|
Log-Analyse und Auswertung: Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehrWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
20.05.2017, 21:25 | #1 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Hi, ich hoffe man kann mir helfen, da ich mittlerweile schon am Verzweifeln bin. Ich wohne in einer WG und wir haben einen gemeinsamen PC im Wohnzimmer. Jedenfalls bin ich der Einzige in meinem Haushalt, der diesen PC zu pflegen scheint. Ich habe eines schönen Tages einen Virenscan (mit Norton) laufen lassen und war vom Ergebnis geschockt, da ich während des scans schon etliche Trojaner und Viren gesehen habe. Seltsamerweise hat Norton keine Viren gefunden. Nachdem ich also ein paar im Internet nachgegoogelt habe, dachte ich, dass der PC nicht mehr zu retten sei und habe ihn kurzerhand formatiert. Nachdem ich ihn formatiert habe, habe ich einen weiteren scan durchgeführt und gesehen, dass alle Viren überlebt haben. Daraufhin habe ich den PC mittels DOS und den Befehlen: diskpart, format fs=ntfs nochmal formatiert und hatte dasselbe Ergebnis. Ich habe das AV gewechselt (zur Zeit Avira) und gehofft den PC damit bereinigen zu können, aber natürlich wurde ich enttäuscht. Windows updates schlagen auch schon fehl. Die Liste der Viren die ich gefunden habe: w32 downadup.b / vbs runauto / backdoor tidserv / backdoor rustock.a und b / hacktool.unreal.a / infostealer.snifula.b / Trojan.peacomm / trojan.gpcoder.de / adware.ezula / adware.borian / adware.dropspam / spyware.ezurl / trackware.yokbar / malwarewipe / sunshinespy / spyware.keyplusplus Die Liste hat es in sich, daher auch das Wort "Supergau" im Titel und meine Verzweiflung. Ist der Computer überhaupt noch zu retten? Falls ja, flehe ich um Hilfe. Grüße Chris Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-05-2017 durchgeführt von Ich (Administrator) auf ICH-PC (20-05-2017 21:35:40) Gestartet von C:\Users\blup\Desktop Geladene Profile: Ich & blup (Verfügbare Profile: Ich & blup) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Opera) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera_crashreporter.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avcenter.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9068040 2016-11-09] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch (Der Dateneintrag hat 65 mehr Zeichen). HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-04-27] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [MouseDriver] => TiltWheelMouse.exe (Der Dateneintrag hat 65 mehr Zeichen). HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-01] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28432392 2017-05-01] (Dropbox, Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [912768 2017-04-10] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [96024 2017-03-28] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [455816 2017-02-02] (Power Software Ltd) HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [415232 2009-07-14] (Microsoft Corporation) Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKU\S-1-5-21-1096918486-716633971-1973169854-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-04-26] (Valve Corporation) HKU\S-1-5-21-1096918486-716633971-1973169854-1000\...\RunOnce: [osk.exe] => C:\Windows\system32\osk.exe [692736 2014-06-18] (Microsoft Corporation) HKU\S-1-5-21-1096918486-716633971-1973169854-1000\...\MountPoints2: {3042559c-2f45-11e7-a28d-806e6f6e6963} - D:\Bin\ASSETUP.exe HKU\S-1-5-21-1096918486-716633971-1973169854-1001\...\MountPoints2: F - F:\Setup.exe IFEO\dropbox.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" IFEO\poweriso.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" IFEO\pwrisovm.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" IFEO\sidebar.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" IFEO\taskmgr.exe: [Debugger] C:\Program Files (x86)\AVG\AVG PC TuneUp\PMLauncher.exe IFEO\uninstall.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 134.176.2.5 134.176.2.7 Tcpip\..\Interfaces\{1E76FC9F-9460-4D1C-A9E9-065550FA0FFB}: [DhcpNameServer] 134.176.2.5 134.176.2.7 Internet Explorer: ================== Toolbar: HKU\S-1-5-21-1096918486-716633971-1973169854-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] () Opera: ======= StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-01] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1119712 2017-04-10] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [488920 2017-04-10] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [488920 2017-04-10] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1520680 2017-04-10] (Avira Operations GmbH & Co. KG) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-04-27] (AVG Technologies CZ, s.r.o.) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [354720 2017-03-28] (Avira Operations GmbH & Co. KG) S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-02] (Dropbox, Inc.) S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-02] (Dropbox, Inc.) S4 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-05-01] (Dropbox, Inc.) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5906704 2017-02-21] (AVG Technologies CZ, s.r.o.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176968 2017-04-10] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [148104 2017-04-10] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-04-10] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-04-10] (Avira Operations GmbH & Co. KG) R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [51248 2017-04-10] (Avira Operations GmbH & Co. KG) R3 cxbu0x64; C:\Windows\System32\DRIVERS\cxbu0x64.sys [191224 2014-04-05] (HID Global Corporation) R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic) S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [25608 2017-05-20] (SlimWare Utilities, Inc.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2017-02-21] (AVG Netherlands B.V.) R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-20 21:35 - 2017-05-20 21:36 - 00014753 _____ C:\Users\blup\Desktop\FRST.txt 2017-05-20 21:35 - 2017-05-20 21:35 - 00000000 ____D C:\FRST 2017-05-20 21:34 - 2017-05-20 21:34 - 02429952 _____ (Farbar) C:\Users\blup\Desktop\FRST64.exe 2017-05-20 21:17 - 2017-05-20 21:17 - 00000000 ____D C:\Users\Ich\AppData\Local\SlimWare Utilities Inc 2017-05-20 20:36 - 2017-05-20 20:36 - 00268536 _____ C:\Windows\system32\FNTCACHE.DAT 2017-05-20 20:14 - 2017-05-20 20:14 - 01205376 _____ (Slimware Utilities Holdings, Inc.) C:\Users\blup\Downloads\AVG_Driver_Updater_Setup_11_4.exe 2017-05-20 20:14 - 2017-05-20 20:14 - 00025608 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys 2017-05-20 20:14 - 2017-05-20 20:14 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers 2017-05-20 20:14 - 2017-05-20 20:14 - 00000000 ____D C:\Users\Ich\AppData\Local\AVG Netherlands BV 2017-05-17 23:09 - 2017-05-17 23:09 - 00000000 ____D C:\Users\blup\AppData\Local\Chromium 2017-05-16 12:33 - 2017-05-20 20:20 - 00000000 ____D C:\Windows\Minidump 2017-05-15 17:58 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2017-05-15 17:58 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2017-05-15 17:58 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2017-05-15 17:58 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2017-05-15 17:57 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2017-05-15 17:57 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2017-05-15 17:57 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2017-05-15 15:25 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2017-05-15 15:25 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2017-05-15 15:25 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2017-05-15 15:25 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2017-05-15 15:25 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2017-05-15 15:25 - 2015-12-08 21:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2017-05-15 15:25 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2017-05-15 15:25 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2017-05-15 15:24 - 2017-03-07 16:05 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2017-05-15 15:24 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2017-05-15 15:24 - 2017-02-09 16:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2017-05-15 15:24 - 2017-02-09 16:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2017-05-15 15:24 - 2016-10-11 15:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2017-05-15 15:24 - 2016-10-11 15:06 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2017-05-15 15:24 - 2016-03-24 00:40 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2017-05-15 15:24 - 2016-03-24 00:40 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2017-05-15 15:22 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2017-05-15 15:22 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2017-05-15 15:12 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2017-05-15 15:12 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2017-05-15 15:12 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2017-05-15 15:12 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2017-05-15 15:12 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2017-05-15 15:12 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2017-05-15 15:12 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2017-05-15 15:12 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2017-05-15 15:12 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2017-05-15 15:12 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2017-05-15 15:11 - 2017-05-15 15:11 - 00000000 ____D C:\Windows\SysWOW64\sda 2017-05-15 15:11 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2017-05-15 15:11 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys 2017-05-15 15:11 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll 2017-05-15 15:11 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2017-05-15 15:09 - 2017-05-15 15:09 - 00000000 ____D C:\Windows\system32\DAX2 2017-05-15 15:06 - 2015-08-05 19:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2017-05-15 15:06 - 2015-08-05 19:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2017-05-15 15:05 - 2015-12-16 20:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2017-05-15 15:05 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2017-05-15 15:05 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2017-05-15 14:55 - 2017-05-15 14:55 - 02169900 _____ C:\Users\blup\Downloads\Accounting_and_Finance_II-Neue_Dokumente (1).zip 2017-05-15 14:55 - 2017-05-15 14:55 - 01794382 _____ C:\Users\blup\Downloads\General_Management_II_Tutorium-Neue_Dokumente.zip 2017-05-15 14:53 - 2017-05-15 14:53 - 00966153 _____ C:\Users\blup\Downloads\Accounting_and_Finance_II-Neue_Dokumente.zip 2017-05-11 22:42 - 2017-05-11 22:43 - 63320784 _____ (Microsoft Corporation) C:\Users\blup\Downloads\IE11-Windows6.1-x64-de-de.exe 2017-05-11 20:50 - 2017-05-11 20:51 - 62008080 _____ (Microsoft Corporation) C:\Users\Ich\Downloads\NDP462-KB3151800-x86-x64-AllOS-ENU.exe 2017-05-11 01:13 - 2017-04-28 03:14 - 05547240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-05-11 01:13 - 2017-04-28 03:14 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-05-11 01:13 - 2017-04-28 03:14 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-05-11 01:13 - 2017-04-28 03:14 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-05-11 01:13 - 2017-04-28 03:14 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-05-11 01:13 - 2017-04-28 03:11 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:36 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-05-11 01:13 - 2017-04-28 02:36 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-05-11 01:13 - 2017-04-28 02:34 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:19 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-05-11 01:13 - 2017-04-28 02:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-05-11 01:13 - 2017-04-28 02:19 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-05-11 01:13 - 2017-04-28 02:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-05-11 01:13 - 2017-04-28 02:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-05-11 01:13 - 2017-04-28 02:14 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-05-11 01:13 - 2017-04-28 02:12 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-05-11 01:13 - 2017-04-28 02:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-05-11 01:13 - 2017-04-28 02:10 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-05-11 01:13 - 2017-04-28 02:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-05-11 01:13 - 2017-04-28 02:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-05-11 01:13 - 2017-04-26 16:59 - 03220992 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-05-11 01:13 - 2017-04-21 17:34 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2017-05-11 01:13 - 2017-04-21 17:15 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 02065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 01417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll 2017-05-11 01:13 - 2017-04-17 16:54 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 01483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2017-05-11 01:13 - 2017-04-12 17:26 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2017-05-11 01:13 - 2017-04-07 17:34 - 00986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-05-11 01:13 - 2017-04-07 17:34 - 00265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2017-05-11 01:13 - 2017-04-07 17:30 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-05-11 01:13 - 2017-04-07 17:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2017-05-11 01:13 - 2017-04-07 17:22 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-05-11 01:13 - 2017-04-05 16:55 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-05-11 01:13 - 2017-04-05 16:55 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-05-11 01:13 - 2017-04-05 16:55 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 01895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2017-05-11 01:13 - 2017-04-04 16:53 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2017-05-11 01:13 - 2017-04-04 16:53 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-05-11 01:13 - 2017-03-10 18:32 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2017-05-11 01:13 - 2017-03-10 18:32 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2017-05-11 01:13 - 2017-03-10 18:20 - 01508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll 2017-05-11 01:13 - 2017-03-10 18:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2017-05-11 01:13 - 2017-03-10 17:57 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe 2017-05-11 01:13 - 2017-03-10 17:55 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2017-05-11 01:13 - 2017-03-10 17:55 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys 2017-05-11 01:13 - 2017-03-09 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2017-05-11 01:13 - 2017-03-09 18:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2017-05-10 22:54 - 2017-05-10 22:54 - 00002605 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk 2017-05-10 22:54 - 2017-05-10 22:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2017-05-10 22:54 - 2017-02-21 09:29 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe 2017-05-10 22:54 - 2017-02-21 09:25 - 00044304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\authuitu.dll 2017-05-10 22:54 - 2017-02-21 09:25 - 00042256 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\SysWOW64\authuitu.dll 2017-05-10 22:51 - 2017-05-10 22:51 - 00001008 _____ C:\Users\Public\Desktop\AVG.lnk 2017-05-10 22:51 - 2017-05-10 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2017-05-10 22:50 - 2017-05-11 01:25 - 00000000 ____D C:\Users\blup\AppData\Local\Avg 2017-05-10 22:48 - 2017-05-17 14:23 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task 2017-05-10 22:47 - 2017-05-10 22:54 - 00000000 ____D C:\Program Files (x86)\AVG 2017-05-10 22:39 - 2017-05-10 22:54 - 00000000 ____D C:\Users\Ich\AppData\Local\Avg 2017-05-10 22:39 - 2017-05-10 22:54 - 00000000 ____D C:\ProgramData\Avg 2017-05-10 22:39 - 2017-05-10 22:53 - 00000000 ____D C:\Users\Ich\AppData\Local\AvgSetupLog 2017-05-10 22:37 - 2017-05-10 22:38 - 03449336 _____ (AVG Technologies CZ, s.r.o.) C:\Users\blup\Downloads\AVG_Performance_709.exe 2017-05-10 22:13 - 2017-05-10 22:13 - 00000000 ____D C:\Users\blup\AppData\Local\AviraSpeedup 2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Windows\System32\Tasks\Avira 2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Users\blup\AppData\Local\Avira 2017-05-10 21:16 - 2017-05-10 21:16 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2017-05-10 21:16 - 2017-05-10 21:16 - 00000000 ____D C:\Users\blup\Documents\My Games 2017-05-10 14:21 - 2017-05-11 00:38 - 00000000 ____D C:\Users\blup\AppData\Local\Ubisoft Game Launcher 2017-05-10 14:21 - 2017-05-10 14:21 - 00001208 _____ C:\Users\Ich\Desktop\Uplay.lnk 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Users\Ich\AppData\Local\Ubisoft Game Launcher 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2017-05-09 11:24 - 2017-05-09 11:41 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-05-09 11:24 - 2017-05-09 11:41 - 00004378 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-05-09 11:24 - 2017-05-09 11:41 - 00000000 ____D C:\Windows\system32\Macromed 2017-05-09 11:24 - 2017-05-09 11:24 - 00004522 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-05-09 11:23 - 2017-05-09 11:54 - 00000000 ____D C:\Users\blup\AppData\Local\Adobe 2017-05-09 11:23 - 2017-05-09 11:23 - 00000000 ____D C:\Users\Ich\AppData\Local\Adobe 2017-05-07 23:00 - 2017-05-07 23:00 - 00000000 ____D C:\Users\blup\AppData\Roaming\Avira 2017-05-05 11:12 - 2017-05-12 10:07 - 00000000 ____D C:\uni 2017-05-05 10:50 - 2017-05-05 10:50 - 00000000 ____H C:\Users\blup\AppData\Local\BITEAED.tmp 2017-05-05 10:50 - 2017-05-05 10:50 - 00000000 _____ C:\Users\blup\AppData\Local\{3A4060FC-D4E2-481C-9966-81301692549F} 2017-05-05 10:48 - 2017-05-05 10:49 - 00000000 _____ C:\Users\blup\AppData\Local\{5D9123F6-4E75-4247-AD6C-1A36C3C82178} 2017-05-04 21:13 - 2017-05-09 11:41 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-04 21:13 - 2017-05-09 11:41 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Macromedia 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\blup\AppData\Roaming\The Creative Assembly 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\blup\AppData\Roaming\Macromedia 2017-05-04 21:05 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2017-05-04 21:04 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2017-05-04 20:04 - 2017-05-12 10:26 - 00000274 _____ C:\Users\blup\Desktop\Filme.txt 2017-05-04 20:04 - 2017-05-10 22:48 - 00000795 _____ C:\Users\blup\Desktop\Bestellung.txt 2017-05-04 20:04 - 2015-05-30 02:36 - 00001331 _____ C:\Users\blup\Desktop\aus.lnk 2017-05-04 20:04 - 2015-05-29 14:53 - 00001269 _____ C:\Users\blup\Desktop\an.lnk 2017-05-04 17:27 - 2017-05-04 17:27 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2017-05-04 15:03 - 2017-05-04 15:03 - 00000000 ____D C:\Users\blup\Documents\Mount&Blade Warband 2017-05-04 15:01 - 2017-05-04 15:01 - 00000000 ____D C:\Users\Ich\Documents\Mount&Blade Warband 2017-05-04 15:01 - 2017-05-04 15:01 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Mount&Blade Warband 2017-05-04 14:59 - 2017-05-08 15:43 - 00000000 ___RD C:\Users\blup\Dropbox 2017-05-04 14:59 - 2017-05-04 14:59 - 00001233 _____ C:\Users\blup\Desktop\Dropbox.lnk 2017-05-04 14:59 - 2017-05-04 14:59 - 00000000 ____D C:\Users\blup\AppData\Roaming\Mount&Blade Warband 2017-05-04 14:55 - 2017-05-04 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mount&Blade Warband 2017-05-04 14:54 - 2017-05-20 21:21 - 00000000 ____D C:\Program Files (x86)\Mount&Blade Warband 2017-05-04 14:53 - 2017-05-04 14:53 - 00000000 ____D C:\Users\blup\AppData\Roaming\PowerISO 2017-05-04 00:43 - 2017-05-04 00:43 - 00000000 ___SD C:\Windows\system32\CompatTel 2017-05-04 00:43 - 2017-05-04 00:43 - 00000000 ____D C:\Windows\system32\appraiser |
20.05.2017, 21:26 | #2 |
| FRST Log Teil 2Code:
ATTFilter 2017-05-03 23:24 - 2017-02-23 01:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-05-03 23:24 - 2017-02-23 01:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-05-03 23:24 - 2017-02-18 16:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-05-03 23:24 - 2017-02-18 16:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-05-03 23:24 - 2016-03-24 00:40 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2017-05-03 23:24 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2017-05-03 23:24 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2017-05-03 23:24 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2017-05-03 23:24 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2017-05-03 23:24 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2017-05-03 23:24 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2017-05-03 22:57 - 2017-05-03 22:57 - 00000000 ____D C:\Users\blup\AppData\Roaming\Adobe 2017-05-03 19:07 - 2017-05-03 19:07 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Adobe 2017-05-03 02:46 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-03 02:46 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-03 02:43 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2017-05-03 02:31 - 2017-05-03 02:31 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-05-03 02:31 - 2017-05-03 02:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-05-03 02:31 - 2017-05-03 02:31 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-05-03 02:31 - 2017-05-03 02:31 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-05-03 02:31 - 2017-05-03 02:31 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2017-05-03 02:31 - 2017-05-03 02:31 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2017-05-03 02:31 - 2017-05-03 02:31 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-05-03 02:31 - 2017-05-03 02:31 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-05-03 02:31 - 2017-05-03 02:31 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-05-03 02:31 - 2017-05-03 02:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2017-05-03 01:04 - 2017-05-11 03:03 - 00000000 ____D C:\Windows\system32\MRT 2017-05-03 01:04 - 2017-05-11 03:01 - 156335152 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-05-03 00:51 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2017-05-03 00:51 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2017-05-03 00:51 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2017-05-03 00:51 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2017-05-03 00:51 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2017-05-03 00:11 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2017-05-03 00:11 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2017-05-03 00:11 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2017-05-02 23:52 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2017-05-02 23:52 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2017-05-02 23:52 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2017-05-02 23:52 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2017-05-02 23:52 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2017-05-02 23:52 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2017-05-02 23:51 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2017-05-02 23:51 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2017-05-02 23:48 - 2017-03-22 17:32 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-05-02 23:48 - 2017-03-22 17:32 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-05-02 23:48 - 2017-03-22 17:32 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-05-02 23:48 - 2017-03-22 17:30 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2017-05-02 23:48 - 2017-03-22 17:24 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-05-02 23:48 - 2017-03-22 17:17 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-05-02 23:48 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-05-02 23:48 - 2017-03-22 17:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-05-02 23:48 - 2017-03-22 17:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2017-05-02 23:48 - 2017-03-10 18:35 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2017-05-02 23:48 - 2017-03-10 18:27 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2017-05-02 23:48 - 2017-03-10 18:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2017-05-02 23:48 - 2017-03-10 18:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2017-05-02 23:48 - 2017-03-10 18:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2017-05-02 23:48 - 2017-03-10 17:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2017-05-02 23:48 - 2017-03-07 18:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2017-05-02 23:48 - 2017-03-07 18:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2017-05-02 23:48 - 2017-03-04 03:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2017-05-02 23:48 - 2017-03-04 03:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll 2017-05-02 23:48 - 2017-03-04 03:14 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2017-05-02 23:48 - 2017-03-04 03:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll 2017-05-02 23:48 - 2017-02-14 18:33 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-05-02 23:48 - 2017-02-14 18:19 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2017-05-02 23:48 - 2017-02-10 18:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2017-05-02 23:48 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll 2017-05-02 23:48 - 2017-02-09 18:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2017-05-02 23:48 - 2017-02-09 18:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2017-05-02 23:48 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll 2017-05-02 23:48 - 2017-02-06 18:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2017-05-02 23:48 - 2017-01-18 17:36 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2017-05-02 23:48 - 2017-01-13 20:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2017-05-02 23:48 - 2017-01-13 20:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll 2017-05-02 23:48 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2017-05-02 23:48 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll 2017-05-02 23:48 - 2017-01-11 20:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2017-05-02 23:48 - 2017-01-11 20:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2017-05-02 23:48 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2017-05-02 23:48 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2017-05-02 23:48 - 2016-11-21 20:12 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2017-05-02 23:48 - 2016-11-20 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2017-05-02 23:48 - 2016-11-20 16:07 - 00467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2017-05-02 23:48 - 2016-11-17 18:41 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2017-05-02 23:48 - 2016-11-10 18:32 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2017-05-02 23:48 - 2016-11-10 18:19 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2017-05-02 23:48 - 2016-11-09 18:41 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2017-05-02 23:48 - 2016-11-09 18:33 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2017-05-02 23:48 - 2016-11-09 18:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2017-05-02 23:48 - 2016-11-09 17:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2017-05-02 23:48 - 2016-10-11 17:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2017-05-02 23:48 - 2016-10-11 17:31 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2017-05-02 23:48 - 2016-10-11 17:31 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME 2017-05-02 23:48 - 2016-10-11 17:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2017-05-02 23:48 - 2016-10-11 17:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2017-05-02 23:48 - 2016-10-11 17:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2017-05-02 23:48 - 2016-10-11 17:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2017-05-02 23:48 - 2016-10-11 16:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2017-05-02 23:48 - 2016-10-11 15:18 - 00419648 _____ C:\Windows\SysWOW64\locale.nls 2017-05-02 23:48 - 2016-10-11 15:17 - 00419648 _____ C:\Windows\system32\locale.nls 2017-05-02 23:48 - 2016-10-08 15:06 - 00633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2017-05-02 23:48 - 2016-10-07 17:32 - 03649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2017-05-02 23:48 - 2016-10-07 17:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2017-05-02 23:48 - 2016-10-05 16:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2017-05-02 23:48 - 2016-09-15 16:56 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2017-05-02 23:48 - 2016-09-12 23:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2017-05-02 23:48 - 2016-09-12 22:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2017-05-02 23:48 - 2016-09-08 16:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2017-05-02 23:48 - 2016-09-08 16:55 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2017-05-02 23:48 - 2016-08-22 18:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2017-05-02 23:48 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2017-05-02 23:48 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2017-05-02 23:48 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2017-05-02 23:48 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2017-05-02 23:48 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2017-05-02 23:48 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2017-05-02 23:48 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2017-05-02 23:48 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll 2017-05-02 23:48 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2017-05-02 23:48 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll 2017-05-02 23:48 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2017-05-02 23:48 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2017-05-02 23:48 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2017-05-02 23:48 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2017-05-02 23:48 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2017-05-02 23:48 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2017-05-02 23:48 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2017-05-02 23:48 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2017-05-02 23:48 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2017-05-02 23:48 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2017-05-02 23:48 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2017-05-02 23:48 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2017-05-02 23:48 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2017-05-02 23:48 - 2016-03-24 00:43 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2017-05-02 23:48 - 2016-03-24 00:40 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2017-05-02 23:48 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2017-05-02 23:48 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2017-05-02 23:48 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2017-05-02 23:48 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll 2017-05-02 23:47 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2017-05-02 23:47 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2017-05-02 23:47 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2017-05-02 23:47 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2017-05-02 23:47 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2017-05-02 23:47 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2017-05-02 23:47 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2017-05-02 23:46 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2017-05-02 23:46 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2017-05-02 23:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2017-05-02 23:45 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2017-05-02 23:45 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2017-05-02 23:45 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2017-05-02 23:45 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2017-05-02 23:45 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2017-05-02 23:45 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-05-02 23:45 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-05-02 23:45 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2017-05-02 23:45 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2017-05-02 23:45 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-05-02 23:45 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-05-02 23:45 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2017-05-02 23:45 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2017-05-02 23:45 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2017-05-02 23:45 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2017-05-02 23:45 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2017-05-02 23:44 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2017-05-02 23:44 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2017-05-02 23:44 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe 2017-05-02 23:44 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe 2017-05-02 23:44 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe 2017-05-02 23:44 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2017-05-02 23:44 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2017-05-02 23:44 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2017-05-02 23:44 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-05-02 23:44 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2017-05-02 23:44 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2017-05-02 23:44 - 2015-11-14 01:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2017-05-02 23:44 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll 2017-05-02 23:44 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll 2017-05-02 23:44 - 2015-11-14 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe 2017-05-02 23:44 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2017-05-02 23:44 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2017-05-02 23:44 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2017-05-02 23:44 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2017-05-02 23:44 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2017-05-02 23:44 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-05-02 23:44 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2017-05-02 23:44 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2017-05-02 23:44 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2017-05-02 23:44 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2017-05-02 23:44 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2017-05-02 23:44 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2017-05-02 23:44 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2017-05-02 23:44 - 2014-12-19 05:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2017-05-02 23:44 - 2014-12-06 06:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2017-05-02 23:44 - 2014-12-06 05:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2017-05-02 23:44 - 2014-12-06 05:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2017-05-02 23:44 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2017-05-02 23:44 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2017-05-02 23:44 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2017-05-02 23:44 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2017-05-02 23:44 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2017-05-02 23:44 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2017-05-02 23:44 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2017-05-02 23:44 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2017-05-02 23:44 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2017-05-02 23:44 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2017-05-02 23:44 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2017-05-02 23:44 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2017-05-02 23:44 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2017-05-02 23:44 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2017-05-02 23:44 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2017-05-02 23:44 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2017-05-02 23:44 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2017-05-02 23:44 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2017-05-02 23:44 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2017-05-02 23:44 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2017-05-02 23:44 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2017-05-02 23:44 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2017-05-02 23:44 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2017-05-02 23:44 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2017-05-02 23:44 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2017-05-02 23:44 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2017-05-02 23:44 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2017-05-02 23:44 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2017-05-02 23:44 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2017-05-02 23:44 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2017-05-02 23:44 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2017-05-02 23:43 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2017-05-02 23:43 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2017-05-02 23:43 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2017-05-02 23:43 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2017-05-02 23:43 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2017-05-02 23:43 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2017-05-02 23:43 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2017-05-02 23:43 - 2015-11-05 21:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2017-05-02 23:43 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2017-05-02 23:43 - 2015-11-05 11:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2017-05-02 23:43 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2017-05-02 23:43 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2017-05-02 23:43 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2017-05-02 23:43 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2017-05-02 23:43 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2017-05-02 23:43 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2017-05-02 23:43 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2017-05-02 23:43 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2017-05-02 23:43 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2017-05-02 23:43 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2017-05-02 23:43 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2017-05-02 23:43 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2017-05-02 23:43 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2017-05-02 23:43 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll 2017-05-02 23:43 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll 2017-05-02 23:43 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll 2017-05-02 23:43 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll 2017-05-02 23:43 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll 2017-05-02 23:43 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe 2017-05-02 23:43 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll 2017-05-02 23:43 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll 2017-05-02 23:43 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll 2017-05-02 23:43 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll 2017-05-02 23:43 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll 2017-05-02 23:43 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe 2017-05-02 23:43 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2017-05-02 23:43 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2017-05-02 23:43 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2017-05-02 23:43 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2017-05-02 23:43 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2017-05-02 23:42 - 2015-10-29 19:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2017-05-02 23:42 - 2015-10-29 19:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2017-05-02 23:42 - 2015-10-29 19:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2017-05-02 23:42 - 2015-10-29 19:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2017-05-02 23:42 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2017-05-02 23:42 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2017-05-02 23:42 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2017-05-02 23:42 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2017-05-02 23:41 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2017-05-02 23:41 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2017-05-02 23:41 - 2015-12-08 23:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2017-05-02 23:41 - 2015-12-08 21:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2017-05-02 23:41 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2017-05-02 23:41 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2017-05-02 23:41 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe 2017-05-02 23:41 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2017-05-02 23:41 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2017-05-02 23:41 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2017-05-02 23:41 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2017-05-02 23:41 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs |
20.05.2017, 21:28 | #3 |
| FRST Log Teil 3Code:
ATTFilter 2017-05-02 23:41 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2017-05-02 23:41 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2017-05-02 23:41 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2017-05-02 23:41 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2017-05-02 23:40 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2017-05-02 23:40 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2017-05-02 23:40 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2017-05-02 23:39 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-05-02 23:39 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-05-02 23:39 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-05-02 23:39 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-05-02 23:39 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2017-05-02 23:39 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2017-05-02 23:39 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2017-05-02 23:39 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2017-05-02 23:39 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll 2017-05-02 23:39 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2017-05-02 23:39 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2017-05-02 23:39 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2017-05-02 23:39 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2017-05-02 23:39 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2017-05-02 23:39 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2017-05-02 23:39 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2017-05-02 23:39 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2017-05-02 23:39 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2017-05-02 23:39 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2017-05-02 23:39 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2017-05-02 23:39 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2017-05-02 23:39 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2017-05-02 23:39 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2017-05-02 23:39 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2017-05-02 23:39 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2017-05-02 23:39 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2017-05-02 23:39 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2017-05-02 23:39 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2017-05-02 23:39 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2017-05-02 23:39 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2017-05-02 23:39 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2017-05-02 23:39 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2017-05-02 23:39 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2017-05-02 23:39 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2017-05-02 23:39 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2017-05-02 23:38 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2017-05-02 23:38 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll 2017-05-02 23:38 - 2016-01-22 08:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2017-05-02 23:38 - 2016-01-22 08:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2017-05-02 23:38 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2017-05-02 23:38 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2017-05-02 23:38 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2017-05-02 23:38 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2017-05-02 23:38 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2017-05-02 23:38 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2017-05-02 23:38 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2017-05-02 23:38 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2017-05-02 23:37 - 2016-03-09 21:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2017-05-02 23:37 - 2016-03-09 20:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2017-05-02 23:37 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2017-05-02 23:37 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2017-05-02 23:37 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2017-05-02 23:37 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2017-05-02 23:37 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2017-05-02 23:37 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2017-05-02 23:37 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2017-05-02 23:37 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2017-05-02 23:37 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2017-05-02 23:37 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2017-05-02 23:37 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2017-05-02 23:37 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2017-05-02 23:36 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2017-05-02 23:36 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2017-05-02 23:36 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2017-05-02 23:36 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2017-05-02 23:36 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2017-05-02 23:36 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2017-05-02 23:36 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2017-05-02 23:36 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2017-05-02 23:36 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2017-05-02 23:36 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2017-05-02 23:36 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2017-05-02 23:36 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2017-05-02 23:36 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2017-05-02 23:36 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2017-05-02 23:36 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2017-05-02 23:36 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2017-05-02 23:36 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2017-05-02 23:36 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2017-05-02 23:36 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2017-05-02 23:36 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2017-05-02 23:36 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2017-05-02 23:36 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2017-05-02 23:36 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2017-05-02 23:36 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2017-05-02 23:36 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2017-05-02 23:36 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2017-05-02 23:36 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2017-05-02 23:36 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2017-05-02 23:36 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2017-05-02 23:35 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2017-05-02 23:35 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2017-05-02 23:35 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2017-05-02 23:35 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2017-05-02 23:34 - 2016-07-22 16:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2017-05-02 23:34 - 2016-07-22 16:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2017-05-02 23:34 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2017-05-02 23:34 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2017-05-02 23:34 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2017-05-02 23:34 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2017-05-02 23:34 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2017-05-02 23:01 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-05-02 23:01 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2017-05-02 23:01 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2017-05-02 22:52 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2017-05-02 22:52 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2017-05-02 22:52 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2017-05-02 22:52 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2017-05-02 22:52 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2017-05-02 22:52 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2017-05-02 22:52 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2017-05-02 22:52 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2017-05-02 22:52 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2017-05-02 22:52 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2017-05-02 22:52 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2017-05-02 22:52 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2017-05-02 22:52 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2017-05-02 22:52 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2017-05-02 22:52 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2017-05-02 22:52 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2017-05-02 22:52 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2017-05-02 22:52 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2017-05-02 22:52 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2017-05-02 22:52 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2017-05-02 22:52 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2017-05-02 22:52 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2017-05-02 22:52 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2017-05-02 22:52 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2017-05-02 22:52 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2017-05-02 22:52 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2017-05-02 22:52 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2017-05-02 22:52 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2017-05-02 22:52 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2017-05-02 22:52 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2017-05-02 22:52 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2017-05-02 22:52 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2017-05-02 22:52 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2017-05-02 22:52 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2017-05-02 22:52 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2017-05-02 22:52 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2017-05-02 22:52 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2017-05-02 22:52 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2017-05-02 22:51 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2017-05-02 22:51 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2017-05-02 22:51 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2017-05-02 22:51 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2017-05-02 22:51 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2017-05-02 22:51 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2017-05-02 22:51 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2017-05-02 22:51 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2017-05-02 22:51 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2017-05-02 22:51 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2017-05-02 22:51 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2017-05-02 22:51 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2017-05-02 22:51 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2017-05-02 22:51 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2017-05-02 22:51 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2017-05-02 22:51 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2017-05-02 22:51 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2017-05-02 22:51 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2017-05-02 22:51 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2017-05-02 22:51 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2017-05-02 22:51 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2017-05-02 22:34 - 2017-05-02 22:36 - 00001908 _____ C:\Windows\diagwrn.xml 2017-05-02 22:34 - 2017-05-02 22:36 - 00001908 _____ C:\Windows\diagerr.xml 2017-05-02 22:34 - 2017-05-02 22:36 - 00000000 ___HD C:\$WINDOWS.~BT 2017-05-02 22:27 - 2017-05-02 22:27 - 00000819 _____ C:\Users\Public\Desktop\PowerISO.lnk 2017-05-02 22:27 - 2017-05-02 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO 2017-05-02 22:26 - 2017-05-02 22:27 - 00000000 ____D C:\Program Files\PowerISO 2017-05-02 22:26 - 2017-02-02 15:27 - 00137792 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys 2017-05-02 22:25 - 2017-05-02 22:25 - 00000000 ____D C:\Users\Ich\Neuer Ordner 2017-05-02 22:24 - 2017-05-02 22:25 - 07811284 _____ C:\Users\Ich\Downloads\PowerISO-6.8.zip 2017-05-02 22:22 - 2017-05-02 22:22 - 01496584 _____ C:\Users\Ich\Downloads\PowerISO - CHIP-Installer.exe 2017-05-02 21:58 - 2015-05-30 02:36 - 00001331 _____ C:\Users\Ich\Desktop\aus.lnk 2017-05-02 21:58 - 2015-05-29 14:53 - 00001269 _____ C:\Users\Ich\Desktop\an.lnk 2017-05-02 21:57 - 2017-05-02 21:59 - 00000000 ___RD C:\Users\Ich\Dropbox 2017-05-02 21:57 - 2017-05-02 21:57 - 00001233 _____ C:\Users\Ich\Desktop\Dropbox.lnk 2017-05-02 21:55 - 2016-11-06 20:45 - 00042163 _____ C:\Users\Ich\Desktop\Gemuse nährstoffe und fehlende kurse uni.ods 2017-05-02 21:51 - 2017-05-04 20:05 - 00000000 ____D C:\bilder 2017-05-02 21:36 - 2017-05-02 21:39 - 00000000 ____D C:\musik 2017-05-02 21:14 - 2017-04-01 22:44 - 00000432 _____ C:\Users\Ich\Desktop\Filme.txt 2017-05-02 21:14 - 2017-02-21 23:37 - 00000751 _____ C:\Users\Ich\Desktop\Bestellung.txt 2017-05-02 20:25 - 2017-05-02 20:25 - 00001143 _____ C:\Users\Public\Desktop\Avira Connect.lnk 2017-05-02 20:20 - 2017-05-02 20:20 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Avira 2017-05-02 20:19 - 2017-05-11 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-05-02 20:19 - 2017-05-02 20:19 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf 2017-05-02 20:19 - 2017-05-02 20:19 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf 2017-05-02 20:19 - 2017-04-10 13:23 - 00176968 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2017-05-02 20:19 - 2017-04-10 13:23 - 00148104 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2017-05-02 20:19 - 2017-04-10 13:23 - 00078600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2017-05-02 20:19 - 2017-04-10 13:23 - 00051248 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys 2017-05-02 20:19 - 2017-04-10 13:23 - 00035328 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2017-05-02 20:19 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2017-05-02 20:19 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2017-05-02 20:19 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2017-05-02 20:18 - 2017-05-11 20:49 - 00000000 ____D C:\ProgramData\Avira 2017-05-02 20:18 - 2017-05-11 20:49 - 00000000 ____D C:\Program Files (x86)\Avira 2017-05-02 20:15 - 2017-05-11 01:30 - 00000000 ____D C:\Users\Ich\Downloads\backups 2017-05-02 20:08 - 2017-05-02 20:08 - 01496584 _____ C:\Users\Ich\Downloads\AntiVir Avira Free Antivirus - CHIP-Installer.exe 2017-05-02 20:07 - 2017-05-02 20:07 - 00388608 _____ (Trend Micro Inc.) C:\Users\Ich\Downloads\HijackThis_2.0.5.exe 2017-05-02 19:52 - 2017-05-02 19:53 - 55356624 _____ (Microsoft Corporation) C:\Users\Ich\Downloads\Windows-KB890830-x64-V5.47.exe 2017-05-02 19:51 - 2017-05-02 19:51 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2017-05-02 19:51 - 2017-05-02 19:51 - 00000000 ____D C:\Users\Ich\AppData\Local\AMD 2017-05-02 19:50 - 2017-05-02 19:50 - 00000000 ____D C:\Users\Ich\AppData\Roaming\ATI 2017-05-02 19:50 - 2017-05-02 19:50 - 00000000 ____D C:\Users\Ich\AppData\Local\ATI 2017-05-02 19:47 - 2017-05-02 20:17 - 00000000 ____D C:\Windows\System32\Tasks\Remediation 2017-05-02 19:47 - 2017-05-02 19:47 - 00000000 ____D C:\Program Files\Common Files\AV 2017-05-02 19:33 - 2017-05-10 22:12 - 00058416 _____ C:\Users\blup\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-02 19:33 - 2017-05-02 19:33 - 00000000 ____D C:\Users\blup\AppData\Local\AMD 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\Users\blup\AppData\Roaming\ATI 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\Users\blup\AppData\Local\ATI 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\ProgramData\ATI 2017-05-02 19:29 - 2017-05-04 10:47 - 00000000 ____D C:\Users\blup\AppData\Local\Steam 2017-05-02 19:29 - 2017-05-02 19:29 - 00000000 ____D C:\Users\blup\AppData\Local\CEF 2017-05-02 19:28 - 2017-05-02 19:28 - 00000000 ____D C:\Users\blup\AppData\Roaming\Opera Software 2017-05-02 19:28 - 2017-05-02 19:28 - 00000000 ____D C:\Users\blup\AppData\Local\Opera Software 2017-05-02 19:27 - 2017-05-05 10:48 - 00000000 ____D C:\Users\blup\AppData\Local\Dropbox 2017-05-02 19:27 - 2017-05-04 14:59 - 00000000 ____D C:\Users\blup 2017-05-02 19:27 - 2017-05-03 22:57 - 00001428 _____ C:\Users\blup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-02 19:27 - 2017-05-02 19:27 - 00000020 ___SH C:\Users\blup\ntuser.ini 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Vorlagen 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Startmenü 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Netzwerkumgebung 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Lokale Einstellungen 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Eigene Dateien 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Druckumgebung 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Videos 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Musik 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Bilder 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Local\Verlauf 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Local\Anwendungsdaten 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Anwendungsdaten 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 ____D C:\Users\blup\AppData\Local\VirtualStore 2017-05-02 19:27 - 2011-04-12 09:54 - 00000000 ____D C:\Users\blup\AppData\Roaming\Media Center Programs 2017-05-02 19:25 - 2017-05-02 19:25 - 00000000 _____ C:\Windows\ativpsrm.bin 2017-05-02 19:07 - 2017-05-02 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\Steam 2017-05-02 19:07 - 2017-05-02 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\CEF 2017-05-02 18:55 - 2017-05-20 20:42 - 00000000 ____D C:\Program Files (x86)\Steam 2017-05-02 18:55 - 2017-05-02 18:55 - 00000970 _____ C:\Users\Public\Desktop\Steam.lnk 2017-05-02 18:55 - 2017-05-02 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-02 18:54 - 2017-05-02 18:54 - 01446792 _____ C:\Users\Ich\Downloads\SteamSetup.exe 2017-05-02 18:43 - 2017-05-02 18:44 - 00000000 ____D C:\Users\Ich\AppData\Local\NPE 2017-05-02 18:39 - 2017-05-02 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-05-02 18:34 - 2017-05-02 18:34 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Dropbox 2017-05-02 18:32 - 2017-05-12 09:39 - 00001208 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2017-05-02 18:32 - 2017-05-12 09:39 - 00001204 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2017-05-02 18:32 - 2017-05-11 20:42 - 00004216 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA 2017-05-02 18:32 - 2017-05-11 20:42 - 00003964 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore 2017-05-02 18:32 - 2017-05-03 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\Dropbox 2017-05-02 18:32 - 2017-05-02 18:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2017-05-02 18:32 - 2017-05-02 18:32 - 00000000 ____D C:\ProgramData\Dropbox 2017-05-02 18:31 - 2017-05-02 18:31 - 00690080 _____ (Dropbox, Inc.) C:\Users\Ich\Downloads\DropboxInstaller.exe 2017-05-02 18:12 - 2017-05-02 18:12 - 00000000 ____D C:\ProgramData\AMD 2017-05-02 18:12 - 2012-08-28 14:27 - 00058536 ____R (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys 2017-05-02 18:11 - 2013-06-27 17:50 - 00082240 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_sata.sys 2017-05-02 18:11 - 2013-06-27 17:50 - 00042304 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_xata.sys 2017-05-02 18:10 - 2013-08-31 01:48 - 00229376 _____ C:\Windows\system32\clinfo.exe 2017-05-02 18:10 - 2013-08-31 01:48 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 01187342 _____ C:\Windows\system32\amdocl_as64.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 01061902 _____ C:\Windows\system32\amdocl_ld64.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00995342 _____ C:\Windows\SysWOW64\amdocl_as32.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00798734 _____ C:\Windows\SysWOW64\amdocl_ld32.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll 2017-05-02 18:10 - 2013-08-31 01:45 - 23760896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2017-05-02 18:10 - 2013-08-31 01:43 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2017-05-02 18:10 - 2013-08-31 01:43 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2017-05-02 18:10 - 2013-08-31 01:18 - 00530824 _____ C:\Windows\SysWOW64\atiapfxx.blb 2017-05-02 18:10 - 2013-08-31 01:18 - 00530824 _____ C:\Windows\system32\atiapfxx.blb 2017-05-02 18:10 - 2013-08-31 01:04 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00204952 _____ C:\Windows\system32\ativvsvl.