![]() |
|
Log-Analyse und Auswertung: Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1) Servus, Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).
Schritt 2
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
![]() | #2 |
![]() | ![]() und wieder Nachschub... (1)Code:
ATTFilter # AdwCleaner 7.0.1.0 - Logfile created on Wed Aug 09 18:04:46 2017 # Updated on 2017/05/08 by Malwarebytes # Running on Windows 10 Pro (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** No malicious folders deleted. ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** No malicious registry entries deleted. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Prefetch files deleted ::Proxy settings cleared ::IE policies deleted ::Chrome policies deleted ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [944 B] - [2017/8/9 18:3:51] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ########## Code:
ATTFilter Malwarebytes www.malwarebytes.com -Protokolldetails- Scan-Datum: 09.08.17 Scan-Zeit: 20:10 Protokolldatei: mbam.txt Administrator: Ja -Softwaredaten- Version: 3.1.2.1733 Komponentenversion: 1.0.160 Version des Aktualisierungspakets: 1.0.2548 Lizenz: Kostenlos -Systemdaten- Betriebssystem: Windows 10 (Build 14393.1593) CPU: x64 Dateisystem: NTFS Benutzer: DESKTOP-DKB7J2N\***** -Scan-Übersicht- Scan-Typ: Bedrohungs-Scan Ergebnis: Abgeschlossen Gescannte Objekte: 387308 Erkannte Bedrohungen: 0 (keine bösartigen Elemente erkannt) In die Quarantäne verschobene Bedrohungen: 0 (keine bösartigen Elemente erkannt) Abgelaufene Zeit: 4 Min., 13 Sek. -Scan-Optionen- Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert -Scan-Details- Prozess: 0 (keine bösartigen Elemente erkannt) Modul: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswert: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Daten-Stream: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Datei: 0 (keine bösartigen Elemente erkannt) Physischer Sektor: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-08-2017 durchgeführt von ***** (Administrator) auf DESKTOP-DKB7J2N (10-08-2017 00:06:21) Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: defaultuser0 & *****) Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (G Data Software AG) C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe () C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (G DATA Software AG) C:\Program Files (x86)\G DATA\AntiVirus\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Farbar) C:\Users\*****\Desktop\FRST64(1).exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8824064 2016-05-19] (Realtek Semiconductor) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3486520 2017-08-04] (Dropbox, Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-03-31] (Geek Software GmbH) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [ABNotify] => C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe [89960 2017-03-25] () HKU\S-1-5-21-221325706-3195113357-3611945030-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd) HKU\S-1-5-21-221325706-3195113357-3611945030-1001\...\MountPoints2: {fe83b834-e581-11e6-86f7-38d5477841fc} - "G:\.\Setup.exe" AUTORUN=1 HKU\S-1-5-21-221325706-3195113357-3611945030-1001\...\MountPoints2: {fe83b90d-e581-11e6-86f7-38d5477841fc} - "G:\.\Setup.exe" AUTORUN=1 HKU\S-1-5-21-221325706-3195113357-3611945030-1001\...\MountPoints2: {fe83b943-e581-11e6-86f7-38d5477841fc} - "G:\.\Setup.exe" AUTORUN=1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-04-10] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2016-12-16] ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{433a398e-cc74-486e-bace-04955a5e7b91}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-221325706-3195113357-3611945030-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/ SearchScopes: HKU\S-1-5-21-221325706-3195113357-3611945030-1001 -> DefaultScope {532520CA-159F-4781-9978-68FCCDF72BDF} URL = SearchScopes: HKU\S-1-5-21-221325706-3195113357-3611945030-1001 -> {532520CA-159F-4781-9978-68FCCDF72BDF} URL = BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-30] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-30] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-30] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-30] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 0dt43zlh.default FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0dt43zlh.default [2017-08-10] FF Homepage: Mozilla\Firefox\Profiles\0dt43zlh.default -> about:home FF NetworkProxy: Mozilla\Firefox\Profiles\0dt43zlh.default -> type", 0 FF Extension: (Disconnect) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0dt43zlh.default\Extensions\2.0@disconnect.me.xpi [2017-04-04] FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-09] () FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-09] () FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [Keine Datei] FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [Keine Datei] FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-11-30] (Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [5017224 2017-06-23] (G DATA Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe [3328112 2017-06-08] (G Data Software AG) R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122736 2017-03-25] (AOMEI Tech Co., Ltd.