Malwarebytes Anti-Rootkit hat funde

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2017
durchgeführt von kraft (Administrator) auf KRAFT-PC (09-03-2017 07:33:10)
Gestartet von C:\Users\kraft\Desktop
Geladene Profile: kraft (Verfügbare Profile: kraft)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GlassWire.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-11-20] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-158635237-284480845-3587394234-1000\...\Run: [GlassWire] => C:\Program Files (x86)\GlassWire\glasswire.exe [5788112 2017-02-08] (SecureMix LLC)
HKU\S-1-5-21-158635237-284480845-3587394234-1000\...\Run: [AdobeBridge] => [X]
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 83.169.184.33 83.169.184.97
Tcpip\..\Interfaces\{8ecacf38-e2e0-4640-99d5-ba25ddfa7435}: [DhcpNameServer] 83.169.184.33 83.169.184.97

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-21] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: ky5p4gjp.default
FF ProfilePath: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default [2017-03-09]
FF NetworkProxy: Mozilla\Firefox\Profiles\ky5p4gjp.default -> type", 0
FF Extension: (riteforge) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\@jetpack-jid1-AwtOyPgn3uWpAg.xpi [2016-08-09]
FF Extension: (Ghostery) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\firefox@ghostery.com.xpi [2017-02-12]
FF Extension: (Hootsuite Hootlet) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\hootsuite@hootsuite.com.xpi [2016-04-27]
FF Extension: (One Click Proxy) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\jid0-zXo3XFGyiDalgkeEO4UYJTUwo2I@jetpack.xpi [2015-12-03]
FF Extension: (LastPass) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\support@lastpass.com [2017-02-21]
FF Extension: (uBlock Origin) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\uBlock0@raymondhill.net.xpi [2017-03-04]
FF Extension: (NoScript) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-03-08]
FF Extension: (WOT) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2017-02-21]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\features\{4d22a1b4-1e1e-42cf-a418-dbab69ddfb90}\disableSHA1rollout@mozilla.org.xpi [2017-03-03]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\google-default.xml [2014-09-04]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\ixquick-https---deutsch.xml [2016-03-07]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\ixquick-https.xml [2014-08-23]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\qwantcom.xml [2014-12-01]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\sternde-suche.xml [2015-04-17]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\wetterinfo.xml [2014-08-29]
FF SearchPlugin: C:\Users\kraft\AppData\Roaming\Mozilla\Firefox\Profiles\ky5p4gjp.default\searchplugins\xing---the-professional-network.xml [2014-08-23]
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-21] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-02-08] (Digital Wave Ltd.)
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [4346320 2017-02-08] (SecureMix LLC)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] ()
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77408 2017-02-24] ()
R1 gwdrv; C:\WINDOWS\system32\DRIVERS\gwdrv.sys [33152 2015-05-29] (SecureMix LLC)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
R3 kmloop; C:\WINDOWS\System32\drivers\loop.sys [16384 2016-07-16] (Microsoft Corporation)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [186304 2017-03-09] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [111544 2017-03-09] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-03-09] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [251840 2017-03-09] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [92088 2017-03-09] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 RTL8023x64; C:\WINDOWS\System32\drivers\Rtnic64.sys [51712 2016-07-16] (Realtek Semiconductor Corporation                           )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 iswSvc; kein ImagePath
U4 npcap_wifi; kein ImagePath
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-09 07:33 - 2017-03-09 07:33 - 00000000 ____D C:\Users\kraft\Desktop\FRST-OlderVersion
2017-03-08 21:29 - 2017-03-08 21:29 - 00000000 ____D C:\Program Files (x86)\ESET
2017-03-08 19:53 - 2017-03-08 20:01 - 00000000 ____D C:\ProgramData\HitmanPro
2017-03-08 19:50 - 2017-03-08 19:53 - 11581544 _____ (SurfRight B.V.) C:\Users\kraft\Desktop\HitmanPro_x64.exe
2017-03-08 19:39 - 2017-03-08 19:39 - 66942596 _____ C:\Users\kraft\Desktop\GWIdlMon.exe.5296.dmp
2017-03-08 19:25 - 2017-03-08 19:27 - 00003068 _____ C:\Users\kraft\Desktop\Fixlog.txt
2017-03-08 16:35 - 2017-03-08 16:36 - 00245126 _____ C:\TDSSKiller.3.1.0.12_08.03.2017_16.35.02_log.txt
2017-03-08 16:28 - 2017-03-08 16:34 - 00245126 _____ C:\TDSSKiller.3.1.0.12_08.03.2017_16.28.53_log.txt
2017-03-08 16:28 - 2017-03-08 16:28 - 04747704 _____ (AO Kaspersky Lab) C:\Users\kraft\Desktop\tdsskiller.exe
2017-03-08 09:14 - 2017-03-09 04:34 - 00025342 _____ C:\Users\kraft\Desktop\Addition.txt
2017-03-08 09:11 - 2017-03-09 07:34 - 00011637 _____ C:\Users\kraft\Desktop\FRST.txt
2017-03-08 09:04 - 2017-03-09 07:28 - 00111544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-03-08 09:04 - 2017-03-09 07:28 - 00092088 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-03-08 09:04 - 2017-03-09 07:28 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-03-08 09:04 - 2017-03-08 09:04 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-03-08 09:04 - 2017-03-08 09:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-03-08 09:04 - 2017-03-08 09:04 - 00000000 ____D C:\Program Files\Malwarebytes
2017-03-08 09:04 - 2017-02-24 06:23 - 00077408 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-03-08 09:03 - 2017-03-08 09:03 - 57131432 _____ (Malwarebytes ) C:\Users\kraft\Desktop\mb3-setup-consumer-3.0.6.1469-1075.exe
2017-03-08 08:56 - 2017-03-08 08:56 - 04031440 _____ C:\Users\kraft\Desktop\adwcleaner_6.044.exe
2017-03-08 08:49 - 2017-03-09 07:33 - 02423808 _____ (Farbar) C:\Users\kraft\Desktop\FRST64.exe
2017-03-08 08:26 - 2017-03-08 08:26 - 18316400 _____ (Microsoft Corporation) C:\Users\kraft\Desktop\MediaCreationTool.exe
2017-03-08 08:26 - 2017-03-08 08:26 - 00000000 ___HD C:\$Windows.~WS
2017-03-08 08:26 - 2017-03-08 08:26 - 00000000 ____D C:\$WINDOWS.~BT
2017-03-08 08:09 - 2017-03-08 15:59 - 00000000 ____D C:\Users\kraft\Desktop\mbar
2017-03-08 08:09 - 2017-03-08 08:09 - 16563352 _____ (Malwarebytes Corp.) C:\Users\kraft\Desktop\mbar-1.09.3.1001.exe
2017-03-07 23:26 - 2017-03-07 23:26 - 00002002 _____ C:\Users\kraft\AppData\Local\recently-used.xbel
2017-03-07 23:23 - 2017-03-07 23:33 - 00000000 ____D C:\Users\kraft\.zenmap
2017-03-07 23:21 - 2017-03-08 08:42 - 00000000 ____D C:\Program Files\Npcap
2017-03-07 23:21 - 2017-03-07 23:21 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-07 23:20 - 2017-03-08 08:42 - 00000000 ____D C:\Program Files (x86)\Nmap
2017-03-07 20:25 - 2017-03-07 20:29 - 00000000 ____D C:\Users\kraft\AppData\Roaming\SoftPerfect Network Scanner
2017-03-06 17:27 - 2017-03-06 17:27 - 00000000 ____D C:\Users\kraft\AppData\Local\gtk-2.0
2017-03-06 17:27 - 2017-03-06 17:27 - 00000000 ____D C:\Users\kraft\.thumbnails
2017-03-06 17:25 - 2017-03-06 17:35 - 00000000 ____D C:\Users\kraft\.gimp-2.8
2017-03-06 17:25 - 2017-03-06 17:25 - 00000000 ____D C:\Users\kraft\AppData\Local\gegl-0.2