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00157144 _____ C:\Windows\system32\ativvsva.dat 2017-05-02 18:10 - 2013-08-31 00:59 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2017-05-02 18:10 - 2013-08-27 21:06 - 00233652 _____ C:\Windows\system32\ativvaxy_cik.dat 2017-05-02 18:10 - 2013-08-27 19:27 - 00082336 _____ C:\Windows\system32\ativce02.dat 2017-05-02 18:10 - 2013-08-07 17:12 - 00231984 _____ C:\Windows\system32\ativvaxy_cik_nd.dat 2017-05-02 18:10 - 2011-09-13 00:06 - 00003917 _____ C:\Windows\SysWOW64\atipblag.dat 2017-05-02 18:10 - 2011-09-13 00:06 - 00003917 _____ C:\Windows\system32\atipblag.dat 2017-05-02 18:09 - 2017-05-02 18:09 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2017-05-02 18:09 - 2013-05-04 21:22 - 00047164 _____ C:\Windows\atiogl.xml 2017-05-02 18:04 - 2017-05-15 15:13 - 01686742 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-05-02 17:59 - 2017-05-02 20:24 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-02 17:57 - 2017-05-02 17:57 - 00000000 ____D C:\Program Files\ATI 2017-05-02 17:49 - 2017-05-02 18:15 - 00000000 ____D C:\Program Files\ATI Technologies 2017-05-02 17:48 - 2017-05-20 19:52 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1493740095 2017-05-02 17:48 - 2017-05-02 17:48 - 00001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2017-05-02 17:48 - 2017-05-02 17:48 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Opera Software 2017-05-02 17:48 - 2017-05-02 17:48 - 00000000 ____D C:\Users\Ich\AppData\Local\Opera Software 2017-05-02 17:47 - 2017-05-20 19:52 - 00000000 ____D C:\Program Files\Opera 2017-05-02 17:47 - 2011-02-25 08:25 - 00296320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2017-05-02 17:46 - 2017-05-02 17:46 - 00016896 _____ (ASUS) C:\Windows\AsTaskSched.dll 2017-05-02 17:45 - 2017-05-15 15:09 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2017-05-02 17:45 - 2017-05-02 17:45 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2017-05-02 17:45 - 2017-05-02 17:45 - 00000000 ____D C:\Program Files\Realtek 2017-05-02 17:44 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2017-05-02 17:44 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2017-05-02 17:44 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2017-05-02 17:44 - 2013-07-23 09:40 - 03610880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2017-05-02 17:43 - 2017-05-02 17:46 - 00000000 ___HD C:\Program Files (x86)\Temp 2017-05-02 17:43 - 2013-09-13 12:44 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2017-05-02 17:43 - 2013-07-28 04:48 - 27518208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2017-05-02 17:43 - 2013-07-23 09:39 - 01916672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2017-05-02 17:43 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2017-05-02 17:38 - 2013-08-27 08:08 - 00883928 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2017-05-02 17:38 - 2013-08-27 08:08 - 00108760 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2017-05-02 17:38 - 2013-08-27 08:08 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2017-05-02 17:37 - 2017-05-20 19:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-05-02 17:37 - 2017-05-02 17:43 - 00000000 ____D C:\Program Files (x86)\Realtek 2017-05-02 17:35 - 2017-05-02 17:35 - 00034427 _____ C:\Windows\Ascd_tmp.ini 2017-05-02 17:35 - 2017-05-02 17:35 - 00001769 _____ C:\Windows\Language_trs.ini 2017-05-02 17:05 - 2017-05-10 22:39 - 00058416 _____ C:\Users\Ich\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-02 16:56 - 2017-05-03 12:54 - 00000000 ____D C:\Users\Ich\AppData\Local\ElevatedDiagnostics 2017-05-02 16:54 - 2017-05-02 20:21 - 00000000 ____D C:\ProgramData\Norton 2017-05-02 16:54 - 2017-05-02 20:18 - 00000000 ____D C:\Program Files (x86)\NortonInstaller 2017-05-02 16:54 - 2017-05-02 17:38 - 00000000 ____D C:\ProgramData\NortonInstaller 2017-05-02 16:49 - 2017-05-03 19:07 - 00001428 _____ C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-02 16:48 - 2017-05-15 12:56 - 00000000 ____D C:\Users\Ich 2017-05-02 16:48 - 2017-05-02 16:52 - 00000000 ____D C:\Users\Ich\AppData\Local\VirtualStore 2017-05-02 16:48 - 2017-05-02 16:48 - 00000020 ___SH C:\Users\Ich\ntuser.ini 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Netzwerkumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Lokale Einstellungen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Eigene Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Druckumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Favoriten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Dokumente 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Dokumente und Einstellungen 2017-05-02 16:48 - 2011-04-12 09:54 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Media Center Programs 2017-05-02 16:44 - 2017-05-02 16:44 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2017-05-02 16:44 - 2017-05-02 16:44 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2017-05-02 16:43 - 2017-05-02 16:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf 2017-05-02 16:43 - 2017-05-02 16:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2017-05-01 16:49 - 2017-05-01 16:49 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-20 20:49 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-05-20 20:49 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-05-20 20:43 - 2011-04-12 09:43 - 00734464 _____ C:\Windows\system32\perfh007.dat 2017-05-20 20:43 - 2011-04-12 09:43 - 00164324 _____ C:\Windows\system32\perfc007.dat 2017-05-20 20:43 - 2009-07-14 07:13 - 01713398 _____ C:\Windows\system32\PerfStringBackup.INI 2017-05-20 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2017-05-20 20:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-05-16 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2017-05-16 10:25 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-16 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2017-05-16 01:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2017-05-11 01:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2017-05-05 11:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2017-05-03 22:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2017-05-03 10:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\inetsrv 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2017-05-02 19:23 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2017-05-02 17:39 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2017-05-02 16:48 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT 2017-05-02 16:44 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-05-02 17:45 - 2017-05-02 17:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== 2017-05-04 13:22 - 2017-05-04 14:10 - 0208896 _____ (Sony DADC Austria AG) C:\Users\blup\AppData\Local\Temp\drm_dyndata_7350008.dll 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_is8E00.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_is9D98.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isABD.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isB9A0.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isCDAE.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-05-16 13:03 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-05-2017 durchgeführt von Ich (20-05-2017 21:37:11) Gestartet von C:\Users\blup\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2017-05-02 14:48:11) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1096918486-716633971-1973169854-500 - Administrator - Disabled) blup (S-1-5-21-1096918486-716633971-1973169854-1001 - Limited - Enabled) => C:\Users\blup Gast (S-1-5-21-1096918486-716633971-1973169854-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1096918486-716633971-1973169854-1004 - Limited - Enabled) Ich (S-1-5-21-1096918486-716633971-1973169854-1000 - Administrator - Enabled) => C:\Users\Ich ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated) Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{82DEBC0B-5BAD-5918-2EDB-7C78BE01BA59}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AVG (HKLM\...\AvgZen) (Version: 1.181.3.3057 - AVG Technologies) AVG (Version: 1.181.4 - AVG Technologies) Hidden AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.74.2.60831 - AVG Technologies) AVG PC TuneUp (x32 Version: 16.74.1 - AVG Technologies) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.26.48 - Avira Operations GmbH & Co. KG) Avira Connect (HKLM-x32\...\{9bffeb8a-bd07-4f43-aca3-3266700f4029}) (Version: 1.2.85.18383 - Avira Operations GmbH & Co. KG) Avira Connect (x32 Version: 1.2.85.18383 - Avira Operations GmbH & Co. KG) Hidden Dota 2 (HKLM\...\Steam App 570) (Version: - Valve) Dropbox (HKLM-x32\...\Dropbox) (Version: 25.4.28 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.65.1 - Dropbox, Inc.) Hidden FMW 1 (Version: 1.192.3 - AVG Technologies) Hidden Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Might and Magic Heroes VII (HKLM-x32\...\Uplay Install 1176) (Version: - Ubisoft) Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software) PowerISO (HKLM-x32\...\PowerISO) (Version: 6.8 - Power Software Ltd) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7982 - Realtek Semiconductor Corp.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Total War: SHOGUN 2 (HKLM\...\Steam App 34330) (Version: - The Creative Assembly) Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {1BC13171-8C06-4DE8-BEE5-4ACB8E0ADD9C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated) Task: {39F911BE-2D64-4782-BD5D-8D4A31B55165} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-05-02] (Dropbox, Inc.) Task: {4ED055F8-2E8E-4687-80B4-3D07803A1161} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe Task: {83141813-C2D7-4C19-B84C-64099734F7AC} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-07-27] (Symantec Corporation) Task: {85EF9E6D-39C7-44A1-8835-B37AD4C772DC} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-05-02] (Dropbox, Inc.) Task: {9F23B5AF-28D1-4D24-AB26-AB8A5FB624B2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated) Task: {DE3542B8-FB96-48FE-9481-C7AF5BA84226} - System32\Tasks\Opera scheduled Autoupdate 1493740095 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-11-01 11:46 - 2013-11-01 11:46 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 91090520 _____ () C:\Program Files\Opera\45.0.2552.812\opera_browser.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 03949144 _____ () C:\Program Files\Opera\45.0.2552.812\libglesv2.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 00101464 _____ () C:\Program Files\Opera\45.0.2552.812\libegl.dll 2013-11-01 11:46 - 2013-11-01 11:46 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2017-05-10 22:47 - 2017-05-10 22:40 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll 2017-05-02 18:58 - 2017-03-10 02:13 - 00674592 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2017-05-02 18:58 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll 2017-05-02 18:58 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2017-05-02 18:58 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2017-05-02 18:58 - 2017-04-26 01:55 - 02465056 _____ () C:\Program Files (x86)\Steam\video.dll 2017-05-02 18:58 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2017-05-02 18:58 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2017-05-02 18:58 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2017-05-02 18:58 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2017-05-02 18:58 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2017-05-02 18:58 - 2017-04-26 01:55 - 00848672 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2017-05-02 18:58 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2017-05-02 19:02 - 2017-01-30 23:41 - 68875552 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll 2017-05-02 18:58 - 2017-04-26 01:55 - 00383776 _____ () C:\Program Files (x86)\Steam\steam.dll 2017-05-02 18:58 - 2015-09-25 01:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\blup\Desktop\an.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\aus.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\Bestellung.txt:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\Filme.txt:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\Ich\Desktop\an.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\Ich\Desktop\aus.lnk:com.dropbox.attributes [168] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1096918486-716633971-1973169854-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg HKU\S-1-5-21-1096918486-716633971-1973169854-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\blup\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 134.176.2.5 - 134.176.2.7 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{B7DAB1F6-4003-4705-8FC5-DF87174C3B21}] => (Allow) C:\Program Files\Opera\44.0.2510.1449\opera.exe FirewallRules: [{3E5D69FA-C6CA-4690-91D1-07327B3DF10C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe FirewallRules: [{1ADE89FF-BD2F-4A64-8FA3-0D0338759197}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5CB3FBFB-330F-4C9C-8DF8-91B07BBDE200}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2BC93F39-8795-4333-9346-257E31577A91}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{DE978109-E805-4317-9E2A-12303C94F78A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{B0B6621E-51A3-4F69-80C6-707F4F8FFD60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B57D1D75-C68A-4470-A3A7-F1959D32D2DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{79103913-96B1-4C63-BC2E-645502204FD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{A775F6A0-523E-4F26-9880-9A671430FD39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{2A996D3D-B7EE-4192-8F19-32355223CFCE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{77640337-C4A9-40F6-B6FB-FC36114D8CB0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5F6DB7CE-4712-41BF-8747-5DB46AAA730E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D485CDDB-F3A0-4462-A4E5-427F2F61D51B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A0BA87AD-2BB4-43B2-8E0E-32CEE3594EB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{AD8B3BC0-F3F0-4C4A-8802-A56E4E4B44CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{63C950FE-4B7A-4580-A56C-ECB3F1A67225}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{AC0394DE-A4AD-47C2-8626-7FD7CDCAAB99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{76C7361E-8BEE-420A-97DE-075F8A31A3AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C48AEEEE-587F-4B2F-94D7-21AA354733DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5226FBE4-4068-4D30-B11C-CE2DF57F64C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{80630E25-095F-4A5B-A687-8F855DFE2047}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BB18F4C6-58C5-4A01-B793-12C88D1BBBF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E466BE2C-2D5E-4C57-A13F-775E3C242E16}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7E677C8E-69F0-43BB-9D73-479203B04CC0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FD9D9F80-D030-4E74-B41B-7BCC07227925}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{485102AF-0DF1-41D7-B125-15057E079480}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D87375FA-0E2B-4ACC-BFC4-67A82682C061}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{7072F1FF-77E9-4994-B5DF-B2F573E2C9B6}C:\program files (x86)\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\counter-strike global offensive\csgo.exe FirewallRules: [UDP Query User{D2CA1285-FA0A-4206-97BB-A92C995827E1}C:\program files (x86)\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\counter-strike global offensive\csgo.exe FirewallRules: [{93019317-435C-4F77-A38C-F889600D3E26}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Might and Magic Heroes VII\Binaries\Win64\MMH7Game-Win64-Shipping.exe FirewallRules: [{566D60A5-B429-47DE-B472-367F598EBD90}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7DCA8D57-BFDA-41FE-B863-CA6589AA076E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B67DD25C-BAB9-4C88-BB4C-8682E4930BCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{781E692B-8842-4940-BC8A-FB90F1E7C577}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{882F2033-66DF-41C7-881D-4AE612952153}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0A183DB3-9C0D-43A0-8044-0C5B3A5AB870}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{506DF9E8-2E21-434E-8818-96AFB15302DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{44A52C8F-FB70-4C09-873E-A8ED153173CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0EFB3E70-911E-457A-940C-DE16BB644955}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{84179ED3-98DA-42A8-861E-23BA77D930C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FF364004-F062-4EEA-A0D2-0BEB1D45B6BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{53C0E985-39C7-4F39-8EE4-4A96CCB8625C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{893BD598-03B5-4D80-87F4-CC23857A7451}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B0B01A6F-5B40-4922-B6D8-8C873B18C1C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E624AD8E-74FB-40E6-A49C-2A358C39A094}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{859987EA-6301-4E43-AB69-2E6FC30BE95F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BC078B8F-0DDA-4579-9B7C-477C2A6CD65E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4886C5D1-BA5D-4D18-863F-2F16C2F1742B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5F8E6E6A-6DA9-4F84-AFE2-2AA197014287}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{EC3A65E1-A557-4D3B-9887-7D62F9BBEB24}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F86F1D21-2960-456E-84A0-194593AF05F0}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe FirewallRules: [{E2F8F025-6EA2-418C-8643-4457C1FBA1DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{954438A4-D73C-4881-9938-2BE0FDFF2135}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe ==================== Wiederherstellungspunkte ========================= 18-05-2017 11:23:17 Windows Update 20-05-2017 21:17:34 Removed AVG Driver Updater ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (05/20/2017 08:37:04 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/20/2017 07:46:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/20/2017 07:16:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/18/2017 09:16:27 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/17/2017 10:04:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/17/2017 02:08:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/16/2017 08:56:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/16/2017 12:34:48 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/16/2017 10:16:24 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/15/2017 12:41:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Systemfehler: ============= Error: (05/20/2017 08:43:03 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (05/20/2017 08:36:37 PM) (Source: APPHOSTSVC) (EventID: 9010) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (05/20/2017 08:36:34 PM) (Source: SCardSvr) (EventID: 602) (User: ) Description: Die WDM-Lesertreiberinitialisierung konnte den Leser nicht öffnen: Zugriff verweigert Error: (05/20/2017 07:45:43 PM) (Source: SCardSvr) (EventID: 602) (User: ) Description: Die WDM-Lesertreiberinitialisierung konnte den Leser nicht öffnen: Zugriff verweigert Error: (05/20/2017 07:45:38 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 20.05.2017 um 19:44:18 unerwartet heruntergefahren. Error: (05/20/2017 07:35:38 PM) (Source: cdrom) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (05/20/2017 07:35:33 PM) (Source: cdrom) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (05/20/2017 07:35:28 PM) (Source: cdrom) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (05/20/2017 07:35:23 PM) (Source: cdrom) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (05/20/2017 07:35:19 PM) (Source: cdrom) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. ==================== Speicherinformationen =========================== Prozessor: AMD A8-6600K APU with Radeon(tm) HD Graphics Prozentuale Nutzung des RAM: 41% Installierter physikalischer RAM: 7367.4 MB Verfügbarer physikalischer RAM: 4318.17 MB Summe virtueller Speicher: 14732.99 MB Verfügbarer virtueller Speicher: 11142.52 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:466.26 GB) (Free:364.64 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7D4D7CC8) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=466.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ |
21.05.2017, 17:33 | #4 |
/// Malwareteam | Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehrMein Name ist Rafael und ich werde dir bei der Bereinigung helfen. Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:
Dann zeige mir mal bitte einen Logfile oder "Screenshot" wo du diese angeblichen Viren alle gefunden haben willst Schritt: 1 Deinstalliere die folgenden Programme über die Systemsteuerung: AVG AVG PC TuneUp Avira Antivirus Avira Connect AVG und Avira können wir nicht mehr uneingeschränkt empfehlen und würden uns auch sonst bei der Bereinigung behindern. Abgesehen davon sind mehrere Virenscanner auf einem PC auch nicht gut Schritt: 2 Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
21.05.2017, 18:31 | #5 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Hi Rafael, danke für die Hilfe ich kann dir leider nichts zeigen. Als ich noch Norton hatte und das System habe überprüfen lassen, hat mir Norton nicht gezeigt, wo sich die infizierten Dateien befinden. Es hat mir lediglich gesucht: "suche rustock.a, suche tidserv.... und die Malware ist sicherlich auf meinem Rechner,da Norton früher, während eines scans, nicht explizit danach gesucht hat. Ich habe noch mehr Indizien, wie z.B. lässt sich weder der Internet Explorer noch Windows im allgemeinen updaten. Ich habe alles so deinstalliert, wie verlangt und die logs folgen sofort Mfg Chris Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-05-2017 durchgeführt von Ich (Administrator) auf ICH-PC (21-05-2017 19:14:45) Gestartet von C:\Users\blup\Desktop Geladene Profile: Ich & blup (Verfügbare Profile: Ich & blup) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Opera) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera_crashreporter.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Opera Software) C:\Program Files\Opera\45.0.2552.812\opera.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\Install\{A69D021A-68F2-44B5-A329-4DAE301997FC}\DropboxClient_26.4.24.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client_26.4.24\Dropbox.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9068040 2016-11-09] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-01] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28734456 2017-05-16] (Dropbox, Inc.) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [455816 2017-02-02] (Power Software Ltd) Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKU\S-1-5-21-1096918486-716633971-1973169854-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-04-26] (Valve Corporation) HKU\S-1-5-21-1096918486-716633971-1973169854-1000\...\MountPoints2: {3042559c-2f45-11e7-a28d-806e6f6e6963} - D:\Bin\ASSETUP.exe HKU\S-1-5-21-1096918486-716633971-1973169854-1001\...\MountPoints2: F - F:\Setup.exe ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 134.176.2.5 134.176.2.7 Tcpip\..