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2945792 2016-05-26] (Microsoft Corporation) S3 cplspcon; C:\windows\system32\IntelCpHDCPSvc.exe [439800 2016-06-02] (Intel Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-12-14] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-12-14] (Dropbox, Inc.) R2 DbxSvc; C:\windows\system32\DbxSvc.exe [49992 2017-08-04] (Dropbox, Inc.) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [884328 2017-06-08] (G DATA Software AG) R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\windows\system32\igfxCUIService.exe [365048 2016-06-02] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-05-25] (Microsoft Corporation) [Datei ist nicht signiert] R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-03-31] (Geek Software GmbH) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889888 2017-08-01] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation) S4 AVKService; "C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKService.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 ambakdrv; C:\windows\System32\ambakdrv.sys [51120 2016-12-23] () R2 ammntdrv; C:\windows\system32\ammntdrv.sys [171952 2016-12-23] () R2 amwrtdrv; C:\windows\system32\amwrtdrv.sys [38320 2016-12-23] () R3 dot4; C:\windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) R3 Dot4Print; C:\windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S3 e1edc438-f640-4184-a443-d2a7c37a01dc; C:\SYSPREP\OA30\690b33e1-0462-4e84-9bea-c7552b45432a.sys [13952 2016-12-02] () R0 GDBehave; C:\windows\System32\drivers\GDBehave.sys [200728 2017-07-09] (G Data Software AG) S0 GDElam; C:\windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG) R3 GDKBB; C:\windows\system32\drivers\GDKBB64.sys [46104 2017-07-09] (G Data Software AG) R3 GDKBFlt; C:\windows\system32\drivers\GDKBFlt64.sys [38984 2017-07-09] (G DATA Software AG) R1 GDMnIcpt; C:\windows\system32\drivers\MiniIcpt.sys [309784 2017-07-09] (G Data Software AG) R3 GDPkIcpt; C:\windows\system32\drivers\PktIcpt.sys [105544 2016-12-15] (G Data Software AG) R1 gdwfpcd; C:\windows\System32\drivers\gdwfpcd64.sys [86584 2017-07-09] (G DATA Software AG) R1 GRD; C:\windows\system32\drivers\GRD.sys [125640 2017-07-09] (G Data Software) R1 HookCentre; C:\windows\system32\drivers\HookCentre.sys [157720 2017-07-09] (G Data Software AG) S0 iaStorS; C:\windows\System32\drivers\iaStorS.sys [657368 2015-06-02] (Intel Corporation) R2 inpoutx64; C:\windows\System32\Drivers\inpoutx64.sys [15008 2016-11-30] (Highresolution Enterprises [www.highrez.co.uk]) S0 LSI_SAS3; C:\windows\System32\drivers\lsi_sas3.sys [110752 2016-04-10] (Avago Technologies) R0 MBAMSwissArmy; C:\windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-09] (Malwarebytes) S0 megasas2; C:\windows\System32\drivers\megasas2.sys [84120 2016-11-02] (Avago Technologies) S3 NetAdapterCx; C:\windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 rt640x64; C:\windows\System32\drivers\rt640x64.sys [937728 2016-06-20] (Realtek ) S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-08-10 00:05 - 2017-08-10 00:05 - 002381824 _____ (Farbar) C:\Users\*****\Desktop\FRST64(1).exe 2017-08-10 00:05 - 2017-08-10 00:05 - 000000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion 2017-08-09 20:49 - 2017-08-09 20:49 - 000001412 _____ C:\Users\*****\Desktop\mbam.txt 2017-08-09 20:04 - 2017-08-09 20:04 - 000001230 _____ C:\Users\*****\Desktop\AdwCleaner[C0].txt 2017-08-09 20:03 - 2017-08-09 20:03 - 000000944 _____ C:\Users\*****\Desktop\AdwCleaner[S0].txt 2017-08-09 20:01 - 2017-08-09 20:51 - 000000000 ____D C:\AdwCleaner 2017-08-09 19:55 - 2017-08-09 20:00 - 008185288 _____ (Malwarebytes) C:\Users\*****\Desktop\adwcleaner_7.0.1.0.exe 2017-08-09 18:33 - 2017-08-09 18:33 - 000000000 ___HD C:\$WINDOWS.