2017-03-06 17:25 - 2017-03-06 17:25 - 00000000 ____D C:\Users\kraft\AppData\Local\fontconfig
2017-03-06 17:22 - 2017-03-06 17:22 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2017-03-06 17:21 - 2017-03-06 17:22 - 00000000 ____D C:\Program Files\GIMP 2
2017-03-06 17:03 - 2017-03-06 17:03 - 00000000 ____D C:\Users\kraft\AppData\Local\RawTherapee
2017-03-05 13:51 - 2017-03-05 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-03-05 13:51 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2017-03-05 13:51 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2017-03-05 13:50 - 2017-03-05 14:02 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Winamp
2017-03-05 13:50 - 2017-03-05 13:51 - 00000000 ____D C:\Program Files (x86)\Winamp
2017-03-05 10:10 - 2017-03-05 10:11 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Apple Computer
2017-03-05 10:10 - 2017-03-05 10:10 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-03-05 10:10 - 2017-03-05 10:10 - 00000000 ____D C:\Users\kraft\AppData\Local\Apple Computer
2017-03-05 10:10 - 2017-03-05 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-03-05 10:10 - 2017-03-05 10:10 - 00000000 ____D C:\ProgramData\Apple Computer
2017-03-05 10:10 - 2017-03-05 10:10 - 00000000 ____D C:\Program Files\iTunes
2017-03-05 10:10 - 2017-03-05 10:10 - 00000000 ____D C:\Program Files\iPod
2017-03-05 10:09 - 2017-03-05 10:09 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-03-05 10:09 - 2017-03-05 10:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-03-05 10:09 - 2017-03-05 10:09 - 00000000 ____D C:\Users\kraft\AppData\Local\Apple
2017-03-05 10:09 - 2017-03-05 10:09 - 00000000 ____D C:\Program Files\Bonjour
2017-03-05 10:09 - 2017-03-05 10:09 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-03-05 10:09 - 2017-03-05 10:09 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2017-03-05 10:08 - 2017-03-05 10:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-03-05 10:08 - 2017-03-05 10:09 - 00000000 ____D C:\ProgramData\Apple
2017-03-05 10:04 - 2017-03-05 10:04 - 00000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2017-03-05 10:03 - 2017-03-05 10:07 - 00000000 ____D C:\Users\kraft\AppData\Roaming\DVDVideoSoft
2017-03-05 10:03 - 2017-03-05 10:03 - 00001408 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2017-03-05 10:03 - 2017-03-05 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-03-05 10:03 - 2017-03-05 10:03 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2017-03-05 10:03 - 2017-03-05 10:03 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2017-03-05 10:02 - 2017-03-05 10:02 - 00001060 _____ C:\Users\Public\Desktop\HiSuite.lnk
2017-03-05 10:02 - 2017-03-05 10:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2017-03-05 10:02 - 2016-11-25 07:15 - 02152176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFUpdate_01009.dll
2017-03-05 10:02 - 2016-11-25 07:15 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2017-03-05 10:02 - 2016-11-25 07:15 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll
2017-03-05 10:02 - 2016-11-25 07:15 - 01002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusbcoinstaller2.dll
2017-03-05 10:02 - 2016-11-25 07:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
2017-03-05 10:02 - 2016-11-25 07:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
2017-03-05 10:02 - 2016-11-25 07:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
2017-03-05 10:02 - 2016-11-25 07:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
2017-03-05 10:02 - 2016-11-25 07:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys
2017-03-05 10:01 - 2017-03-05 10:03 - 00000000 ____D C:\Users\kraft\AppData\Local\Hisuite
2017-03-05 10:01 - 2017-03-05 10:02 - 00000000 ____D C:\Program Files (x86)\HiSuite
2017-03-05 07:18 - 2017-03-08 09:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-03-04 14:46 - 2017-03-04 14:46 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Janusware
2017-03-04 14:46 - 2017-03-04 14:46 - 00000000 ____D C:\Program Files (x86)\Janusware
2017-03-04 14:33 - 2017-03-04 14:33 - 00000000 ____D C:\Users\kraft\AppData\Roaming\canon
2017-03-04 14:33 - 2017-03-04 14:33 - 00000000 ____D C:\ProgramData\Canon_Inc_IC
2017-03-02 19:21 - 2017-03-02 19:21 - 00001456 _____ C:\Users\kraft\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2017-03-02 18:17 - 2017-03-08 19:26 - 00000000 ____D C:\Users\kraft\AppData\LocalLow\Temp
2017-03-02 14:14 - 2017-03-02 16:25 - 00000000 ____D C:\Users\kraft\Desktop\belle10-2017
2017-03-02 14:11 - 2017-03-02 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-03-02 14:11 - 2017-03-02 14:11 - 00000000 ____D C:\Program Files\7-Zip
2017-03-02 14:04 - 2017-03-02 16:27 - 00000000 ____D C:\Users\kraft\Documents\Calibre-Bibliothek
2017-03-02 14:04 - 2017-03-02 14:14 - 00000000 ____D C:\Users\kraft\AppData\Roaming\calibre
2017-03-02 14:04 - 2017-03-02 14:09 - 00000000 ____D C:\Users\kraft\AppData\Local\calibre-cache
2017-03-02 14:01 - 2017-03-02 14:01 - 00000000 ____D C:\Users\kraft\Documents\My Kindle Content
2017-03-02 14:00 - 2017-03-07 23:53 - 00000000 ____D C:\Users\kraft\AppData\Local\Amazon
2017-03-01 21:58 - 2017-03-01 21:58 - 00000000 ____D C:\Users\kraft\AppData\LocalLow\Adobe
2017-03-01 20:16 - 2017-03-01 20:25 - 00000000 ____D C:\Users\kraft\Documents\Virtual Machines
2017-03-01 20:15 - 2017-03-06 17:58 - 00000000 ____D C:\Users\kraft\AppData\Local\VMware
2017-03-01 20:15 - 2017-03-06 17:46 - 00000000 ____D C:\Users\kraft\AppData\Roaming\VMware
2017-03-01 20:12 - 2017-03-01 20:12 - 00000000 ____D C:\Users\kraft\AppData\Roaming\NVIDIA
2017-03-01 20:10 - 2016-11-11 23:16 - 00088128 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys
2017-03-01 20:09 - 2017-03-01 20:09 - 01814372 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-03-01 20:09 - 2016-09-06 18:48 - 00083008 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys
2017-03-01 20:08 - 2017-03-08 00:01 - 00000000 ____D C:\ProgramData\VMware
2017-03-01 20:08 - 2017-03-01 20:08 - 00000000 ____D C:\Program Files (x86)\VMware
2017-03-01 20:07 - 2017-03-01 20:16 - 1593835520 _____ C:\Users\kraft\Desktop\ubuntu-16.10-desktop-amd64.iso
2017-03-01 16:41 - 2017-02-12 17:05 - 00437110 _____ C:\Users\kraft\Desktop\FLT_RNCMUW41383_0.pdf
2017-03-01 16:41 - 2017-01-31 18:52 - 00003711 _____ C:\Users\kraft\Desktop\1.txt
2017-03-01 16:41 - 2016-11-30 18:10 - 00003296 _____ C:\Users\kraft\Desktop\arbeitsamt.txt
2017-03-01 16:41 - 2016-11-16 14:42 - 00000297 _____ C:\Users\kraft\Desktop\mutti strom.txt
2017-03-01 16:41 - 2016-09-27 13:47 - 01280727 _____ C:\Users\kraft\Desktop\SSRN-id2808000.pdf
2017-03-01 16:41 - 2016-08-16 18:31 - 00080339 _____ C:\Users\kraft\Desktop\LL und KP Timo Schuster_.pdf
2017-03-01 16:40 - 2016-09-19 14:38 - 00398610 _____ C:\Users\kraft\Desktop\zeugnis.pdf
2017-03-01 16:40 - 2015-05-27 15:25 - 00760516 _____ C:\Users\kraft\Desktop\Zeugnisse_Schuster.PDF
2017-03-01 16:05 - 2017-03-01 16:05 - 00000000 ____D C:\Users\kraft\Documents\Adobe
2017-03-01 15:45 - 2017-03-01 21:51 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-03-01 15:41 - 2017-03-07 23:36 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-03-01 15:29 - 2017-03-07 23:54 - 00000000 ____D C:\ProgramData\Adobe
2017-03-01 15:29 - 2017-03-01 15:29 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Macromedia
2017-03-01 15:27 - 2017-03-07 02:15 - 00000000 ____D C:\Users\kraft\AppData\Local\Adobe
