2009-07-14 19:18 - 00000000 ____D C:\Windows\ShellNew 2017-02-07 19:10 - 2014-10-04 12:57 - 00000000 ____D C:\Program Files (x86)\Origin 2017-02-06 23:23 - 2014-10-01 13:02 - 00000000 ____D C:\Users\xx 2017-02-06 23:16 - 2015-02-08 12:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2017-02-06 23:13 - 2014-10-13 20:22 - 00000000 ____D C:\ProgramData\Package Cache 2017-02-06 23:07 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2017-02-06 23:02 - 2015-02-08 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-02-06 22:48 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-02-04 13:51 - 2014-10-01 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-02-04 13:39 - 2016-03-07 18:46 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-02-04 13:39 - 2014-10-10 20:34 - 00000000 ____D C:\temp 2017-02-04 13:39 - 2014-10-01 13:10 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-02-04 13:37 - 2014-10-01 13:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-02-04 13:21 - 2016-12-20 14:05 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-04 13:21 - 2016-10-06 18:14 - 00001416 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2017-02-04 13:21 - 2014-10-01 13:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-02-04 13:01 - 2016-12-20 14:05 - 00002938 _____ C:\ProgramData\NvTelemetryContainer.log_backup1 2017-02-03 17:38 - 2014-10-04 13:07 - 00000000 ____D C:\Users\xx\AppData\Local\Ubisoft Game Launcher 2017-02-02 21:11 - 2014-10-01 20:45 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-01-27 15:19 - 2014-10-10 20:27 - 00000000 ___HD C:\Windows\msdownld.tmp 2017-01-27 15:19 - 2014-10-10 20:27 - 00000000 ____D C:\Windows\SysWOW64\directx 2017-01-27 14:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2017-01-26 16:18 - 2016-08-24 16:35 - 00000000 ____D C:\Program Files\CyberGhost 6 2017-01-24 00:04 - 2016-07-23 11:59 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2017-01-22 00:12 - 2016-11-13 09:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-01-21 17:59 - 2015-07-08 10:26 - 00000000 ____D C:\Users\xx\Desktop\Sonstige Games 2017-01-20 19:39 - 2016-10-06 18:14 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2017-01-20 19:39 - 2016-10-06 18:14 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2017-01-20 19:39 - 2016-10-06 18:14 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2017-01-20 19:39 - 2016-10-06 18:14 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2017-01-20 19:39 - 2016-10-06 18:14 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2017-01-20 17:36 - 2016-12-20 14:16 - 00496680 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2017-01-20 17:36 - 2016-10-06 19:13 - 14286392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2017-01-20 17:36 - 2016-08-16 10:44 - 16491120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 19092912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 04065808 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 03585120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 00512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 00420408 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2017-01-20 17:36 - 2014-10-01 13:10 - 00042606 _____ C:\Windows\system32\nvinfo.pb 2017-01-20 16:13 - 2016-03-07 18:46 - 00548800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2017-01-20 16:13 - 2016-03-07 18:46 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2017-01-20 16:13 - 2011-01-20 18:26 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2017-01-20 16:13 - 2011-01-20 18:26 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2017-01-20 16:13 - 2011-01-20 18:26 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2017-01-20 16:13 - 2011-01-20 18:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2017-01-20 16:13 - 2011-01-20 18:25 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2017-01-20 