~BT 2017-08-09 00:26 - 2017-08-09 01:11 - 000136965 _____ C:\Users\*****\TDSSKiller_Report.txt 2017-08-09 00:00 - 2017-08-01 21:32 - 000133984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys 2017-08-09 00:00 - 2017-08-01 21:31 - 007780192 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2017-08-09 00:00 - 2017-08-01 21:29 - 000376672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys 2017-08-09 00:00 - 2017-08-01 21:27 - 000118112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys 2017-08-09 00:00 - 2017-08-01 21:22 - 001860288 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll 2017-08-09 00:00 - 2017-08-01 21:22 - 000360040 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe 2017-08-09 00:00 - 2017-08-01 21:21 - 002759712 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2017-08-09 00:00 - 2017-08-01 21:21 - 000857440 _____ (Microsoft Corporation) C:\windows\system32\WWAHost.exe 2017-08-09 00:00 - 2017-08-01 21:21 - 000026976 _____ (Microsoft Corporation) C:\windows\system32\browser_broker.exe 2017-08-09 00:00 - 2017-08-01 21:20 - 000557408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2017-08-09 00:00 - 2017-08-01 21:18 - 008169536 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Protection.PlayReady.dll 2017-08-09 00:00 - 2017-08-01 21:18 - 004260064 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2017-08-09 00:00 - 2017-08-01 21:18 - 001983408 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll 2017-08-09 00:00 - 2017-08-01 21:18 - 001702392 _____ (Microsoft Corporation) C:\windows\system32\mfasfsrcsnk.dll 2017-08-09 00:00 - 2017-08-01 21:18 - 000092512 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll 2017-08-09 00:00 - 2017-08-01 21:17 - 022220856 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2017-08-09 00:00 - 2017-08-01 21:17 - 001072248 _____ (Microsoft Corporation) C:\windows\system32\mfnetcore.dll 2017-08-09 00:00 - 2017-08-01 21:17 - 000244816 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll 2017-08-09 00:00 - 2017-08-01 21:17 - 000241504 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHost.dll 2017-08-09 00:00 - 2017-08-01 21:13 - 002532192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2017-08-09 00:00 - 2017-08-01 21:13 - 001102176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys 2017-08-09 00:00 - 2017-08-01 21:13 - 000387872 _____ (Microsoft Corporation) C:\windows\system32\wmpps.dll 2017-08-09 00:00 - 2017-08-01 20:58 - 000299008 _____ (Microsoft Corporation) C:\windows\system32\rdpinit.exe 2017-08-09 00:00 - 2017-08-01 20:57 - 000415744 _____ (Microsoft Corporation) C:\windows\system32\rdpshell.exe 2017-08-09 00:00 - 2017-08-01 20:57 - 000372736 _____ (Microsoft Corporation) C:\windows\system32\RDXTaskFactory.dll 2017-08-09 00:00 - 2017-08-01 20:53 - 000123904 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll 2017-08-09 00:00 - 2017-08-01 20:52 - 022569472 _____ (Microsoft Corporation) C:\windows\system32\edgehtml.dll 2017-08-09 00:00 - 2017-08-01 20:52 - 000237568 _____ (Microsoft Corporation) C:\windows\system32\Windows.Web.Diagnostics.dll 2017-08-09 00:00 - 2017-08-01 20:51 - 000113664 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-08-09 00:00 - 2017-08-01 20:50 - 000099328 _____ (Microsoft Corporation) C:\windows\system32\browserbroker.dll 2017-08-09 00:00 - 2017-08-01 20:48 - 000223744 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2017-08-09 00:00 - 2017-08-01 20:48 - 000211968 _____ (Microsoft Corporation) C:\windows\system32\InstallAgent.exe 2017-08-09 00:00 - 2017-08-01 20:47 - 000748544 _____ (Microsoft Corporation) C:\windows\system32\StoreAgent.dll 2017-08-09 00:00 - 2017-08-01 20:47 - 000691200 _____ (Microsoft Corporation) C:\windows\system32\ieproxy.dll 2017-08-09 00:00 - 2017-08-01 20:46 - 000590336 _____ (Microsoft Corporation) C:\windows\system32\efswrt.dll 2017-08-09 00:00 - 2017-08-01 20:46 - 000349184 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe 2017-08-09 00:00 - 2017-08-01 20:46 - 000315904 _____ (Microsoft Corporation) C:\windows\system32\Phoneutil.dll 2017-08-09 00:00 - 2017-08-01 20:46 - 000260608 _____ (Microsoft Corporation) C:\windows\system32\InstallAgentUserBroker.exe 2017-08-09 00:00 - 2017-08-01 20:45 - 000805888 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2017-08-09 00:00 - 2017-08-01 20:45 - 000561664 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Wallet.dll 2017-08-09 00:00 - 2017-08-01 20:45 - 000456192 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll 2017-08-09 00:00 - 2017-08-01 20:45 - 000425984 _____ (Microsoft Corporation) C:\windows\system32\aadcloudap.dll 2017-08-09 00:00 - 2017-08-01 20:44 - 000642048 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.InkControls.dll 2017-08-09 00:00 - 2017-08-01 20:43 - 000963584 _____ (Microsoft Corporation) C:\windows\system32\WebcamUi.dll 2017-08-09 00:00 - 2017-08-01 20:42 - 006288384 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2017-08-09 00:00 - 2017-08-01 20:40 - 000945664 _____ (Microsoft Corporation) C:\windows\system32\WpcWebFilter.dll 2017-08-09 00:00 - 2017-08-01 20:39 - 001281536 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll 2017-08-09 00:00 - 2017-08-01 20:38 - 013441536 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll 2017-08-09 00:00 - 2017-08-01 20:37 - 