2017-03-01 15:27 - 2017-03-01 16:42 - 00000000 ____D C:\Users\kraft\Desktop\inpiration_neu
2017-03-01 15:12 - 2017-03-02 19:02 - 00000000 ____D C:\Users\kraft\Desktop\abgeschickt
2017-03-01 15:05 - 2017-03-01 15:05 - 00000000 ____D C:\Users\kraft\AppData\Local\Microsoft Help
2017-03-01 15:00 - 2017-03-02 18:44 - 00000000 ____D C:\Users\kraft\Desktop\lebenslauf_neu
2017-03-01 15:00 - 2017-03-01 15:00 - 00000000 ____D C:\Users\kraft\Desktop\red
2017-03-01 15:00 - 2017-03-01 15:00 - 00000000 ____D C:\Users\kraft\Desktop\lu
2017-03-01 14:59 - 2017-03-07 23:22 - 00000000 ____D C:\Users\kraft\Desktop\insipiration kunst
2017-02-28 09:57 - 2017-03-02 11:30 - 00003966 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1488272229
2017-02-28 09:57 - 2017-03-02 11:30 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-02-28 09:57 - 2017-02-28 09:57 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Opera Software
2017-02-28 09:57 - 2017-02-28 09:57 - 00000000 ____D C:\Users\kraft\AppData\Local\Opera Software
2017-02-28 09:55 - 2017-03-08 19:39 - 00000000 ____D C:\Program Files\Opera
2017-02-26 19:50 - 2017-02-26 19:50 - 00000017 _____ C:\Users\kraft\AppData\Local\resmon.resmoncfg
2017-02-24 19:58 - 2017-03-07 13:13 - 00000000 ____D C:\Users\kraft\AppData\Roaming\vlc
2017-02-24 19:58 - 2017-03-07 12:48 - 00000000 ____D C:\Users\kraft\AppData\Roaming\dvdcss
2017-02-24 19:57 - 2017-02-24 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-24 19:57 - 2017-02-24 19:57 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-02-24 07:30 - 2017-02-24 07:31 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-24 07:29 - 2017-02-24 07:29 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-23 14:10 - 2017-03-09 07:28 - 00251840 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-23 14:08 - 2017-03-09 07:28 - 00186304 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-02-23 02:57 - 2017-02-23 02:57 - 00000000 ____D C:\Users\kraft\AppData\Local\ESET
2017-02-23 02:52 - 2017-03-05 22:43 - 00000000 ____D C:\Users\kraft\AppData\Local\CrashDumps
2017-02-22 19:59 - 2017-02-22 20:00 - 00244986 _____ C:\TDSSKiller.3.1.0.12_22.02.2017_19.59.53_log.txt
2017-02-22 19:39 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-02-22 19:39 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-02-22 19:39 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-02-22 19:39 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-02-22 19:39 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-02-22 19:39 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-02-22 19:39 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-02-22 19:39 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-02-22 19:39 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-02-22 19:39 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-02-22 19:39 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-02-22 19:39 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-02-22 19:39 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-02-22 19:39 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-02-22 19:39 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-02-22 19:39 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-02-22 19:39 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-02-22 19:39 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-02-22 19:39 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-02-22 19:39 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-02-22 19:39 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-02-22 19:39 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-02-22 19:39 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-02-22 19:39 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-02-22 19:39 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-02-22 19:39 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-02-22 19:39 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-02-22 19:39 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-02-22 19:39 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-02-22 19:39 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-02-22 19:39 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-02-22 19:39 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-02-22 19:39 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-02-22 19:39 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-02-22 19:39 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-02-22 19:39 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-02-22 19:39 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-02-22 19:39 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-02-22 19:39 - 2016-12-14 05:44 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-02-22 19:39 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-02-22 19:39 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-02-22 19:39 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-02-22 19:39 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-02-22 19:39 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-02-22 19:39 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-02-22 19:39 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-02-22 19:39 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-02-22 19:39 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-02-22 19:39 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-02-22 19:39 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-02-22 19:39 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-02-22 19:39 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-02-22 19:39 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-02-22 19:39 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-02-22 19:39 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-02-22 19:39 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-02-22 19:39 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-02-22 19:39 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-02-22 19:39 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-02-22 19:39 - 2016-12-09 11:29 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-22 19:39 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-02-22 19:39 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-02-22 19:39 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-02-22 19:39 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-02-22 19:39 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-02-22 19:39 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-02-22 19:39 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-02-22 19:39 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-02-22 19:39 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-02-22 19:39 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-02-22 19:39 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-02-22 19:39 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-02-22 19:39 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-02-22 19:39 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-02-22 19:39 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-02-22 19:39 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-02-22 19:39 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-02-22 19:39 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-02-22 19:39 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-02-22 19:39 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-02-22 