15:04 - 2016-10-06 18:14 - 00001951 _____ C:\Windows\NvContainerRecovery.bat 2017-01-20 14:36 - 2016-12-20 14:05 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat 2017-01-18 18:39 - 2015-06-18 20:47 - 00000000 ____D C:\ProgramData\Oracle 2017-01-18 18:33 - 2016-07-10 16:01 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2017-01-18 18:33 - 2016-02-02 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2017-01-18 18:33 - 2015-06-18 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-18 18:33 - 2015-06-18 20:48 - 00000000 ____D C:\Program Files (x86)\Java 2017-01-18 13:57 - 2014-10-04 12:36 - 07755067 _____ C:\Windows\system32\nvcoproc.bin 2017-01-13 19:14 - 2014-10-04 13:13 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-01-11 14:36 - 2015-01-18 15:35 - 28488056 _____ (Sony Mobile Communications ) C:\Users\xx\AppData\Local\pcc.exe 2016-12-15 21:18 - 2016-12-15 21:18 - 0000838 _____ () C:\Users\xx\AppData\Local\recently-used.xbel 2016-04-09 21:07 - 2017-02-12 21:27 - 0007620 _____ () C:\Users\xx\AppData\Local\Resmon.ResmonCfg 2016-12-20 14:05 - 2017-02-04 13:21 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-20 14:05 - 2017-02-04 13:01 - 0002938 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 Einige Dateien in TEMP: ==================== 2006-02-04 12:33 - 2006-02-04 12:33 - 0724992 _____ (Electronic Arts Inc.) C:\Users\xx\AppData\Local\Temp\AutoRun.exe 2016-11-26 10:16 - 2006-01-31 05:56 - 0942080 _____ (Electronic Arts Inc.) C:\Users\xx\AppData\Local\Temp\AutoRunGUI.dll 2016-11-26 11:29 - 2006-02-04 12:33 - 0344064 _____ (Electronic Arts Inc.) C:\Users\xx\AppData\Local\Temp\eauninstall.exe 2016-12-11 23:38 - 2016-12-11 23:38 - 0349255 ____N (Java(TM) Native Access (JNA)) C:\Users\xx\AppData\Local\Temp\jna1359628663862704458.dll 2016-11-12 12:36 - 2016-11-12 12:36 - 0737856 _____ (Oracle Corporation) C:\Users\xx\AppData\Local\Temp\jre-8u111-windows-au.exe 2017-01-18 18:32 - 2017-01-18 18:32 - 0739904 _____ (Oracle Corporation) C:\Users\xx\AppData\Local\Temp\jre-8u121-windows-au.exe 2016-12-20 14:17 - 2016-12-11 19:23 - 0353336 _____ (NVIDIA Corporation) C:\Users\xx\AppData\Local\Temp\nvStInst.exe 2016-10-06 18:14 - 2016-09-30 05:22 - 0950328 _____ (NVIDIA Corporation) C:\Users\xx\AppData\Local\Temp\NvTelemetry.dll 2016-10-06 18:14 - 2016-12-13 00:36 - 0253376 _____ (NVIDIA Corporation) C:\Users\xx\AppData\Local\Temp\NvTelemetryAPI32.dll 2016-10-06 18:14 - 2016-12-13 00:36 - 0334272 _____ (NVIDIA Corporation) C:\Users\xx\AppData\Local\Temp\NvTelemetryAPI64.dll 2016-11-26 11:29 - 2006-01-04 06:54 - 0073728 _____ (Electronic Arts Inc.) C:\Users\xx\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-02-12 15:07 ==================== Ende von FRST.txt ============================ |
14.02.2017, 13:43 | #2 | ||
/// Winkelfunktion /// TB-Süch-Tiger™ | System_Service_Exception (Bluescreens) Hi,
__________________Zitat:
Zitat:
Um es gleich klarzustellen, Bluescreens sind fehlerhafte Treiber oder defekte bzw. überhitzte Hardware. Malware ist da rel. selten die Ursache.
__________________ |
14.02.2017, 23:05 | #3 |
| System_Service_Exception (Bluescreens) Hey!
__________________Danke erstmal für die Info, da bin ich beruhigt wegen den Bluescreens. Hab mir wahrscheinlich bloß wieder zu viele Sorgen gemacht. Es sind viel mehr einzelne kleine Sachen, die mich einen Virenbefall vermuten lassen. Es gibt nichts genaues zu posten. Ich würde nur gerne mir die Logs durchchecken lassen ob alles ok ist, falls das in deinen Zeitplan passt. Grüße |
Themen zu System_Service_Exception (Bluescreens) |
adobe, defender, fehler, flash player, google, home, homepage, installation, mozilla, node.js, problem, prozesse, realtek, registry, rundll, scan, security, server, services.exe, software, svchost.exe, system, teamspeak, temp, usb, windows |