013091328 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2017-08-09 00:00 - 2017-08-01 20:36 - 023677440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2017-08-09 00:00 - 2017-08-01 20:35 - 001908224 _____ (Microsoft Corporation) C:\windows\system32\AzureSettingSyncProvider.dll 2017-08-09 00:00 - 2017-08-01 20:34 - 001837056 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll 2017-08-09 00:00 - 2017-08-01 20:32 - 008114688 _____ (Microsoft Corporation) C:\windows\system32\Chakra.dll 2017-08-09 00:00 - 2017-08-01 20:32 - 004596224 _____ (Microsoft Corporation) C:\windows\system32\xpsrchvw.exe 2017-08-09 00:00 - 2017-08-01 20:32 - 003401216 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll 2017-08-09 00:00 - 2017-08-01 20:32 - 000821248 _____ (Microsoft Corporation) C:\windows\system32\comuid.dll 2017-08-09 00:00 - 2017-08-01 20:30 - 000913920 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll 2017-08-09 00:00 - 2017-08-01 20:29 - 004743680 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2017-08-09 00:00 - 2017-08-01 20:29 - 002852864 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-08-09 00:00 - 2017-08-01 20:29 - 000874496 _____ (Microsoft Corporation) C:\windows\system32\TokenBroker.dll 2017-08-09 00:00 - 2017-08-01 20:28 - 002895360 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 008076288 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 004149248 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 002695680 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Logon.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 002538496 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 001984000 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 000903680 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe 2017-08-09 00:00 - 2017-08-01 20:27 - 000774656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Web.dll 2017-08-09 00:00 - 2017-08-01 20:27 - 000765440 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Sensors.dll 2017-08-09 00:00 - 2017-08-01 20:26 - 001949696 _____ (Microsoft Corporation) C:\windows\system32\PeerDistSvc.dll 2017-08-09 00:00 - 2017-08-01 20:26 - 001513472 _____ (Microsoft Corporation) C:\windows\system32\win32kbase.sys 2017-08-09 00:00 - 2017-08-01 20:26 - 000701952 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.Connectivity.dll 2017-08-09 00:00 - 2017-08-01 20:24 - 003299840 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe 2017-08-09 00:00 - 2017-08-01 20:24 - 001121280 _____ (Microsoft Corporation) C:\windows\system32\aadtb.dll 2017-08-09 00:00 - 2017-08-01 20:24 - 000998912 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll 2017-08-09 00:00 - 2017-08-01 20:24 - 000924672 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll 2017-08-09 00:00 - 2017-08-01 19:20 - 002264344 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2017-08-09 00:00 - 2017-08-01 19:20 - 001431232 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll 2017-08-09 00:00 - 2017-08-01 19:20 - 000781144 _____ (Microsoft Corporation) C:\windows\SysWOW64\WWAHost.exe 2017-08-09 00:00 - 2017-08-01 19:20 - 000116576 _____ (Microsoft Corporation) C:\windows\SysWOW64\CloudExperienceHostCommon.dll 2017-08-09 00:00 - 2017-08-01 19:19 - 001980776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll 2017-08-09 00:00 - 2017-08-01 19:19 - 000577976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll 2017-08-09 00:00 - 2017-08-01 19:19 - 000339896 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll 2017-08-09 00:00 - 2017-08-01 19:19 - 000266080 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe 2017-08-09 00:00 - 2017-08-01 19:19 - 000120416 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe 2017-08-09 00:00 - 2017-08-01 19:18 - 000139104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe 2017-08-09 00:00 - 2017-08-01 19:16 - 006665952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-08-09 00:00 - 2017-08-01 19:16 - 004023552 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2017-08-09 00:00 - 2017-08-01 19:16 - 001845512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll 2017-08-09 00:00 - 2017-08-01 19:15 - 020967840 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2017-08-09 00:00 - 2017-08-01 19:15 - 001360464 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfnetsrc.dll 2017-08-09 00:00 - 2017-08-01 19:15 - 001277856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfasfsrcsnk.dll 2017-08-09 00:00 - 2017-08-01 19:15 - 000981888 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfnetcore.dll 2017-08-09 00:00 - 2017-08-01 19:10 - 000306800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.MediaControl.dll 2017-08-09 00:00 - 2017-08-01 19:07 - 005686784 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2017-08-09 