19:39 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-02-22 19:39 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-02-22 19:39 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-02-22 19:39 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-02-22 19:39 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-02-22 19:39 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-02-22 19:39 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-02-22 19:39 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-02-22 19:39 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-02-22 19:39 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-02-22 19:39 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-02-22 19:39 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-02-22 19:39 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-02-22 19:39 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-02-22 19:39 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-02-22 19:39 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-02-22 19:39 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-02-22 19:39 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-02-22 19:39 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-02-22 19:39 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-02-22 19:39 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-02-22 19:39 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-02-22 19:39 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-02-22 19:39 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-02-22 19:39 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-02-22 19:39 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-02-22 19:39 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-02-22 19:39 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-02-22 19:39 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-02-22 19:39 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-02-22 19:39 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-02-22 19:39 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-02-22 19:39 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-02-22 19:39 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-02-22 19:39 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-22 19:39 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-02-22 19:39 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-02-22 19:39 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-02-22 19:39 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-02-22 19:39 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-02-22 19:39 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-02-22 19:39 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-02-22 19:39 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-02-22 19:39 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-02-22 19:39 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-02-22 19:39 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-02-22 19:39 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-02-22 19:39 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-02-22 19:39 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-02-22 19:39 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-02-22 19:39 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-02-22 19:39 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-02-22 19:39 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-02-22 19:39 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-02-22 19:39 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-02-22 19:39 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-02-22 19:39 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-02-22 19:39 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-02-22 19:39 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-02-22 19:39 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-02-22 19:39 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-02-22 19:39 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-02-22 19:39 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-02-22 19:39 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-02-22 19:39 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-02-22 19:39 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-02-22 19:39 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-02-22 19:39 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-02-22 19:39 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-02-22 19:39 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-02-22 19:39 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-02-22 19:39 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-02-22 19:39 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-02-22 19:39 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-02-22 19:39 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-02-22 19:39 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-02-22 19:39 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-02-22 19:39 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-02-22 19:39 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-22 19:39 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-02-22 19:39 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-02-22 19:39 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-02-22 19:39 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-02-22 19:39 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-02-22 19:39 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-02-22 19:39 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-02-22 19:39 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-02-22 19:39 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-02-22 19:39 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-02-22 19:39 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-02-22 19:39 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-02-22 19:39 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-02-22 19:39 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-02-22 19:39 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-02-22 19:38 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-02-22 19:38 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-02-22 19:38 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-02-22 19:38 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-02-22 19:38 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-02-22 19:38 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-02-22 19:38 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-02-22 19:38 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-02-22 19:38 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-02-22 19:38 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-02-22 19:38 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-02-22 19:38 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-02-22 19:38 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-02-22 19:38 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-02-22 19:38 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-02-22 19:38 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-02-22 19:38 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-02-22 19:38 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-02-22 19:38 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-02-22 