\Interfaces\{1E76FC9F-9460-4D1C-A9E9-065550FA0FFB}: [DhcpNameServer] 134.176.2.5 134.176.2.7 Internet Explorer: ================== Toolbar: HKU\S-1-5-21-1096918486-716633971-1973169854-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] () Opera: ======= StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-01] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-02] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-02] (Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-05-16] (Dropbox, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R3 cxbu0x64; C:\Windows\System32\DRIVERS\cxbu0x64.sys [191224 2014-04-05] (HID Global Corporation) R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic) S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [25608 2017-05-20] (SlimWare Utilities, Inc.) R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-21 19:14 - 2017-05-21 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-05-21 18:49 - 2017-05-21 18:49 - 00000000 ____D C:\Users\blup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2017-05-21 11:02 - 2017-05-21 11:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Isle 2017-05-21 10:58 - 2017-05-21 10:58 - 00000000 ____D C:\Program Files (x86)\Black Isle 2017-05-21 10:58 - 1998-07-30 17:41 - 00306688 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe 2017-05-20 21:37 - 2017-05-20 21:37 - 00028447 _____ C:\Users\blup\Desktop\Addition.txt 2017-05-20 21:35 - 2017-05-21 19:15 - 00010487 _____ C:\Users\blup\Desktop\FRST.txt 2017-05-20 21:35 - 2017-05-21 19:14 - 00000000 ____D C:\FRST 2017-05-20 21:34 - 2017-05-20 21:34 - 02429952 _____ (Farbar) C:\Users\blup\Desktop\FRST64.exe 2017-05-20 21:17 - 2017-05-20 21:17 - 00000000 ____D C:\Users\Ich\AppData\Local\SlimWare Utilities Inc 2017-05-20 20:36 - 2017-05-20 20:36 - 00268536 _____ C:\Windows\system32\FNTCACHE.DAT 2017-05-20 20:14 - 2017-05-20 20:14 - 01205376 _____ (Slimware Utilities Holdings, Inc.) C:\Users\blup\Downloads\AVG_Driver_Updater_Setup_11_4.exe 2017-05-20 20:14 - 2017-05-20 20:14 - 00025608 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys 2017-05-20 20:14 - 2017-05-20 20:14 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers 2017-05-20 20:14 - 2017-05-20 20:14 - 00000000 ____D C:\Users\Ich\AppData\Local\AVG Netherlands BV 2017-05-17 23:09 - 2017-05-17 23:09 - 00000000 ____D C:\Users\blup\AppData\Local\Chromium 2017-05-16 23:01 - 2017-05-16 23:01 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2017-05-16 12:33 - 2017-05-20 20:20 - 00000000 ____D C:\Windows\Minidump 2017-05-15 17:58 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2017-05-15 17:58 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2017-05-15 17:58 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2017-05-15 17:58 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2017-05-15 17:58 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2017-05-15 17:57 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2017-05-15 17:57 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2017-05-15 17:57 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2017-05-15 15:25 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2017-05-15 15:25 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2017-05-15 15:25 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2017-05-15 15:25 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2017-05-15 15:25 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2017-05-15 15:25 - 2015-12-08 21:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2017-05-15 15:25 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2017-05-15 15:25 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2017-05-15 15:24 - 2017-03-07 16:05 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2017-05-15 15:24 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2017-05-15 15:24 - 2017-02-09 16:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2017-05-15 15:24 - 2017-02-09 16:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2017-05-15 15:24 - 2016-10-11 15:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2017-05-15 15:24 - 2016-10-11 15:06 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2017-05-15 15:24 - 2016-03-24 00:40 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2017-05-15 15:24 - 2016-03-24 00:40 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2017-05-15 15:22 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2017-05-15 15:22 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2017-05-15 15:12 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2017-05-15 15:12 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2017-05-15 15:12 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2017-05-15 15:12 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2017-05-15 15:12 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2017-05-15 15:12 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2017-05-15 15:12 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2017-05-15 15:12 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2017-05-15 15:12 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2017-05-15 15:12 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2017-05-15 15:11 - 2017-05-15 15:11 - 00000000 ____D C:\Windows\SysWOW64\sda 2017-05-15 15:11 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2017-05-15 15:11 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys 2017-05-15 15:11 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll 2017-05-15 15:11 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2017-05-15 15:09 - 2017-05-15 15:09 - 00000000 ____D C:\Windows\system32\DAX2 2017-05-15 15:06 - 2015-08-05 19:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2017-05-15 15:06 - 2015-08-05 19:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2017-05-15 15:05 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2017-05-15 15:05 - 2015-12-16 20:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2017-05-15 15:05 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2017-05-15 15:05 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2017-05-15 14:55 - 2017-05-15 14:55 - 02169900 _____ C:\Users\blup\Downloads\Accounting_and_Finance_II-Neue_Dokumente (1).zip 2017-05-15 14:55 - 2017-05-15 14:55 - 01794382 _____ C:\Users\blup\Downloads\General_Management_II_Tutorium-Neue_Dokumente.zip 2017-05-15 14:53 - 2017-05-15 14:53 - 00966153 _____ C:\Users\blup\Downloads\Accounting_and_Finance_II-Neue_Dokumente.zip 2017-05-11 22:42 - 2017-05-11 22:43 - 63320784 _____ (Microsoft Corporation) C:\Users\blup\Downloads\IE11-Windows6.1-x64-de-de.exe 2017-05-11 01:13 - 2017-04-28 03:14 - 05547240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-05-11 01:13 - 2017-04-28 03:14 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-05-11 01:13 - 2017-04-28 03:14 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-05-11 01:13 - 2017-04-28 03:14 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-05-11 01:13 - 2017-04-28 03:14 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-05-11 01:13 - 2017-04-28 03:11 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-05-11 01:13 - 2017-04-28 03:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:36 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-05-11 01:13 - 2017-04-28 02:36 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-05-11 01:13 - 2017-04-28 02:34 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:19 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-05-11 01:13 - 2017-04-28 02:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-05-11 01:13 - 2017-04-28 02:19 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-05-11 01:13 - 2017-04-28 02:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-05-11 01:13 - 2017-04-28 02:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-05-11 01:13 - 2017-04-28 02:14 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-05-11 01:13 - 2017-04-28 02:12 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-05-11 01:13 - 2017-04-28 02:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-05-11 01:13 - 2017-04-28 02:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-05-11 01:13 - 2017-04-28 02:10 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-05-11 01:13 - 2017-04-28 02:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-05-11 01:13 - 2017-04-28 02:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-05-11 01:13 - 2017-04-28 02:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-05-11 01:13 - 2017-04-28 02:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-05-11 01:13 - 2017-04-26 16:59 - 03220992 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-05-11 01:13 - 2017-04-21 17:34 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2017-05-11 01:13 - 2017-04-21 17:15 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 02065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll 2017-05-11 01:13 - 2017-04-17 17:37 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 01417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2017-05-11 01:13 - 2017-04-17 17:12 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll 2017-05-11 01:13 - 2017-04-17 16:54 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 01483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2017-05-11 01:13 - 2017-04-12 17:32 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2017-05-11 01:13 - 2017-04-12 17:26 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2017-05-11 01:13 - 2017-04-12 17:25 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2017-05-11 01:13 - 2017-04-07 17:34 - 00986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-05-11 01:13 - 2017-04-07 17:34 - 00265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2017-05-11 01:13 - 2017-04-07 17:30 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-05-11 01:13 - 2017-04-07 17:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2017-05-11 01:13 - 2017-04-07 17:22 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-05-11 01:13 - 2017-04-05 16:55 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-05-11 01:13 - 2017-04-05 16:55 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-05-11 01:13 - 2017-04-05 16:55 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 01895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2017-05-11 01:13 - 2017-04-04 17:34 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2017-05-11 01:13 - 2017-04-04 16:53 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2017-05-11 01:13 - 2017-04-04 16:53 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-05-11 01:13 - 2017-03-10 18:32 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2017-05-11 01:13 - 2017-03-10 18:32 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2017-05-11 01:13 - 2017-03-10 18:20 - 01508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll 2017-05-11 01:13 - 2017-03-10 18:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2017-05-11 01:13 - 2017-03-10 17:57 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe 2017-05-11 01:13 - 2017-03-10 17:55 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2017-05-11 01:13 - 2017-03-10 17:55 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys 2017-05-11 01:13 - 2017-03-09 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2017-05-11 01:13 - 2017-03-09 18:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2017-05-10 22:50 - 2017-05-11 01:25 - 00000000 ____D C:\Users\blup\AppData\Local\Avg 2017-05-10 22:47 - 2017-05-21 19:08 - 00000000 ____D C:\Program Files (x86)\AVG 2017-05-10 22:39 - 2017-05-21 19:08 - 00000000 ____D C:\Users\Ich\AppData\Local\AvgSetupLog 2017-05-10 22:39 - 2017-05-21 19:08 - 00000000 ____D C:\ProgramData\Avg 2017-05-10 22:39 - 2017-05-10 22:54 - 00000000 ____D C:\Users\Ich\AppData\Local\Avg 2017-05-10 22:37 - 2017-05-10 22:38 - 03449336 _____ (AVG Technologies CZ, s.r.o.) C:\Users\blup\Downloads\AVG_Performance_709.exe 2017-05-10 22:13 - 2017-05-10 22:13 - 00000000 ____D C:\Users\blup\AppData\Local\AviraSpeedup 2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Windows\System32\Tasks\Avira 2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Users\blup\AppData\Local\Avira 2017-05-10 21:16 - 2017-05-21 11:04 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2017-05-10 21:16 - 2017-05-10 21:16 - 00000000 ____D C:\Users\blup\Documents\My Games 2017-05-10 14:21 - 2017-05-11 00:38 - 00000000 ____D C:\Users\blup\AppData\Local\Ubisoft Game Launcher 2017-05-10 14:21 - 2017-05-10 14:21 - 00001208 _____ C:\Users\Ich\Desktop\Uplay.lnk 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Users\Ich\AppData\Local\Ubisoft Game Launcher 2017-05-10 14:21 - 2017-05-10 14:21 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2017-05-09 11:24 - 2017-05-09 11:41 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-05-09 11:24 - 2017-05-09 11:41 - 00004378 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-05-09 11:24 - 2017-05-09 11:41 - 00000000 ____D C:\Windows\system32\Macromed 2017-05-09 11:24 - 2017-05-09 11:24 - 00004522 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-05-09 11:23 - 2017-05-09 11:54 - 00000000 ____D C:\Users\blup\AppData\Local\Adobe 2017-05-09 11:23 - 2017-05-09 11:23 - 00000000 ____D C:\Users\Ich\AppData\Local\Adobe 2017-05-05 11:12 - 2017-05-12 10:07 - 00000000 ____D C:\uni 2017-05-05 10:50 - 2017-05-05 10:50 - 00000000 ____H C:\Users\blup\AppData\Local\BITEAED.tmp 2017-05-05 10:50 - 2017-05-05 10:50 - 00000000 _____ C:\Users\blup\AppData\Local\{3A4060FC-D4E2-481C-9966-81301692549F} 2017-05-05 10:48 - 2017-05-05 10:49 - 00000000 _____ C:\Users\blup\AppData\Local\{5D9123F6-4E75-4247-AD6C-1A36C3C82178} 2017-05-04 21:13 - 2017-05-09 11:41 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-04 21:13 - 2017-05-09 11:41 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Macromedia 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\blup\AppData\Roaming\The Creative Assembly 2017-05-04 21:13 - 2017-05-04 21:13 - 00000000 ____D C:\Users\blup\AppData\Roaming\Macromedia 2017-05-04 21:05 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2017-05-04 21:05 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2017-05-04 21:04 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2017-05-04 20:04 - 2017-05-12 10:26 - 00000274 _____ C:\Users\blup\Desktop\Filme.txt 2017-05-04 20:04 - 2017-05-10 22:48 - 00000795 _____ C:\Users\blup\Desktop\Bestellung.txt 2017-05-04 20:04 - 2015-05-30 02:36 - 00001331 _____ C:\Users\blup\Desktop\aus.lnk 2017-05-04 20:04 - 2015-05-29 14:53 - 00001269 _____ C:\Users\blup\Desktop\an.lnk 2017-05-04 17:27 - 2017-05-04 17:27 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2017-05-04 15:03 - 2017-05-04 15:03 - 00000000 ____D C:\Users\blup\Documents\Mount&Blade Warband 2017-05-04 15:01 - 2017-05-04 15:01 - 00000000 ____D C:\Users\Ich\Documents\Mount&Blade Warband 2017-05-04 15:01 - 2017-05-04 15:01 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Mount&Blade Warband 2017-05-04 14:59 - 2017-05-08 15:43 - 00000000 ___RD C:\Users\blup\Dropbox 2017-05-04 14:59 - 2017-05-04 14:59 - 00001233 _____ C:\Users\blup\Desktop\Dropbox.lnk 2017-05-04 14:59 - 2017-05-04 14:59 - 00000000 ____D C:\Users\blup\AppData\Roaming\Mount&Blade Warband 2017-05-04 14:55 - 2017-05-04 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mount&Blade Warband 2017-05-04 14:54 - 2017-05-20 21:21 - 00000000 ____D C:\Program Files (x86)\Mount&Blade Warband 2017-05-04 14:53 - 2017-05-04 14:53 - 00000000 ____D C:\Users\blup\AppData\Roaming\PowerISO 2017-05-04 00:43 - 2017-05-04 00:43 - 00000000 ___SD C:\Windows\system32\CompatTel 2017-05-04 00:43 - 2017-05-04 00:43 - 00000000 ____D C:\Windows\system32\appraiser 2017-05-03 23:24 - 2017-02-23 01:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-05-03 23:24 - 2017-02-23 01:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-05-03 23:24 - 2017-02-18 16:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-05-03 23:24 - 2017-02-18 16:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-05-03 23:24 - 2016-12-31 17:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-05-03 23:24 - 2016-03-24 00:40 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2017-05-03 23:24 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2017-05-03 23:24 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2017-05-03 23:24 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2017-05-03 23:24 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2017-05-03 23:24 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2017-05-03 23:24 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2017-05-03 23:24 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2017-05-03 23:24 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2017-05-03 23:24 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2017-05-03 22:57 - 2017-05-03 22:57 - 00000000 ____D C:\Users\blup\AppData\Roaming\Adobe 2017-05-03 19:07 - 2017-05-03 19:07 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Adobe 2017-05-03 02:46 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-03 02:46 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-03 02:43 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2017-05-03 02:31 - 2017-05-03 02:31 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-05-03 02:31 - 2017-05-03 02:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-05-03 02:31 - 2017-05-03 02:31 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-05-03 02:31 - 2017-05-03 02:31 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-05-03 02:31 - 2017-05-03 02:31 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2017-05-03 02:31 - 2017-05-03 02:31 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2017-05-03 02:31 - 2017-05-03 02:31 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-05-03 02:31 - 2017-05-03 02:31 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-05-03 02:31 - 2017-05-03 02:31 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-05-03 02:31 - 2017-05-03 02:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2017-05-03 02:31 - 2017-05-03 02:31 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2017-05-03 02:31 - 2017-05-03 02:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2017-05-03 02:16 - 2017-05-03 02:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2017-05-03 01:04 - 2017-05-11 03:03 - 00000000 ____D C:\Windows\system32\MRT 2017-05-03 01:04 - 2017-05-11 03:01 - 156335152 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-05-03 00:51 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2017-05-03 00:51 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2017-05-03 00:51 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2017-05-03 00:51 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2017-05-03 00:51 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2017-05-03 00:51 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2017-05-03 00:11 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2017-05-03 00:11 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2017-05-03 00:11 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2017-05-02 23:52 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2017-05-02 23:52 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2017-05-02 23:52 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2017-05-02 23:52 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2017-05-02 23:52 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2017-05-02 23:52 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2017-05-02 23:51 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2017-05-02 23:51 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2017-05-02 23:48 - 2017-03-22 17:32 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-05-02 23:48 - 2017-03-22 17:32 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-05-02 23:48 - 2017-03-22 17:32 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-05-02 23:48 - 2017-03-22 17:30 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2017-05-02 23:48 - 2017-03-22 17:24 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-05-02 23:48 - 2017-03-22 17:17 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-05-02 23:48 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-05-02 23:48 - 2017-03-22 17:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2017-05-02 23:48 - 2017-03-22 17:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-05-02 23:48 - 2017-03-22 17:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-05-02 23:48 - 2017-03-22 17:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2017-05-02 23:48 - 2017-03-10 18:35 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2017-05-02 23:48 - 2017-03-10 18:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2017-05-02 23:48 - 2017-03-10 18:27 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2017-05-02 23:48 - 2017-03-10 18:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2017-05-02 23:48 - 2017-03-10 18:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2017-05-02 23:48 - 2017-03-10 18:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2017-05-02 23:48 - 2017-03-10 17:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2017-05-02 23:48 - 2017-03-07 18:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2017-05-02 23:48 - 2017-03-07 18:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2017-05-02 23:48 - 2017-03-04 03:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2017-05-02 23:48 - 2017-03-04 03:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll 2017-05-02 23:48 - 2017-03-04 03:14 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2017-05-02 23:48 - 2017-03-04 03:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll 2017-05-02 23:48 - 2017-02-14 18:33 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-05-02 23:48 - 2017-02-14 18:19 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2017-05-02 23:48 - 2017-02-10 18:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2017-05-02 23:48 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2017-05-02 23:48 - 2017-02-09 18:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll 2017-05-02 23:48 - 2017-02-09 18:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2017-05-02 23:48 - 2017-02-09 18:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll 2017-05-02 23:48 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2017-05-02 23:48 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll 2017-05-02 23:48 - 2017-02-06 18:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2017-05-02 23:48 - 2017-01-18 17:36 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:36 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2017-05-02 23:48 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2017-05-02 23:48 - 2017-01-13 20:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2017-05-02 23:48 - 2017-01-13 20:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll 2017-05-02 23:48 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2017-05-02 23:48 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll 2017-05-02 23:48 - 2017-01-11 20:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2017-05-02 23:48 - 2017-01-11 20:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2017-05-02 23:48 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2017-05-02 23:48 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2017-05-02 23:48 - 2016-11-21 20:12 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2017-05-02 23:48 - 2016-11-20 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2017-05-02 23:48 - 2016-11-20 16:07 - 00467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2017-05-02 23:48 - 2016-11-17 18:41 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2017-05-02 23:48 - 2016-11-10 18:32 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2017-05-02 23:48 - 2016-11-10 18:19 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2017-05-02 23:48 - 2016-11-09 18:41 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2017-05-02 23:48 - 2016-11-09 18:33 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2017-05-02 23:48 - 2016-11-09 18:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2017-05-02 23:48 - 2016-11-09 18:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2017-05-02 23:48 - 2016-11-09 18:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2017-05-02 23:48 - 2016-11-09 17:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2017-05-02 23:48 - 2016-10-11 17:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2017-05-02 23:48 - 2016-10-11 17:31 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2017-05-02 23:48 - 2016-10-11 17:31 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2017-05-02 23:48 - 2016-10-11 17:31 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime 2017-05-02 23:48 - 2016-10-11 17:31 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME 2017-05-02 23:48 - 2016-10-11 17:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2017-05-02 23:48 - 2016-10-11 17:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2017-05-02 23:48 - 2016-10-11 17:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2017-05-02 23:48 - 2016-10-11 17:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime 2017-05-02 23:48 - 2016-10-11 17:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2017-05-02 23:48 - 2016-10-11 16:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2017-05-02 23:48 - 2016-10-11 15:18 - 00419648 _____ C:\Windows\SysWOW64\locale.nls 2017-05-02 23:48 - 2016-10-11 15:17 - 00419648 _____ C:\Windows\system32\locale.nls 2017-05-02 23:48 - 2016-10-08 15:06 - 00633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2017-05-02 23:48 - 2016-10-07 17:32 - 03649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2017-05-02 23:48 - 2016-10-07 17:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2017-05-02 23:48 - 2016-10-05 16:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2017-05-02 23:48 - 2016-09-15 16:56 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2017-05-02 23:48 - 2016-09-12 23:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2017-05-02 23:48 - 2016-09-12 22:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2017-05-02 23:48 - 2016-09-08 22:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2017-05-02 23:48 - 2016-09-08 16:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2017-05-02 23:48 - 2016-09-08 16:55 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2017-05-02 23:48 - 2016-08-22 18:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2017-05-02 23:48 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2017-05-02 23:48 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2017-05-02 23:48 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2017-05-02 23:48 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2017-05-02 23:48 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2017-05-02 23:48 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2017-05-02 23:48 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2017-05-02 23:48 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2017-05-02 23:48 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll 2017-05-02 23:48 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2017-05-02 23:48 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll 2017-05-02 23:48 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2017-05-02 23:48 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe 2017-05-02 23:48 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll 2017-05-02 23:48 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2017-05-02 23:48 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2017-05-02 23:48 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2017-05-02 23:48 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2017-05-02 23:48 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll 2017-05-02 23:48 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2017-05-02 23:48 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2017-05-02 23:48 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2017-05-02 23:48 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2017-05-02 23:48 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2017-05-02 23:48 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2017-05-02 23:48 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2017-05-02 23:48 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2017-05-02 23:48 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2017-05-02 23:48 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2017-05-02 23:48 - 2016-03-24 00:43 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2017-05-02 23:48 - 2016-03-24 00:40 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2017-05-02 23:48 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2017-05-02 23:48 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2017-05-02 23:48 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2017-05-02 23:48 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll 2017-05-02 23:47 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2017-05-02 23:47 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2017-05-02 23:47 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2017-05-02 23:47 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2017-05-02 23:47 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) |
21.05.2017, 18:32 | #6 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehrCode:
ATTFilter C:\Windows\system32\logman.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2017-05-02 23:47 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2017-05-02 23:47 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2017-05-02 23:47 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2017-05-02 23:47 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2017-05-02 23:46 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2017-05-02 23:46 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2017-05-02 23:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2017-05-02 23:45 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2017-05-02 23:45 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2017-05-02 23:45 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2017-05-02 23:45 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2017-05-02 23:45 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-05-02 23:45 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2017-05-02 23:45 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-05-02 23:45 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-05-02 23:45 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2017-05-02 23:45 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2017-05-02 23:45 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2017-05-02 23:45 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-05-02 23:45 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-05-02 23:45 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2017-05-02 23:45 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2017-05-02 23:45 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2017-05-02 23:45 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2017-05-02 23:45 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2017-05-02 23:44 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2017-05-02 23:44 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2017-05-02 23:44 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2017-05-02 23:44 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe 2017-05-02 23:44 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe 2017-05-02 23:44 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe 2017-05-02 23:44 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2017-05-02 23:44 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2017-05-02 23:44 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2017-05-02 23:44 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-05-02 23:44 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2017-05-02 23:44 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2017-05-02 23:44 - 2015-11-14 01:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2017-05-02 23:44 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll 2017-05-02 23:44 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll 2017-05-02 23:44 - 2015-11-14 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe 2017-05-02 23:44 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2017-05-02 23:44 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2017-05-02 23:44 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2017-05-02 23:44 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2017-05-02 23:44 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2017-05-02 23:44 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-05-02 23:44 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2017-05-02 23:44 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2017-05-02 23:44 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2017-05-02 23:44 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2017-05-02 23:44 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2017-05-02 23:44 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2017-05-02 23:44 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2017-05-02 23:44 - 2014-12-19 05:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2017-05-02 23:44 - 2014-12-06 06:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2017-05-02 23:44 - 2014-12-06 05:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2017-05-02 23:44 - 2014-12-06 05:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2017-05-02 23:44 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2017-05-02 23:44 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2017-05-02 23:44 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2017-05-02 23:44 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2017-05-02 23:44 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2017-05-02 23:44 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2017-05-02 23:44 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2017-05-02 23:44 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2017-05-02 23:44 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2017-05-02 23:44 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2017-05-02 23:44 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2017-05-02 23:44 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2017-05-02 23:44 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2017-05-02 23:44 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2017-05-02 23:44 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2017-05-02 23:44 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2017-05-02 23:44 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2017-05-02 23:44 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2017-05-02 23:44 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2017-05-02 23:44 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2017-05-02 23:44 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2017-05-02 23:44 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2017-05-02 23:44 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2017-05-02 23:44 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2017-05-02 23:44 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2017-05-02 23:44 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2017-05-02 23:44 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2017-05-02 23:44 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2017-05-02 23:44 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2017-05-02 23:44 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2017-05-02 23:44 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2017-05-02 23:44 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2017-05-02 23:44 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2017-05-02 23:44 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2017-05-02 23:44 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2017-05-02 23:44 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2017-05-02 23:44 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2017-05-02 23:44 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2017-05-02 23:43 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2017-05-02 23:43 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2017-05-02 23:43 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2017-05-02 23:43 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2017-05-02 23:43 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2017-05-02 23:43 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2017-05-02 23:43 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2017-05-02 23:43 - 2015-11-05 21:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2017-05-02 23:43 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2017-05-02 23:43 - 2015-11-05 11:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2017-05-02 23:43 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2017-05-02 23:43 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2017-05-02 23:43 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2017-05-02 23:43 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2017-05-02 23:43 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2017-05-02 23:43 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2017-05-02 23:43 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2017-05-02 23:43 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2017-05-02 23:43 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2017-05-02 23:43 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2017-05-02 23:43 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2017-05-02 23:43 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2017-05-02 23:43 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2017-05-02 23:43 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2017-05-02 23:43 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll 2017-05-02 23:43 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll 2017-05-02 23:43 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll 2017-05-02 23:43 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll 2017-05-02 23:43 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll 2017-05-02 23:43 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe 2017-05-02 23:43 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll 2017-05-02 23:43 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll 2017-05-02 23:43 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll 2017-05-02 23:43 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll 2017-05-02 23:43 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll 2017-05-02 23:43 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe 2017-05-02 23:43 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2017-05-02 23:43 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2017-05-02 23:43 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2017-05-02 23:43 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2017-05-02 23:43 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2017-05-02 23:42 - 2015-10-29 19:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2017-05-02 23:42 - 2015-10-29 19:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2017-05-02 23:42 - 2015-10-29 19:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2017-05-02 23:42 - 2015-10-29 19:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2017-05-02 23:42 - 2015-10-29 19:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2017-05-02 23:42 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2017-05-02 23:42 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2017-05-02 23:42 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2017-05-02 23:42 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2017-05-02 23:42 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2017-05-02 23:41 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2017-05-02 23:41 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2017-05-02 23:41 - 2015-12-08 23:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2017-05-02 23:41 - 2015-12-08 21:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2017-05-02 23:41 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2017-05-02 23:41 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2017-05-02 23:41 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe 2017-05-02 23:41 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2017-05-02 23:41 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2017-05-02 23:41 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2017-05-02 23:41 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2017-05-02 23:41 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2017-05-02 23:41 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2017-05-02 23:41 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2017-05-02 23:41 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2017-05-02 23:41 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2017-05-02 23:41 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2017-05-02 23:41 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2017-05-02 23:41 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2017-05-02 23:40 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2017-05-02 23:40 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2017-05-02 23:40 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2017-05-02 23:39 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-05-02 23:39 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-05-02 23:39 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-05-02 23:39 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-05-02 23:39 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2017-05-02 23:39 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2017-05-02 23:39 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2017-05-02 23:39 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2017-05-02 23:39 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2017-05-02 23:39 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll 2017-05-02 23:39 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2017-05-02 23:39 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2017-05-02 23:39 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2017-05-02 23:39 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2017-05-02 23:39 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2017-05-02 23:39 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2017-05-02 23:39 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2017-05-02 23:39 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2017-05-02 23:39 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2017-05-02 23:39 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2017-05-02 23:39 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2017-05-02 23:39 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2017-05-02 23:39 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2017-05-02 23:39 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2017-05-02 23:39 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2017-05-02 23:39 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2017-05-02 23:39 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2017-05-02 23:39 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2017-05-02 23:39 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2017-05-02 23:39 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2017-05-02 23:39 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2017-05-02 23:39 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2017-05-02 23:39 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2017-05-02 23:39 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2017-05-02 23:39 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2017-05-02 23:39 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2017-05-02 23:39 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2017-05-02 23:39 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2017-05-02 23:39 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2017-05-02 23:39 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2017-05-02 23:39 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2017-05-02 23:39 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2017-05-02 23:38 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2017-05-02 23:38 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll 2017-05-02 23:38 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll 2017-05-02 23:38 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll 2017-05-02 23:38 - 2016-01-22 08:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2017-05-02 23:38 - 2016-01-22 08:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2017-05-02 23:38 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2017-05-02 23:38 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2017-05-02 23:38 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2017-05-02 23:38 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2017-05-02 23:38 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2017-05-02 23:38 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2017-05-02 23:38 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2017-05-02 23:38 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2017-05-02 23:37 - 2016-03-09 21:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2017-05-02 23:37 - 2016-03-09 20:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2017-05-02 23:37 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2017-05-02 23:37 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2017-05-02 23:37 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2017-05-02 23:37 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2017-05-02 23:37 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2017-05-02 23:37 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2017-05-02 23:37 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2017-05-02 23:37 