00:00 - 2017-08-01 18:59 - 000035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\tokenbinding.dll 2017-08-09 00:00 - 2017-08-01 18:58 - 000040960 _____ (Microsoft Corporation) C:\windows\SysWOW64\TokenBrokerUI.dll 2017-08-09 00:00 - 2017-08-01 18:56 - 000177664 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Web.Diagnostics.dll 2017-08-09 00:00 - 2017-08-01 18:56 - 000123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.HostName.dll 2017-08-09 00:00 - 2017-08-01 18:55 - 000087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll 2017-08-09 00:00 - 2017-08-01 18:54 - 000505856 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcastdvr.exe 2017-08-09 00:00 - 2017-08-01 18:54 - 000184320 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserMgrProxy.dll 2017-08-09 00:00 - 2017-08-01 18:54 - 000180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\InstallAgent.exe 2017-08-09 00:00 - 2017-08-01 18:53 - 000557568 _____ (Microsoft Corporation) C:\windows\SysWOW64\StoreAgent.dll 2017-08-09 00:00 - 2017-08-01 18:52 - 000533504 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSCOMEX.dll 2017-08-09 00:00 - 2017-08-01 18:52 - 000117760 _____ (Microsoft Corporation) C:\windows\SysWOW64\AuthBroker.dll 2017-08-09 00:00 - 2017-08-01 18:51 - 000483840 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.AllJoyn.dll 2017-08-09 00:00 - 2017-08-01 18:51 - 000426496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Wallet.dll 2017-08-09 00:00 - 2017-08-01 18:51 - 000388608 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2017-08-09 00:00 - 2017-08-01 18:51 - 000306688 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieproxy.dll 2017-08-09 00:00 - 2017-08-01 18:51 - 000223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\InstallAgentUserBroker.exe 2017-08-09 00:00 - 2017-08-01 18:51 - 000145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE 2017-08-09 00:00 - 2017-08-01 18:50 - 000431616 _____ (Microsoft Corporation) C:\windows\SysWOW64\efswrt.dll 2017-08-09 00:00 - 2017-08-01 18:50 - 000284672 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepsync.dll 2017-08-09 00:00 - 2017-08-01 18:50 - 000260096 _____ (Microsoft Corporation) C:\windows\SysWOW64\Phoneutil.dll 2017-08-09 00:00 - 2017-08-01 18:50 - 000125952 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepapi.dll 2017-08-09 00:00 - 2017-08-01 18:49 - 004615168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2017-08-09 00:00 - 2017-08-01 18:48 - 000297472 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe 2017-08-09 00:00 - 2017-08-01 18:48 - 000267776 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptprov.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000846336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebcamUi.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000787968 _____ (Microsoft Corporation) C:\windows\SysWOW64\sbe.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000661504 _____ (Microsoft Corporation) C:\windows\SysWOW64\WpcWebFilter.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000525824 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000396288 _____ (Microsoft Corporation) C:\windows\SysWOW64\werui.dll 2017-08-09 00:00 - 2017-08-01 18:47 - 000368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll 2017-08-09 00:00 - 2017-08-01 18:45 - 002333184 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll 2017-08-09 00:00 - 2017-08-01 18:45 - 001985536 _____ (Microsoft Corporation) C:\windows\SysWOW64\certmgr.dll 2017-08-09 00:00 - 2017-08-01 18:42 - 018364928 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgehtml.dll 2017-08-09 00:00 - 2017-08-01 18:41 - 000248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\dlnashext.dll 2017-08-09 00:00 - 2017-08-01 18:40 - 019415040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2017-08-09 00:00 - 2017-08-01 18:40 - 012187136 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2017-08-09 00:00 - 2017-08-01 18:39 - 007626240 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2017-08-09 00:00 - 2017-08-01 18:39 - 001255936 _____ (Microsoft Corporation) C:\windows\SysWOW64\AzureSettingSyncProvider.dll 2017-08-09 00:00 - 2017-08-01 18:38 - 000458752 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlidprov.dll 2017-08-09 00:00 - 2017-08-01 18:37 - 012349440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll 2017-08-09 00:00 - 2017-08-01 18:37 - 003520512 _____ (Microsoft Corporation) C:\windows\SysWOW64\xpsrchvw.exe 2017-08-09 00:00 - 2017-08-01 18:37 - 002641920 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll 2017-08-09 00:00 - 2017-08-01 18:37 - 000647168 _____ (Microsoft Corporation) C:\windows\SysWOW64\comuid.dll 2017-08-09 00:00 - 2017-08-01 18:37 - 