19:38 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-02-22 19:38 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-02-22 19:38 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-02-22 19:38 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-02-22 19:38 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-02-22 19:38 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-02-22 19:38 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-02-22 19:38 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-02-22 19:38 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-02-22 19:38 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-02-22 19:38 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-02-22 19:38 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-02-22 19:38 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-02-22 19:38 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-02-22 19:38 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-02-22 19:38 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-02-22 19:38 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-02-22 19:38 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-02-22 19:38 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-02-22 19:38 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-02-22 19:38 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-02-22 19:38 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-02-22 19:38 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-02-22 19:38 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-02-22 19:38 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-02-22 19:38 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-02-22 19:38 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-02-22 19:38 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-02-22 19:38 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-02-22 19:38 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-02-22 19:38 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-02-22 19:38 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-02-22 19:38 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-02-22 19:38 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-02-22 19:38 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-02-22 19:38 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-02-22 19:38 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-02-22 19:38 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-02-22 19:38 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-22 19:38 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-02-22 19:38 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-02-22 19:38 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-02-22 19:38 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-02-22 19:38 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-02-22 19:38 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-02-22 19:38 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-02-22 19:38 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-02-22 19:38 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-02-22 19:38 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-02-22 19:38 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-02-22 19:38 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-02-22 19:38 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-02-22 19:38 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-02-22 19:38 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-02-22 19:38 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-02-22 19:38 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-02-22 19:38 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-02-22 19:38 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-02-22 19:38 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-02-22 19:38 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-02-22 19:38 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-02-22 19:38 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-02-22 19:38 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-02-22 19:38 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-02-22 19:38 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-02-22 19:38 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-02-22 19:38 - 2016-12-09 11:11 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-02-22 19:38 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-02-22 19:38 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-02-22 19:38 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-02-22 19:38 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-02-22 19:38 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-02-22 19:38 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-02-22 19:38 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-02-22 19:38 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-02-22 19:38 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-02-22 19:38 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-02-22 19:38 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-02-22 19:38 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-02-22 19:38 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-02-22 19:38 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-02-22 19:38 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-02-22 19:38 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-02-22 19:38 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-02-22 19:38 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-02-22 19:38 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-02-22 19:38 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-02-22 19:38 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-02-22 19:38 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-02-22 19:38 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-02-22 19:38 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-02-22 19:38 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-02-22 19:38 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-02-22 19:38 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-02-22 19:38 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-02-22 19:38 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-02-22 19:38 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-02-22 19:38 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-02-22 19:38 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-02-22 19:38 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-02-22 19:38 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-02-22 19:38 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-02-22 19:38 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-02-22 19:38 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-02-22 19:38 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-02-22 19:38 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-02-22 19:38 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-02-22 19:38 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-02-22 19:38 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-02-22 19:38 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-02-22 19:38 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-02-22 19:38 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-02-22 19:38 