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2017-05-02 23:37 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2017-05-02 23:37 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2017-05-02 23:37 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2017-05-02 23:37 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2017-05-02 23:36 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2017-05-02 23:36 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2017-05-02 23:36 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2017-05-02 23:36 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2017-05-02 23:36 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2017-05-02 23:36 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2017-05-02 23:36 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2017-05-02 23:36 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2017-05-02 23:36 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2017-05-02 23:36 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2017-05-02 23:36 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2017-05-02 23:36 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2017-05-02 23:36 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2017-05-02 23:36 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2017-05-02 23:36 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2017-05-02 23:36 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2017-05-02 23:36 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2017-05-02 23:36 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2017-05-02 23:36 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2017-05-02 23:36 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2017-05-02 23:36 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2017-05-02 23:36 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2017-05-02 23:36 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2017-05-02 23:36 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2017-05-02 23:36 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2017-05-02 23:36 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2017-05-02 23:36 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2017-05-02 23:36 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2017-05-02 23:36 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2017-05-02 23:35 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2017-05-02 23:35 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2017-05-02 23:35 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2017-05-02 23:35 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2017-05-02 23:34 - 2016-07-22 16:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2017-05-02 23:34 - 2016-07-22 16:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2017-05-02 23:34 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2017-05-02 23:34 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2017-05-02 23:34 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2017-05-02 23:34 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2017-05-02 23:34 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2017-05-02 23:01 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-05-02 23:01 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2017-05-02 23:01 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2017-05-02 22:52 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2017-05-02 22:52 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2017-05-02 22:52 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2017-05-02 22:52 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2017-05-02 22:52 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2017-05-02 22:52 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2017-05-02 22:52 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2017-05-02 22:52 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2017-05-02 22:52 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2017-05-02 22:52 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2017-05-02 22:52 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2017-05-02 22:52 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2017-05-02 22:52 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2017-05-02 22:52 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2017-05-02 22:52 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2017-05-02 22:52 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2017-05-02 22:52 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2017-05-02 22:52 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2017-05-02 22:52 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2017-05-02 22:52 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2017-05-02 22:52 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2017-05-02 22:52 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2017-05-02 22:52 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2017-05-02 22:52 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2017-05-02 22:52 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2017-05-02 22:52 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2017-05-02 22:52 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2017-05-02 22:52 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2017-05-02 22:52 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2017-05-02 22:52 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2017-05-02 22:52 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2017-05-02 22:52 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2017-05-02 22:52 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2017-05-02 22:52 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2017-05-02 22:52 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2017-05-02 22:52 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2017-05-02 22:52 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2017-05-02 22:52 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2017-05-02 22:52 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2017-05-02 22:52 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2017-05-02 22:52 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2017-05-02 22:52 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2017-05-02 22:52 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2017-05-02 22:52 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2017-05-02 22:52 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2017-05-02 22:52 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2017-05-02 22:52 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2017-05-02 22:52 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2017-05-02 22:52 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2017-05-02 22:52 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2017-05-02 22:52 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2017-05-02 22:52 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2017-05-02 22:52 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2017-05-02 22:52 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2017-05-02 22:52 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2017-05-02 22:52 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2017-05-02 22:52 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2017-05-02 22:52 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2017-05-02 22:52 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2017-05-02 22:52 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2017-05-02 22:51 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2017-05-02 22:51 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2017-05-02 22:51 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2017-05-02 22:51 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2017-05-02 22:51 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2017-05-02 22:51 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2017-05-02 22:51 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2017-05-02 22:51 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2017-05-02 22:51 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2017-05-02 22:51 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2017-05-02 22:51 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2017-05-02 22:51 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2017-05-02 22:51 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2017-05-02 22:51 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2017-05-02 22:51 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2017-05-02 22:51 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2017-05-02 22:51 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2017-05-02 22:51 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2017-05-02 22:51 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2017-05-02 22:51 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2017-05-02 22:51 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2017-05-02 22:51 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2017-05-02 22:34 - 2017-05-02 22:36 - 00001908 _____ C:\Windows\diagwrn.xml 2017-05-02 22:34 - 2017-05-02 22:36 - 00001908 _____ C:\Windows\diagerr.xml 2017-05-02 22:34 - 2017-05-02 22:36 - 00000000 ___HD C:\$WINDOWS.~BT 2017-05-02 22:27 - 2017-05-02 22:27 - 00000819 _____ C:\Users\Public\Desktop\PowerISO.lnk 2017-05-02 22:27 - 2017-05-02 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO 2017-05-02 22:26 - 2017-05-02 22:27 - 00000000 ____D C:\Program Files\PowerISO 2017-05-02 22:26 - 2017-02-02 15:27 - 00137792 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys 2017-05-02 22:25 - 2017-05-02 22:25 - 00000000 ____D C:\Users\Ich\Neuer Ordner 2017-05-02 21:58 - 2015-05-30 02:36 - 00001331 _____ C:\Users\Ich\Desktop\aus.lnk 2017-05-02 21:58 - 2015-05-29 14:53 - 00001269 _____ C:\Users\Ich\Desktop\an.lnk 2017-05-02 21:57 - 2017-05-02 21:59 - 00000000 ___RD C:\Users\Ich\Dropbox 2017-05-02 21:57 - 2017-05-02 21:57 - 00001233 _____ C:\Users\Ich\Desktop\Dropbox.lnk 2017-05-02 21:55 - 2016-11-06 20:45 - 00042163 _____ C:\Users\Ich\Desktop\Gemuse nährstoffe und fehlende kurse uni.ods 2017-05-02 21:51 - 2017-05-04 20:05 - 00000000 ____D C:\bilder 2017-05-02 21:36 - 2017-05-02 21:39 - 00000000 ____D C:\musik 2017-05-02 21:14 - 2017-04-01 22:44 - 00000432 _____ C:\Users\Ich\Desktop\Filme.txt 2017-05-02 21:14 - 2017-02-21 23:37 - 00000751 _____ C:\Users\Ich\Desktop\Bestellung.txt 2017-05-02 20:19 - 2017-05-02 20:19 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf 2017-05-02 20:19 - 2017-05-02 20:19 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf 2017-05-02 20:19 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2017-05-02 20:19 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2017-05-02 20:19 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2017-05-02 20:18 - 2017-05-21 19:10 - 00000000 ____D C:\Program Files (x86)\Avira 2017-05-02 20:18 - 2017-05-21 19:09 - 00000000 ____D C:\ProgramData\Avira 2017-05-02 19:51 - 2017-05-02 19:51 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2017-05-02 19:51 - 2017-05-02 19:51 - 00000000 ____D C:\Users\Ich\AppData\Local\AMD 2017-05-02 19:50 - 2017-05-02 19:50 - 00000000 ____D C:\Users\Ich\AppData\Roaming\ATI 2017-05-02 19:50 - 2017-05-02 19:50 - 00000000 ____D C:\Users\Ich\AppData\Local\ATI 2017-05-02 19:47 - 2017-05-02 20:17 - 00000000 ____D C:\Windows\System32\Tasks\Remediation 2017-05-02 19:47 - 2017-05-02 19:47 - 00000000 ____D C:\Program Files\Common Files\AV 2017-05-02 19:33 - 2017-05-10 22:12 - 00058416 _____ C:\Users\blup\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-02 19:33 - 2017-05-02 19:33 - 00000000 ____D C:\Users\blup\AppData\Local\AMD 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\Users\blup\AppData\Roaming\ATI 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\Users\blup\AppData\Local\ATI 2017-05-02 19:32 - 2017-05-02 19:32 - 00000000 ____D C:\ProgramData\ATI 2017-05-02 19:29 - 2017-05-04 10:47 - 00000000 ____D C:\Users\blup\AppData\Local\Steam 2017-05-02 19:29 - 2017-05-02 19:29 - 00000000 ____D C:\Users\blup\AppData\Local\CEF 2017-05-02 19:28 - 2017-05-02 19:28 - 00000000 ____D C:\Users\blup\AppData\Roaming\Opera Software 2017-05-02 19:28 - 2017-05-02 19:28 - 00000000 ____D C:\Users\blup\AppData\Local\Opera Software 2017-05-02 19:27 - 2017-05-21 19:11 - 00000000 ____D C:\Users\blup\AppData\Local\Dropbox 2017-05-02 19:27 - 2017-05-21 18:49 - 00000000 ____D C:\Users\blup\AppData\Local\VirtualStore 2017-05-02 19:27 - 2017-05-04 14:59 - 00000000 ____D C:\Users\blup 2017-05-02 19:27 - 2017-05-03 22:57 - 00001428 _____ C:\Users\blup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-02 19:27 - 2017-05-02 19:27 - 00000020 ___SH C:\Users\blup\ntuser.ini 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Vorlagen 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Startmenü 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Netzwerkumgebung 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Lokale Einstellungen 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Eigene Dateien 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Druckumgebung 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Videos 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Musik 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Documents\Eigene Bilder 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Local\Verlauf 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\AppData\Local\Anwendungsdaten 2017-05-02 19:27 - 2017-05-02 19:27 - 00000000 _SHDL C:\Users\blup\Anwendungsdaten 2017-05-02 19:27 - 2011-04-12 09:54 - 00000000 ____D C:\Users\blup\AppData\Roaming\Media Center Programs 2017-05-02 19:25 - 2017-05-02 19:25 - 00000000 _____ C:\Windows\ativpsrm.bin 2017-05-02 19:07 - 2017-05-02 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\Steam 2017-05-02 19:07 - 2017-05-02 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\CEF 2017-05-02 18:55 - 2017-05-21 19:04 - 00000000 ____D C:\Program Files (x86)\Steam 2017-05-02 18:55 - 2017-05-02 18:55 - 00000970 _____ C:\Users\Public\Desktop\Steam.lnk 2017-05-02 18:55 - 2017-05-02 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-02 18:43 - 2017-05-02 18:44 - 00000000 ____D C:\Users\Ich\AppData\Local\NPE 2017-05-02 18:34 - 2017-05-02 18:34 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Dropbox 2017-05-02 18:32 - 2017-05-21 19:14 - 00000000 ____D C:\Program Files (x86)\Dropbox 2017-05-02 18:32 - 2017-05-21 19:11 - 00001204 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2017-05-02 18:32 - 2017-05-21 19:10 - 00001208 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2017-05-02 18:32 - 2017-05-21 19:07 - 00004214 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA 2017-05-02 18:32 - 2017-05-21 19:07 - 00003962 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore 2017-05-02 18:32 - 2017-05-03 19:07 - 00000000 ____D C:\Users\Ich\AppData\Local\Dropbox 2017-05-02 18:32 - 2017-05-02 18:32 - 00000000 ____D C:\ProgramData\Dropbox 2017-05-02 18:12 - 2017-05-02 18:12 - 00000000 ____D C:\ProgramData\AMD 2017-05-02 18:12 - 2012-08-28 14:27 - 00058536 ____R (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys 2017-05-02 18:11 - 2013-06-27 17:50 - 00082240 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_sata.sys 2017-05-02 18:11 - 2013-06-27 17:50 - 00042304 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_xata.sys 2017-05-02 18:10 - 2013-08-31 01:48 - 00229376 _____ C:\Windows\system32\clinfo.exe 2017-05-02 18:10 - 2013-08-31 01:48 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 01187342 _____ C:\Windows\system32\amdocl_as64.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 01061902 _____ C:\Windows\system32\amdocl_ld64.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00995342 _____ C:\Windows\SysWOW64\amdocl_as32.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00798734 _____ C:\Windows\SysWOW64\amdocl_ld32.exe 2017-05-02 18:10 - 2013-08-31 01:47 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll 2017-05-02 18:10 - 2013-08-31 01:47 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll 2017-05-02 18:10 - 2013-08-31 01:45 - 23760896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2017-05-02 18:10 - 2013-08-31 01:43 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2017-05-02 18:10 - 2013-08-31 01:43 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2017-05-02 18:10 - 2013-08-31 01:18 - 00530824 _____ C:\Windows\SysWOW64\atiapfxx.blb 2017-05-02 18:10 - 2013-08-31 01:18 - 00530824 _____ C:\Windows\system32\atiapfxx.blb 2017-05-02 18:10 - 2013-08-31 01:04 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00204952 _____ C:\Windows\system32\ativvsvl.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat 2017-05-02 18:10 - 2013-08-31 01:04 - 00157144 _____ C:\Windows\system32\ativvsva.dat 2017-05-02 18:10 - 2013-08-31 00:59 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2017-05-02 18:10 - 2013-08-27 21:06 - 00233652 _____ C:\Windows\system32\ativvaxy_cik.dat 2017-05-02 18:10 - 2013-08-27 19:27 - 00082336 _____ C:\Windows\system32\ativce02.dat 2017-05-02 18:10 - 2013-08-07 17:12 - 00231984 _____ C:\Windows\system32\ativvaxy_cik_nd.dat 2017-05-02 18:10 - 2011-09-13 00:06 - 00003917 _____ C:\Windows\SysWOW64\atipblag.dat 2017-05-02 18:10 - 2011-09-13 00:06 - 00003917 _____ C:\Windows\system32\atipblag.dat 2017-05-02 18:09 - 2017-05-02 18:09 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2017-05-02 18:09 - 2013-05-04 21:22 - 00047164 _____ C:\Windows\atiogl.xml 2017-05-02 18:04 - 2017-05-15 15:13 - 01686742 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-05-02 17:59 - 2017-05-21 19:09 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-02 17:57 - 2017-05-02 17:57 - 00000000 ____D C:\Program Files\ATI 2017-05-02 17:49 - 2017-05-02 18:15 - 00000000 ____D C:\Program Files\ATI Technologies 2017-05-02 17:48 - 2017-05-20 19:52 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1493740095 2017-05-02 17:48 - 2017-05-02 17:48 - 00001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2017-05-02 17:48 - 2017-05-02 17:48 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Opera Software 2017-05-02 17:48 - 2017-05-02 17:48 - 00000000 ____D C:\Users\Ich\AppData\Local\Opera Software 2017-05-02 17:47 - 2017-05-20 19:52 - 00000000 ____D C:\Program Files\Opera 2017-05-02 17:47 - 2011-02-25 08:25 - 00296320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2017-05-02 17:46 - 2017-05-02 17:46 - 00016896 _____ (ASUS) C:\Windows\AsTaskSched.dll 2017-05-02 17:45 - 2017-05-15 15:09 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2017-05-02 17:45 - 2017-05-02 17:45 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2017-05-02 17:45 - 2017-05-02 17:45 - 00000000 ____D C:\Program Files\Realtek 2017-05-02 17:44 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2017-05-02 17:44 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2017-05-02 17:44 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2017-05-02 17:44 - 2013-07-23 09:40 - 03610880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2017-05-02 17:43 - 2017-05-02 17:46 - 00000000 ___HD C:\Program Files (x86)\Temp 2017-05-02 17:43 - 2013-09-13 12:44 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2017-05-02 17:43 - 2013-07-28 04:48 - 27518208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2017-05-02 17:43 - 2013-07-23 09:39 - 01916672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2017-05-02 17:43 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2017-05-02 17:38 - 2013-08-27 08:08 - 00883928 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2017-05-02 17:38 - 2013-08-27 08:08 - 00108760 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2017-05-02 17:38 - 2013-08-27 08:08 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2017-05-02 17:37 - 2017-05-20 19:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-05-02 17:37 - 2017-05-02 17:43 - 00000000 ____D C:\Program Files (x86)\Realtek 2017-05-02 17:35 - 2017-05-02 17:35 - 00034427 _____ C:\Windows\Ascd_tmp.ini 2017-05-02 17:35 - 2017-05-02 17:35 - 00001769 _____ C:\Windows\Language_trs.ini 2017-05-02 17:05 - 2017-05-10 22:39 - 00058416 _____ C:\Users\Ich\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-02 16:56 - 2017-05-03 12:54 - 00000000 ____D C:\Users\Ich\AppData\Local\ElevatedDiagnostics 2017-05-02 16:54 - 2017-05-02 20:21 - 00000000 ____D C:\ProgramData\Norton 2017-05-02 16:54 - 2017-05-02 20:18 - 00000000 ____D C:\Program Files (x86)\NortonInstaller 2017-05-02 16:54 - 2017-05-02 17:38 - 00000000 ____D C:\ProgramData\NortonInstaller 2017-05-02 16:49 - 2017-05-03 19:07 - 00001428 _____ C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-02 16:48 - 2017-05-15 12:56 - 00000000 ____D C:\Users\Ich 2017-05-02 16:48 - 2017-05-02 16:52 - 00000000 ____D C:\Users\Ich\AppData\Local\VirtualStore 2017-05-02 16:48 - 2017-05-02 16:48 - 00000020 ___SH C:\Users\Ich\ntuser.ini 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Netzwerkumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Lokale Einstellungen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Eigene Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Druckumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Ich\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Vorlagen 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Startmenü 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Favoriten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Dokumente 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2017-05-02 16:48 - 2017-05-02 16:48 - 00000000 _SHDL C:\Dokumente und Einstellungen 2017-05-02 16:48 - 2011-04-12 09:54 - 00000000 ____D C:\Users\Ich\AppData\Roaming\Media Center Programs 2017-05-02 16:44 - 2017-05-02 16:44 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2017-05-02 16:44 - 2017-05-02 16:44 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2017-05-02 16:43 - 2017-05-02 16:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf 2017-05-02 16:43 - 2017-05-02 16:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-21 19:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-05-21 19:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2017-05-21 09:43 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-05-21 09:43 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-05-21 09:41 - 2011-04-12 09:43 - 00734464 _____ C:\Windows\system32\perfh007.dat 2017-05-21 09:41 - 2011-04-12 09:43 - 00164324 _____ C:\Windows\system32\perfc007.dat 2017-05-21 09:41 - 2009-07-14 07:13 - 01713398 _____ C:\Windows\system32\PerfStringBackup.INI 2017-05-16 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2017-05-16 10:25 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-16 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2017-05-16 01:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2017-05-11 01:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2017-05-05 11:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2017-05-03 22:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2017-05-03 10:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2017-05-03 10:42 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\inetsrv 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2017-05-03 10:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2017-05-02 19:23 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2017-05-02 17:39 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2017-05-02 16:48 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT 2017-05-02 16:44 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-05-02 17:45 - 2017-05-02 17:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== 2017-05-04 13:22 - 2017-05-04 14:10 - 0208896 _____ (Sony DADC Austria AG) C:\Users\blup\AppData\Local\Temp\drm_dyndata_7350008.dll 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_is8E00.