000468992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.InkControls.dll 2017-08-09 00:00 - 2017-08-01 18:36 - 007468544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2017-08-09 00:00 - 2017-08-01 18:35 - 000675840 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll 2017-08-09 00:00 - 2017-08-01 18:34 - 001170944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Speech.dll 2017-08-09 00:00 - 2017-08-01 18:34 - 000886272 _____ (Microsoft Corporation) C:\windows\SysWOW64\aadtb.dll 2017-08-09 00:00 - 2017-08-01 18:34 - 000709120 _____ (Microsoft Corporation) C:\windows\SysWOW64\CPFilters.dll 2017-08-09 00:00 - 2017-08-01 18:33 - 006031872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakra.dll 2017-08-09 00:00 - 2017-08-01 18:33 - 000589312 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Sensors.dll 2017-08-09 00:00 - 2017-08-01 18:32 - 002682880 _____ (Microsoft Corporation) C:\windows\SysWOW64\netshell.dll 2017-08-09 00:00 - 2017-08-01 18:32 - 002648576 _____ (Microsoft Corporation) C:\windows\SysWOW64\CertEnroll.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 003664896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 001988096 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 000773120 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe 2017-08-09 00:00 - 2017-08-01 18:31 - 000690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\TokenBroker.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 000598528 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Web.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 000566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\ShareHost.dll 2017-08-09 00:00 - 2017-08-01 18:31 - 000542208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.Connectivity.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 002997248 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32kfull.sys 2017-08-09 00:00 - 2017-08-01 18:30 - 002482688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 001886720 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Logon.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 001556992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 001013248 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Web.Http.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 000751104 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2017-08-09 00:00 - 2017-08-01 18:30 - 000711168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll 2017-08-09 00:00 - 2017-08-01 18:29 - 003106304 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe 2017-08-09 00:00 - 2017-08-01 18:28 - 000783360 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 001311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjet40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000866816 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswdat10.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswstr10.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000616448 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrepl40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000518144 _____ C:\windows\SysWOW64\msjetoledb40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000475648 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxbde40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000375808 _____ (Microsoft Corporation) C:\windows\SysWOW64\mspbde40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000343552 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrd3x40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000339968 _____ (Microsoft Corporation) C:\windows\SysWOW64\msexcl40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000310272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrd2x40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000290816 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjtes40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000272896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstext40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000240640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msltus40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000144896 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjint40.dll 2017-08-09 00:00 - 2017-08-01 16:15 - 000083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjter40.dll 2017-08-09 00:00 - 2017-07-12 08:17 - 000081760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stornvme.sys 2017-08-09 00:00 - 2017-07-12 08:16 - 000646688 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll 2017-08-09 00:00 - 2017-07-12 08:15 - 002213760 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2017-08-09 00:00 - 2017-07-12 08:15 - 000496872 _____ (Microsoft Corporation) C:\windows\SysWOW64\dnsapi.dll 2017-08-09 00:00 - 