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-02-22 19:38 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-02-22 19:38 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-02-22 19:38 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-02-22 19:38 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-02-22 19:38 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-22 19:38 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-02-22 19:38 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-02-22 19:38 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-02-22 19:38 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-02-22 19:38 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-02-22 19:38 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-02-22 19:38 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-02-22 19:38 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-02-22 19:38 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-02-22 19:38 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-02-22 19:38 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-02-22 19:38 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-02-22 19:38 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-02-22 19:38 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-02-22 19:38 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-02-22 19:38 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-02-22 19:38 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-02-22 19:38 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-02-22 19:38 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-02-22 19:38 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-02-22 19:38 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-02-22 19:38 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-02-22 19:38 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-02-22 19:38 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-02-22 19:38 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-02-22 19:38 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-02-22 19:38 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-02-22 19:38 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-02-22 19:38 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-02-22 19:38 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-02-22 19:38 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-02-22 19:38 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-02-22 19:38 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-02-22 19:38 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-02-22 19:38 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-02-22 19:38 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-02-22 19:38 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-02-22 19:38 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-02-22 19:38 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-22 19:38 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-02-22 19:38 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-02-22 19:38 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-02-22 19:38 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-02-22 19:38 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-02-22 19:38 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-02-22 19:38 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-02-22 19:38 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-02-22 19:38 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-02-22 19:38 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-02-22 19:38 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-02-22 19:38 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-02-22 19:38 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-02-22 19:38 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-02-22 19:38 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-02-22 19:38 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-02-22 19:38 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-02-22 19:37 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-02-22 19:37 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-02-22 19:37 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-02-22 19:37 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-02-22 19:37 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-02-22 19:37 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-02-22 19:37 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-02-22 19:37 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-02-22 19:37 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-02-22 19:37 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-02-22 19:37 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-02-22 19:37 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-02-22 19:37 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-02-22 19:37 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-02-22 19:37 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-02-22 19:37 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-02-22 19:37 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-02-22 19:37 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-02-22 19:37 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-02-22 19:37 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-02-22 19:37 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-22 19:37 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-02-22 19:37 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-02-22 19:37 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-02-22 19:37 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-02-22 19:37 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-02-22 19:37 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-02-22 19:37 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-02-22 19:37 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-02-22 19:37 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-02-22 19:37 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-02-22 19:37 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-02-22 19:37 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-02-22 19:37 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-02-22 19:37 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-02-22 19:37 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-02-22 19:37 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-02-22 19:37 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-02-22 19:37 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-02-22 19:37 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-02-22 19:37 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-02-22 19:37 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-02-22 19:37 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-02-22 19:37 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-02-22 19:37 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-02-22 19:37 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-02-22 19:37 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-02-22 19:37 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-02-22 19:37 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-02-22 19:37 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-02-22 19:37 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-02-22 19:37 