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_is9D98.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isABD.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isB9A0.exe 2006-05-24 13:10 - 2006-05-24 13:10 - 0455600 ____R (Macrovision Corporation) C:\Users\blup\AppData\Local\Temp\_isCDAE.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-05-16 13:03 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-05-2017 durchgeführt von Ich (21-05-2017 19:16:43) Gestartet von C:\Users\blup\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2017-05-02 14:48:11) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1096918486-716633971-1973169854-500 - Administrator - Disabled) blup (S-1-5-21-1096918486-716633971-1973169854-1001 - Limited - Enabled) => C:\Users\blup Gast (S-1-5-21-1096918486-716633971-1973169854-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1096918486-716633971-1973169854-1004 - Limited - Enabled) Ich (S-1-5-21-1096918486-716633971-1973169854-1000 - Administrator - Enabled) => C:\Users\Ich ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated) Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{82DEBC0B-5BAD-5918-2EDB-7C78BE01BA59}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) Baldur's Gate (HKLM-x32\...\Baldur's Gate) (Version: - ) Dota 2 (HKLM\...\Steam App 570) (Version: - Valve) Dropbox (HKLM-x32\...\Dropbox) (Version: 26.4.24 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.65.1 - Dropbox, Inc.) Hidden Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Might and Magic Heroes VII (HKLM-x32\...\Uplay Install 1176) (Version: - Ubisoft) Opera Stable 45.0.2552.812 (HKLM-x32\...\Opera 45.0.2552.812) (Version: 45.0.2552.812 - Opera Software) PowerISO (HKLM-x32\...\PowerISO) (Version: 6.8 - Power Software Ltd) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7982 - Realtek Semiconductor Corp.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Total War: SHOGUN 2 (HKLM\...\Steam App 34330) (Version: - The Creative Assembly) Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {1BC13171-8C06-4DE8-BEE5-4ACB8E0ADD9C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-09] (Adobe Systems Incorporated) Task: {39F911BE-2D64-4782-BD5D-8D4A31B55165} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-05-02] (Dropbox, Inc.) Task: {83141813-C2D7-4C19-B84C-64099734F7AC} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-07-27] (Symantec Corporation) Task: {85EF9E6D-39C7-44A1-8835-B37AD4C772DC} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-05-02] (Dropbox, Inc.) Task: {9F23B5AF-28D1-4D24-AB26-AB8A5FB624B2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-09] (Adobe Systems Incorporated) Task: {DE3542B8-FB96-48FE-9481-C7AF5BA84226} - System32\Tasks\Opera scheduled Autoupdate 1493740095 => C:\Program Files\Opera\launcher.exe [2017-05-15] (Opera Software) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-11-01 11:46 - 2013-11-01 11:46 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 91090520 _____ () C:\Program Files\Opera\45.0.2552.812\opera_browser.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 03949144 _____ () C:\Program Files\Opera\45.0.2552.812\libglesv2.dll 2017-05-20 19:52 - 2017-05-15 08:06 - 00101464 _____ () C:\Program Files\Opera\45.0.2552.812\libegl.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\blup\Desktop\an.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\aus.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\Bestellung.txt:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\blup\Desktop\Filme.txt:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\Ich\Desktop\an.lnk:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\Ich\Desktop\aus.lnk:com.dropbox.attributes [168] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1096918486-716633971-1973169854-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ich\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg HKU\S-1-5-21-1096918486-716633971-1973169854-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\blup\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 134.176.2.5 - 134.176.2.7 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{B7DAB1F6-4003-4705-8FC5-DF87174C3B21}] => (Allow) C:\Program Files\Opera\44.0.2510.1449\opera.exe FirewallRules: [{1ADE89FF-BD2F-4A64-8FA3-0D0338759197}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5CB3FBFB-330F-4C9C-8DF8-91B07BBDE200}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2BC93F39-8795-4333-9346-257E31577A91}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{DE978109-E805-4317-9E2A-12303C94F78A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{B0B6621E-51A3-4F69-80C6-707F4F8FFD60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B57D1D75-C68A-4470-A3A7-F1959D32D2DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{79103913-96B1-4C63-BC2E-645502204FD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{A775F6A0-523E-4F26-9880-9A671430FD39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{2A996D3D-B7EE-4192-8F19-32355223CFCE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{77640337-C4A9-40F6-B6FB-FC36114D8CB0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5F6DB7CE-4712-41BF-8747-5DB46AAA730E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D485CDDB-F3A0-4462-A4E5-427F2F61D51B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A0BA87AD-2BB4-43B2-8E0E-32CEE3594EB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{AD8B3BC0-F3F0-4C4A-8802-A56E4E4B44CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe FirewallRules: [{63C950FE-4B7A-4580-A56C-ECB3F1A67225}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{AC0394DE-A4AD-47C2-8626-7FD7CDCAAB99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{76C7361E-8BEE-420A-97DE-075F8A31A3AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C48AEEEE-587F-4B2F-94D7-21AA354733DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5226FBE4-4068-4D30-B11C-CE2DF57F64C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{80630E25-095F-4A5B-A687-8F855DFE2047}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BB18F4C6-58C5-4A01-B793-12C88D1BBBF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E466BE2C-2D5E-4C57-A13F-775E3C242E16}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7E677C8E-69F0-43BB-9D73-479203B04CC0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FD9D9F80-D030-4E74-B41B-7BCC07227925}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{485102AF-0DF1-41D7-B125-15057E079480}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D87375FA-0E2B-4ACC-BFC4-67A82682C061}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{7072F1FF-77E9-4994-B5DF-B2F573E2C9B6}C:\program files (x86)\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\counter-strike global offensive\csgo.exe FirewallRules: [UDP Query User{D2CA1285-FA0A-4206-97BB-A92C995827E1}C:\program files (x86)\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\counter-strike global offensive\csgo.exe FirewallRules: [{93019317-435C-4F77-A38C-F889600D3E26}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Might and Magic Heroes VII\Binaries\Win64\MMH7Game-Win64-Shipping.exe FirewallRules: [{566D60A5-B429-47DE-B472-367F598EBD90}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7DCA8D57-BFDA-41FE-B863-CA6589AA076E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B67DD25C-BAB9-4C88-BB4C-8682E4930BCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{781E692B-8842-4940-BC8A-FB90F1E7C577}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{882F2033-66DF-41C7-881D-4AE612952153}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0A183DB3-9C0D-43A0-8044-0C5B3A5AB870}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{506DF9E8-2E21-434E-8818-96AFB15302DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{44A52C8F-FB70-4C09-873E-A8ED153173CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0EFB3E70-911E-457A-940C-DE16BB644955}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{84179ED3-98DA-42A8-861E-23BA77D930C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FF364004-F062-4EEA-A0D2-0BEB1D45B6BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{53C0E985-39C7-4F39-8EE4-4A96CCB8625C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{893BD598-03B5-4D80-87F4-CC23857A7451}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B0B01A6F-5B40-4922-B6D8-8C873B18C1C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E624AD8E-74FB-40E6-A49C-2A358C39A094}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{859987EA-6301-4E43-AB69-2E6FC30BE95F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BC078B8F-0DDA-4579-9B7C-477C2A6CD65E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4886C5D1-BA5D-4D18-863F-2F16C2F1742B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5F8E6E6A-6DA9-4F84-AFE2-2AA197014287}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{EC3A65E1-A557-4D3B-9887-7D62F9BBEB24}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F86F1D21-2960-456E-84A0-194593AF05F0}] => (Allow) C:\Program Files\Opera\45.0.2552.812\opera.exe FirewallRules: [{E2F8F025-6EA2-418C-8643-4457C1FBA1DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{954438A4-D73C-4881-9938-2BE0FDFF2135}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{66CDEB12-9E2A-4C5F-AA6F-5898B4426DE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{12C7E7D0-664C-4DA4-B964-0881A70CEFC8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{27D43F5A-1081-4CF1-90FF-BA1395C5EAFF}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ==================== Wiederherstellungspunkte ========================= 18-05-2017 11:23:17 Windows Update 20-05-2017 21:17:34 Removed AVG Driver Updater 21-05-2017 02:27:10 Windows Update ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (05/21/2017 07:12:34 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/21/2017 06:53:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm ProcessManager.exe, Version 16.74.2.60831 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 15e4 Startzeit: 01d2d2527ec3a589 Endzeit: 15 Anwendungspfad: C:\Program Files (x86)\AVG\AVG PC TuneUp\ProcessManager.exe Berichts-ID: d62a7913-3e45-11e7-a408-e03f49adde69 Error: (05/21/2017 06:51:17 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm ProcessManager.exe, Version 16.74.2.60831 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1580 Startzeit: 01d2d25253c5ebb3 Endzeit: 16 Anwendungspfad: C:\Program Files (x86)\AVG\AVG PC TuneUp\ProcessManager.exe Berichts-ID: ae991c02-3e45-11e7-a408-e03f49adde69 Error: (05/21/2017 09:35:31 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/20/2017 08:37:04 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/20/2017 07:46:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/20/2017 07:16:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/18/2017 09:16:27 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/17/2017 10:04:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (05/17/2017 02:08:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Systemfehler: ============= Error: (05/21/2017 07:10:56 PM) (Source: APPHOSTSVC) (EventID: 9010) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (05/21/2017 07:10:52 PM) (Source: SCardSvr) (EventID: 602) (User: ) Description: Die WDM-Lesertreiberinitialisierung konnte den Leser nicht öffnen: Zugriff verweigert Error: (05/21/2017 09:37:49 AM) (Source: BROWSER) (EventID: 8032) (User: ) Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{1E76FC9F-9460-4D1C-A9E9-065550FA0FFB}" zu oft fehl. Der Sicherungssuchdienst wird beendet. Error: (05/21/2017 09:35:17 AM) (Source: APPHOSTSVC) (EventID: 9010) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (05/21/2017 09:35:10 AM) (Source: SCardSvr) (EventID: 602) (User: ) Description: Die WDM-Lesertreiberinitialisierung konnte den Leser nicht öffnen: Zugriff verweigert Error: (05/21/2017 02:27:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (05/21/2017 12:15:13 AM) (Source: BROWSER) (EventID: 8032) (User: ) Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{1E76FC9F-9460-4D1C-A9E9-065550FA0FFB}" zu oft fehl. Der Sicherungssuchdienst wird beendet. Error: (05/20/2017 08:43:03 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (05/20/2017 08:36:37 PM) (Source: APPHOSTSVC) (EventID: 9010) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (05/20/2017 08:36:34 PM) (Source: SCardSvr) (EventID: 602) (User: ) Description: Die WDM-Lesertreiberinitialisierung konnte den Leser nicht öffnen: Zugriff verweigert ==================== Speicherinformationen =========================== Prozessor: AMD A8-6600K APU with Radeon(tm) HD Graphics Prozentuale Nutzung des RAM: 28% Installierter physikalischer RAM: 7367.4 MB Verfügbarer physikalischer RAM: 5235.49 MB Summe virtueller Speicher: 14732.99 MB Verfügbarer virtueller Speicher: 12151.86 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:466.26 GB) (Free:364.96 GB) NTFS Drive d: (BG Disc4) (CDROM) (Total:0.6 GB) (Free:0 GB) CDFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7D4D7CC8) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=466.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ |
21.05.2017, 20:05 | #7 | |
/// Malwareteam | Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehrZitat:
Schritt: 1 Downloade Dir HitmanProauf Deinen Desktop: HitmanPro-32 Bit Version HitmanPro-64 Bit Version
Schritt: 2 Du hast du gesagt du hast dein Windows neu aufgesetzt, hast du danach alle Updates eingespielt? Bzw welche Fehlermeldung bekommst du, wenn du versuchst zu updaten? Kannst auch gerne Screenshots posten
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
21.05.2017, 20:38 | #8 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr ja ich habe den power eraser benuzt. aber nicht nur. Vielleicht habe ich ja wirklich keine Trojaner auf dem PC aber das kann ich nicht glauben ^^ Schritt 1 ist abgehakt, der log folgt und zusätlich schicke ich dir ein paar screenshots meines Windows Updateverlaufes. HitmanPropro log Code:
ATTFilter HitmanPro 3.7.20.286 www.hitmanpro.com Computer name . . . . : ICH-PC Windows . . . . . . . : 6.1.1.7601.X64/4 User name . . . . . . : Ich-PC\Ich UAC . . . . . . . . . : Enabled License . . . . . . . : Free Scan date . . . . . . : 2017-05-21 21:28:29 Scan mode . . . . . . : Normal Scan duration . . . . : 2m 24s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 0 Traces . . . . . . . : 1 Objects scanned . . . : 1.106.750 Files scanned . . . . : 15.026 Remnants scanned . . : 230.531 files / 861.193 keys Suspicious files ____________________________________________________________ C:\Users\blup\Desktop\FRST64.exe Size . . . . . . . : 2.429.952 bytes Age . . . . . . . : 1.0 days (2017-05-20 21:34:31) Entropy . . . . . : 7.6 SHA-256 . . . . . : 2779C6201CF32B8DEA1EF2CA48CF00DAB916B1464246CC78AA9A0D77B27FF561 Needs elevation . : Yes Fuzzy . . . . . . : 24.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Time indicates that the file appeared recently on this computer. |
21.05.2017, 20:52 | #9 |
| Bilder Updateverlauf hier sind die ersten screenshots. Ich habe sie angehängt. Falls man sie anders posten kann, dann entschuldige, aber ich weiß nicht wie |
21.05.2017, 21:01 | #10 |
/// Malwareteam | Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Geh mal in die Systemsteuerung/Windows Update und dann klick auf "Updates suchen" - versuche danach diese gefundenen Updates zu installieren. kommt es dabei auch zu Fehlern?
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
21.05.2017, 21:03 | #11 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr und hier ist der Rest des Spaßes. Willst du auch die Liste der empfohlenen Updates oder nur die als "Wichtig" eingestuften sehen? Ich muss mich an dieser Stelle nochmals für den Aufwand, den ich bereite, entschuldigen. |
21.05.2017, 21:06 | #12 |
| Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Ja es kommt zu Fehlern. Beim Update für den Internet Explorer 11 auf 64x basierte Systeme kommt der Fehler: Code9C48 "Das Update konnte nicht installiert werden" |
21.05.2017, 21:33 | #13 |
/// Malwareteam | Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Du kannst da gerne in der Windows Sektion unseres Forums weiterdiskutieren, das hat nichts mit irgend einer Schadsoftware zu tun Die Logs von deinem Rechner sehen jetzt für mich sauber aus: Herzlichen Glückwunsch - du bist Clean Zum Schluss müssen wir noch etwas aufräumen und ich gebe dir ein paar Hinweise mit auf den Weg: Wichtig: Entfernen der verwendeten Tools Die Reihenfolge ist hier entscheidend.
Malwarebytes Anti-Malware (gratis Version) und ESET kannst du als Ergänzung zu deiner bestehenden Antivirus-Lösung auf dem Computer belassen und deinen Computer damit regelmäßig scannen. Persönliche Empfehlungen Das wichtigste zu erst:
Schutz vor unerwünschter Software Adware ist zu einer Art permanenten Bedrohung geworden, weil immer mehr Programme versuchen, einem beim Installieren noch was anderes unterzujubeln - und wie schnell hat man da ein Häkchen übersehen? Darum: pass auf, wenn du dir Software aus dem Internet herunterlädst! Viele Portale im Internet wie Chip, Softonic und Sourceforge versuchen häufig, dir Adware oder sonstige Downloader mit unerwünschten Programmen unterzujubeln. Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal, wie von FilePony.de. Lese dir dazu auch folgenden Artikel durch: CHIP-Installer - was ist das? - Anleitungen Selbst wenn du ein Programm von einer seriösen Quelle heruntergeladen hast, ist das keine Garantie, dass dein Programm nicht doch versucht, unerwünschte Änderungen an deinem Computer vorzunehmen. So versuchen immer mehr Programme, durch modifizierte Installationsroutinen unerwünschte Programme mit auf deinen PC zu schleusen. Das klappt leider auch häufig, weil viele Anwender nicht lesen, was auf dem Bildschirm steht und stattdessen schnell durchklicken. Deshalb: Wenn du ein Programm installierst, wähle immer die benutzerdefinierte Installation und schaue, was du da gerade eigentlich alles mit einem Klick auf "Ok" oder "Weiter" abnickst - entferne entsprechend die Haken bei Dingen, die du nicht möchtest. Wer lesen kann, ist klar im Vorteil! Tipps, um dein System sicherer zu machen Halte immer deine Plug-ins und Software, insbesondere deinen Browser aktuell. Deinstalliere wenn möglich Java und den Adobe Flashplayer von deinem Computer. Neuerdings benötigt man sie fast nie mehr und stellen darum nur mehr eine unnötige Sicherheitslücke auf deinem Computer dar. Wenn du sie doch unbedingt benötigst, halte sie aber unbedingt aktuell. Passwörter Ändere regelmäßig deine Passwörter! Zudem musst du sichere Passwörter benutzen, das bedeutet: mindestens 8 Zeichen, Groß- und Kleinbuchstaben und Sonderzeichen. Ganz wichtig: benutze pro Account ein anderes Passwort! Tipp: Benutze einen Spruch, den du dir leicht merken kannst, als Hilfe für ein Passwort! Zum Beispiel: Der Himmel ist blau und wenn es regnet?-grau ==> DHibuwer?-grau Unterstütze uns und empfiehl uns weiter Du kennst Freunde und Bekannte, die Probleme mit ihrem Computer haben? Schick sie doch zu uns auf das Trojaner Board, wir helfen gerne Wenn du uns mit einer Spende unterstützen möchtest, freuen wir uns sehr und dies kannst du hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Herzlichen Dank dafür Wir machen diese Tätigkeit hier freiwillig, darum freue ich mich besonders über ein kurzes Danke, wenn du mit mir zufrieden warest oder sonst über Verbesserungsvorschläge - das kannst du gerne hier machen Besuche und like unsere Facebook-Seite! Danke für deine Mitarbeit und alles Gute! Bitte gib mir Bescheid, wenn du das alles gelesen hast und du keine weiteren Fragen mehr hast.
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
21.05.2017, 21:41 | #14 |
| Danke ich danke dir für alles du bist der Beste und dass wie die ganze Angelegenheit so schnell bereinigen konnten, macht mich beim Bedanken nur euphorischer. Mit freundlichsten Grüßen Chris |
22.05.2017, 22:34 | #15 |
/// Malwareteam | Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr Gerne
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
Themen zu Windows 7: Supergau - mehrere Trojaner wie rustock.a und b, tidserv und mehr |
avira, backdoor, computer, diskpart, dos, durchgeführt, ergebnis, hack, infos, internet, liste, mehrere trojaner, natürlich, nicht mehr, norton, retten, scan, trojaner, updates, vbs, virenscan, w32, windows, windows 7, windows updates, überhaupt |