2017-07-12 08:12 - 001706488 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2017-08-09 00:00 - 2017-07-12 08:12 - 001573280 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll 2017-08-09 00:00 - 2017-07-12 08:09 - 001181024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys 2017-08-09 00:00 - 2017-07-12 08:02 - 002186592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2017-08-09 00:00 - 2017-07-12 08:02 - 000402776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys 2017-08-09 00:00 - 2017-07-12 08:01 - 000715104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys 2017-08-09 00:00 - 2017-07-12 08:01 - 000156000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys 2017-08-09 00:00 - 2017-07-12 08:00 - 000223072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2017-08-09 00:00 - 2017-07-12 08:00 - 000160608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys 2017-08-09 00:00 - 2017-07-12 08:00 - 000095584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdstor.sys 2017-08-09 00:00 - 2017-07-12 07:59 - 000857952 _____ (Microsoft Corporation) C:\windows\system32\NetSetupEngine.dll 2017-08-09 00:00 - 2017-07-12 07:59 - 000148832 _____ (Microsoft Corporation) C:\windows\system32\NetSetupApi.dll 2017-08-09 00:00 - 2017-07-12 07:56 - 000277856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2017-08-09 00:00 - 2017-07-12 07:55 - 000607072 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupEngine.dll 2017-08-09 00:00 - 2017-07-12 07:55 - 000111968 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupApi.dll 2017-08-09 00:00 - 2017-07-12 07:52 - 004312760 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe 2017-08-09 00:00 - 2017-07-12 07:35 - 000008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\dabapi.dll 2017-08-09 00:00 - 2017-07-12 07:32 - 000227328 _____ (Microsoft Corporation) C:\windows\SysWOW64\container.dll 2017-08-09 00:00 - 2017-07-12 07:32 - 000068096 _____ (Microsoft Corporation) C:\windows\SysWOW64\frprov.dll 2017-08-09 00:00 - 2017-07-12 07:31 - 000130560 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdeploy.dll 2017-08-09 00:00 - 2017-07-12 07:31 - 000022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\perfnet.dll 2017-08-09 00:00 - 2017-07-12 07:30 - 000034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshhttp.dll 2017-08-09 00:00 - 2017-07-12 07:29 - 000328192 _____ (Microsoft Corporation) C:\windows\SysWOW64\daxexec.dll 2017-08-09 00:00 - 2017-07-12 07:29 - 000025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\httpapi.dll 2017-08-09 00:00 - 2017-07-12 07:25 - 000364544 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupShim.dll 2017-08-09 00:00 - 2017-07-12 07:24 - 000124928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scmdisk0101.sys 2017-08-09 00:00 - 2017-07-12 07:24 - 000025088 _____ (Microsoft Corporation) C:\windows\system32\perfnet.dll 2017-08-09 00:00 - 2017-07-12 07:23 - 000671232 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll 2017-08-09 00:00 - 2017-07-12 07:23 - 000328192 _____ (Microsoft Corporation) C:\windows\system32\container.dll 2017-08-09 00:00 - 2017-07-12 07:23 - 000238592 _____ (Microsoft Corporation) C:\windows\system32\MusNotification.exe 2017-08-09 00:00 - 2017-07-12 07:23 - 000216576 _____ (Microsoft Corporation) C:\windows\system32\RdpRelayTransport.dll 2017-08-09 00:00 - 2017-07-12 07:23 - 000098304 _____ (Microsoft Corporation) C:\windows\system32\MusNotificationUx.exe 2017-08-09 00:00 - 2017-07-12 07:23 - 000076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\updatepolicy.dll 2017-08-09 00:00 - 2017-07-12 07:21 - 000711680 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2017-08-09 00:00 - 2017-07-12 07:21 - 000329728 _____ (Microsoft Corporation) C:\windows\system32\wc_storage.dll 2017-08-09 00:00 - 2017-07-12 07:21 - 000042496 _____ (Microsoft Corporation) C:\windows\system32\nshhttp.dll 2017-08-09 00:00 - 2017-07-12 07:19 - 006474752 _____ (Microsoft Corporation) C:\windows\SysWOW64\mspaint.exe 2017-08-09 00:00 - 2017-07-12 07:18 - 000525312 _____ (Microsoft Corporation) C:\windows\SysWOW64\LogonController.dll 2017-08-09 00:00 - 2017-07-12 07:17 - 000552960 _____ (Microsoft Corporation) C:\windows\system32\MusUpdateHandlers.dll 2017-08-09 00:00 - 2017-07-12 07:16 - 000431616 _____ (Microsoft Corporation) C:\windows\system32\WpAXHolder.dll 2017-08-09 00:00 - 2017-07-12 07:15 - 000893440 _____ (Microsoft Corporation) C:\windows\SysWOW64\autochk.exe 2017-08-09 00:00 - 2017-07-12 07:15 - 000029184 _____ (Microsoft Corporation) C:\windows\SysWOW64\iscsium.dll 2017-08-09 00:00 - 2017-07-12 07:14 - 000536064 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll 2017-08-09 00:00 - 2017-07-12 07:13 - 000855040 _____ (Microsoft Corporation) C:\windows\SysWOW64\autofmt.exe 