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-02-22 19:37 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-02-22 19:37 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-02-22 19:37 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-02-22 19:37 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-02-22 19:37 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-02-22 19:37 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-02-22 19:37 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-02-22 19:37 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-02-22 19:37 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-02-22 19:37 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-02-22 19:37 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-02-22 19:37 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-02-22 19:37 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-02-22 19:37 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-02-22 19:37 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-02-22 19:37 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-02-22 19:37 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-02-22 19:37 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-02-22 19:37 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-02-22 19:37 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-02-22 19:37 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-02-22 19:37 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-02-22 19:37 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-02-22 19:37 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-02-22 19:37 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-02-22 19:37 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-02-22 19:37 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-02-22 19:37 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-02-22 19:09 - 2017-03-08 15:59 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-02-22 19:01 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-02-22 19:01 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-02-22 18:42 - 2017-02-22 18:42 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\0B49099E.sys
2017-02-22 13:38 - 2017-02-22 13:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-02-22 12:52 - 2017-02-22 12:55 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-02-22 12:52 - 2017-02-22 12:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-02-22 12:52 - 2017-02-22 12:52 - 00000000 ____D C:\Program Files\VS Revo Group
2017-02-22 12:23 - 2017-02-22 12:27 - 00009132 _____ C:\WINDOWS\system32\Drivers\etc\hosts (2)
2017-02-22 09:50 - 2017-03-08 09:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-21 23:40 - 2017-03-08 21:39 - 00000000 ____D C:\Users\kraft\AppData\Roaming\TV-Browser
2017-02-21 23:29 - 2017-02-21 23:29 - 02870984 _____ (ESET) C:\Users\kraft\Desktop\esetsmartinstaller_deu.exe
2017-02-21 23:27 - 2017-02-21 23:23 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-02-21 22:52 - 2017-02-22 16:45 - 00000000 ____D C:\Users\kraft\AppData\Local\ElevatedDiagnostics
2017-02-21 21:40 - 2017-03-09 05:48 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{125045EA-07F8-463B-80C4-BA3A133D2863}
2017-02-21 21:39 - 2017-03-09 04:37 - 00000000 ____D C:\Users\kraft\AppData\LocalLow\LastPass
2017-02-21 21:36 - 2017-02-21 21:36 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Sun
2017-02-21 21:36 - 2017-02-21 21:36 - 00000000 ____D C:\Users\kraft\AppData\LocalLow\Sun
2017-02-21 21:35 - 2017-02-21 21:39 - 00000000 ____D C:\ProgramData\Oracle
2017-02-21 21:35 - 2017-02-21 21:35 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-02-21 21:35 - 2017-02-21 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-02-21 21:35 - 2017-02-21 21:35 - 00000000 ____D C:\Program Files (x86)\Java
2017-02-21 21:32 - 2017-02-21 21:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2017-02-21 21:32 - 2017-02-21 21:32 - 00000000 ____D C:\Program Files (x86)\MozBackup
2017-02-21 21:31 - 2017-02-21 21:31 - 00000000 ____D C:\Users\kraft\AppData\Local\Downloaded Installations
2017-02-21 21:27 - 2017-02-21 21:28 - 00000000 ____D C:\Users\kraft\AppData\Local\Thunderbird
2017-02-21 21:27 - 2017-02-21 21:27 - 00002167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2017-02-21 21:27 - 2017-02-21 21:27 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Thunderbird
2017-02-21 21:24 - 2017-02-21 21:24 - 00001985 _____ C:\Users\Public\Desktop\TV-Browser.lnk
2017-02-21 21:24 - 2017-02-21 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV-Browser
2017-02-21 21:24 - 2017-02-21 21:24 - 00000000 ____D C:\Program Files (x86)\TV-Browser
2017-02-21 21:11 - 2017-03-08 07:54 - 00000000 ____D C:\Users\kraft\Desktop\Neuer Ordner
2017-02-21 21:02 - 2017-02-21 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-21 21:00 - 2017-02-21 21:00 - 00000000 ____D C:\Users\kraft\AppData\Local\NVIDIA
2017-02-21 20:56 - 2016-11-14 10:45 - 00615992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-02-21 20:49 - 2017-03-09 07:31 - 00000000 ____D C:\Users\kraft\AppData\LocalLow\Mozilla
2017-02-21 20:49 - 2017-02-21 20:49 - 00000000 ____D C:\Users\kraft\AppData\Local\Comms
2017-02-21 20:48 - 2017-03-08 14:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-21 20:48 - 2017-03-08 08:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-21 20:48 - 2017-02-21 20:55 - 00000000 ____D C:\Users\kraft\AppData\Local\Mozilla
2017-02-21 20:48 - 2017-02-21 20:49 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Mozilla
2017-02-21 20:48 - 2017-02-21 20:48 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-21 20:48 - 2017-02-21 20:48 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-02-21 20:45 - 2017-02-21 20:45 - 00001970 _____ C:\Users\Public\Desktop\GlassWire.lnk
2017-02-21 20:45 - 2017-02-21 20:45 - 00000000 ____D C:\Users\kraft\AppData\Local\GlassWire
2017-02-21 20:45 - 2017-02-21 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GlassWire
2017-02-21 20:44 - 2017-02-21 20:45 - 00000000 ____D C:\Program Files (x86)\GlassWire
2017-02-21 20:44 - 2017-02-21 20:44 - 30715264 _____ (SecureMix LLC) C:\Users\kraft\Desktop\GlassWireSetup.exe
2017-02-21 20:44 - 2017-02-21 20:44 - 00000000 ____D C:\ProgramData\GlassWire
2017-02-21 20:44 - 2015-05-29 05:30 - 00008392 _____ C:\WINDOWS\system32\Drivers\gwdrv.cat
2017-02-21 20:44 - 2015-05-29 05:15 - 00033152 _____ (SecureMix LLC) C:\WINDOWS\system32\Drivers\gwdrv.sys
2017-02-21 20:41 - 2017-02-21 20:43 - 00000000 ____D C:\Users\kraft\AppData\Local\MicrosoftEdge
2017-02-21 20:40 - 2017-02-21 20:40 - 00000000 ____D C:\Users\kraft\AppData\Local\CEF
2017-02-21 20:40 - 2017-02-21 20:40 - 00000000 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts
2017-02-21 20:37 - 2017-03-09 07:28 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-21 20:37 - 2017-02-21 20:37 - 00000000 ____D C:\ProgramData\CheckPoint
2017-02-21 20:37 - 2017-02-21 20:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-21 20:36 - 2017-02-21 20:54 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-21 20:36 - 2017-02-21 20:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-21 20:36 - 2016-12-09 11:53 - 00091832 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-02-21 20:36 - 2016-12-09 11:53 - 00076864 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-02-21 20:36 - 2016-11-14 12:15 - 06789056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-02-21 20:36 - 2016-11-14 12:15 - 03528128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-02-21 20:36 - 2016-11-14 12:15 - 02558512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-02-21 20:36 - 2016-11-14 12:15 - 00932728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2017-02-21 20:36 - 2016-11-14 12:15 - 00384888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-02-21 20:36 - 2016-11-14 12:15 - 00062328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-02-21 20:36 - 2016-11-14 10:09 - 07513855 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-02-21 20:35 - 2017-02-21 20:35 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Skype
2017-02-21 20:32 - 2017-02-21 20:32 - 00000000 ____D C:\Users\kraft\AppData\Local\Publishers
2017-02-21 20:31 - 2017-03-05 14:03 - 00000000 ____D C:\Users\kraft\AppData\Local\Packages
2017-02-21 20:31 - 2017-03-02 19:21 - 00000000 ____D C:\Users\kraft\AppData\Roaming\Adobe
2017-02-21 20:31 - 2017-02-22 18:30 - 00000000 ____D C:\Users\kraft\AppData\Local\VirtualStore
2017-02-21 20:31 - 2017-02-21 22:30 - 00000000 ____D C:\Users\kraft\AppData\Local\ConnectedDevicesPlatform
2017-02-21 20:31 - 2017-02-21 20:31 - 00000020 ___SH C:\Users\kraft\ntuser.ini
2017-02-21 20:31 - 2017-02-21 20:31 - 00000000 ____D C:\Users\kraft\AppData\Local\TileDataLayer
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Startmenü
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Vorlagen
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Startmenü
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Favoriten
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Dokumente
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2017-02-21 20:28 - 2017-02-21 20:28 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2017-02-21 20:27 - 2017-03-08 08:27 - 00019619 _____ C:\WINDOWS\diagwrn.xml
2017-02-21 20:27 - 2017-03-08 08:27 - 00017755 _____ C:\WINDOWS\diagerr.xml
2017-02-21 20:22 - 2017-03-07 23:23 - 00000000 ____D C:\Users\kraft
2017-02-21 20:22 - 2017-02-21 20:26 - 00000000 ____D C:\Users\DefaultAppPool
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Vorlagen
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Startmenü
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Netzwerkumgebung
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Lokale Einstellungen
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Eigene Dateien
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Druckumgebung
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Documents\Eigene Videos
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Documents\Eigene Musik
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Documents\Eigene Bilder
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\AppData\Local\Verlauf
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\AppData\Local\Anwendungsdaten
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\kraft\Anwendungsdaten
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-02-21 20:22 - 2017-02-21 20:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-02-21 20:15 - 2017-03-08 08:27 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-21 20:13 - 2017-03-06 07:34 - 00000000 ____D C:\Windows.old
2017-02-21 20:13 - 2016-07-15 19:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-02-21 20:13 - 2016-07-15 19:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-02-21 20:13 - 2016-07-15 19:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-02-21 20:13 - 2016-07-15 18:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-02-21 20:13 - 2016-07-15 18:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-02-21 20:12 - 2017-02-21 20:12 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-02-21 18:49 - 2017-02-22 19:50 - 00000000 ___RD C:\Users\kraft\OneDrive
2017-02-21 18:45 - 2017-02-21 18:46 - 00376528 _____ (Microsoft Corporation) C:\Users\kraft\Desktop\RefreshWindowsTool.exe
2017-02-21 18:35 - 2017-02-21 19:17 - 00000000 ____D C:\ESD
2017-02-21 10:42 - 2017-02-21 10:46 - 00274486 _____ C:\TDSSKiller.3.1.0.12_21.02.2017_10.41.59_log.txt
2017-02-21 09:18 - 2017-02-21 09:18 - 00000000 ___HD C:\VTRoot
2017-02-20 04:15 - 2017-02-21 18:52 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-09 07:33 - 2015-01-13 07:33 - 00000000 ____D C:\FRST
2017-03-09 07:30 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-09 07:28 - 2016-11-20 22:32 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-09 07:27 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2017-03-09 07:12 - 2016-11-20 13:32 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-09 06:20 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-09 06:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-08 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-03-08 08:58 - 2016-05-03 09:39 - 00000000 ____D C:\AdwCleaner
2017-03-08 08:53 - 2016-03-01 03:56 - 00000547 _____ C:\Users\kraft\Desktop\JRT.txt
2017-03-08 08:36 - 2016-11-20 13:32 - 04961176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-08 08:34 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-03-08 00:01 - 2016-11-20 22:00 - 00693898 _____ C:\WINDOWS\system32\perfh007.dat
2017-03-08 00:01 - 2016-11-20 22:00 - 00148182 _____ C:\WINDOWS\system32\perfc007.dat
2017-03-08 00:01 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-07 23:39 - 2016-07-16 12:47 - 00000076 _____ C:\WINDOWS\win.ini
2017-03-07 23:38 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-03-07 22:59 - 2016-11-20 22:42 - 01822460 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-28 21:14 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-25 08:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-23 07:56 - 2016-11-20 22:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-23 07:52 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-02-23 07:52 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-02-23 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-02-23 07:51 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-02-23 07:51 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-02-23 07:51 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-02-22 08:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-02-21 23:30 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-02-21 20:36 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-02-21 20:28 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-02-21 20:26 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-21 20:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-02-21 20:25 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-21 20:15 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-02-21 20:13 - 2016-11-20 22:07 - 00000000 ____D C:\WINDOWS\OCR
2017-02-21 07:14 - 2016-08-02 14:34 - 00000000 ____D C:\Windows10Upgrade
2017-02-17 12:42 - 2016-07-01 12:05 - 00000000 ____D C:\EEK

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-03-02 19:21 - 2017-03-02 19:21 - 0001456 _____ () C:\Users\kraft\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2017-03-07 23:26 - 2017-03-07 23:26 - 0002002 _____ () C:\Users\kraft\AppData\Local\recently-used.xbel
2017-02-26 19:50 - 2017-02-26 19:50 - 0000017 _____ () C:\Users\kraft\AppData\Local\resmon.resmoncfg
2017-03-07 23:23 - 2017-03-07 23:23 - 0000000 _____ () C:\Users\kraft\AppData\Local\zenmap.exe.log

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-03-04 06:45

==================== Ende von FRST.txt ============================