2017-08-09 00:00 - 2017-07-12 07:12 - 002750464 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll 2017-08-09 00:00 - 2017-07-12 07:11 - 002154496 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll 2017-08-09 00:00 - 2017-07-12 07:10 - 000878592 _____ (Microsoft Corporation) C:\windows\SysWOW64\autoconv.exe 2017-08-09 00:00 - 2017-07-12 07:10 - 000546304 _____ (Microsoft Corporation) C:\windows\SysWOW64\uReFS.dll 2017-08-09 00:00 - 2017-07-12 07:09 - 000641024 _____ (Microsoft Corporation) C:\windows\SysWOW64\MCRecvSrc.dll 2017-08-09 00:00 - 2017-07-12 07:07 - 001572352 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2017-08-09 00:00 - 2017-07-12 07:06 - 000937984 _____ (Microsoft Corporation) C:\windows\system32\MCRecvSrc.dll 2017-08-09 00:00 - 2017-07-12 07:06 - 000549376 _____ (Microsoft Corporation) C:\windows\system32\usocore.dll 2017-08-09 00:00 - 2017-07-12 07:05 - 000565248 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasapi32.dll 2017-08-09 00:00 - 2017-07-12 07:03 - 000779776 _____ (Microsoft Corporation) C:\windows\system32\cscui.dll 2017-08-09 00:00 - 2017-07-12 07:01 - 000266752 _____ (Microsoft Corporation) C:\windows\system32\NetSetupSvc.dll 2017-08-09 00:00 - 2017-07-12 07:00 - 002370048 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2017-08-09 00:00 - 2017-07-12 06:59 - 000632320 _____ (Microsoft Corporation) C:\windows\system32\rasapi32.dll 2017-08-09 00:00 - 2017-07-12 06:58 - 001231872 _____ (Microsoft Corporation) C:\windows\system32\dosvc.dll 2017-08-09 00:00 - 2017-07-12 06:58 - 001130496 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2017-08-09 00:00 - 2017-07-12 06:58 - 000392192 _____ (Microsoft Corporation) C:\windows\system32\wuuhext.dll 2017-08-09 00:00 - 2017-07-12 06:57 - 000735744 _____ (Microsoft Corporation) C:\windows\system32\LogonController.dll 2017-08-09 00:00 - 2017-07-12 06:56 - 001826816 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2017-08-09 00:00 - 2017-07-12 04:49 - 000448629 _____ C:\windows\system32\ApnDatabase.xml 2017-08-09 00:00 - 2017-03-04 08:16 - 000187904 _____ (Microsoft Corporation) C:\windows\system32\dialclient.dll 2017-08-09 00:00 - 2017-03-04 08:14 - 000588288 _____ (Microsoft Corporation) C:\windows\system32\wlidprov.dll 2017-08-09 00:00 - 2017-03-04 08:07 - 000909312 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll 2017-08-09 00:00 - 2017-03-04 08:05 - 001328640 _____ (Microsoft Corporation) C:\windows\system32\Windows.Web.Http.dll 2017-08-09 00:00 - 2017-03-04 08:05 - 000134144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ErrorDetails.dll 2017-08-08 23:59 - 2017-08-01 21:25 - 000168800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2017-08-08 23:59 - 2017-08-01 21:21 - 000624048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys 2017-08-08 23:59 - 2017-08-01 21:21 - 000295264 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe 2017-08-08 23:59 - 2017-08-01 21:21 - 000146784 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostCommon.dll 2017-08-08 23:59 - 2017-08-01 21:21 - 000124072 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe 2017-08-08 23:59 - 2017-08-01 21:20 - 002446704 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2017-08-08 23:59 - 2017-08-01 21:20 - 000684344 _____ (Microsoft Corporation) C:\windows\system32\wer.dll 2017-08-08 23:59 - 2017-08-01 21:20 - 000383776 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll 2017-08-08 23:59 - 2017-08-01 21:20 - 000144736 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe 2017-08-08 23:59 - 2017-08-01 21:20 - 000079712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vmbkmcl.sys 2017-08-08 23:59 - 2017-08-01 21:17 - 001600632 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll 2017-08-08 23:59 - 2017-08-01 21:01 - 007218176 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2017-08-08 23:59 - 2017-08-01 20:54 - 000042496 _____ (Microsoft Corporation) C:\windows\system32\tokenbinding.dll 2017-08-08 23:59 - 2017-08-01 20:52 - 000080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vmbkmclr.sys 2017-08-08 23:59 - 2017-08-01 20:48 - 000289792 _____ (Microsoft Corporation) C:\windows\system32\DeveloperOptionsSettingsHandlers.dll 2017-08-08 23:59 - 2017-08-01 20:47 - 000651264 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.AllJoyn.dll 2017-08-08 23:59 - 2017-08-01 20:47 - 000268800 _____ (Microsoft Corporation) C:\windows\system32\UserMgrProxy.dll 2017-08-08 23:59 - 2017-08-01 20:47 - 000223744 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.HostName.dll 2017-08-08 23:59 - 2017-08-01 20:47 - 000049664 _____ (Microsoft Corporation) C:\windows\system32\TokenBrokerUI.dll 2017-08-08 23:59 - 2017-08-01 20:46 - 000379904 _____ (Microsoft Corporation) C:\windows\system32\apprepsync.dll 2017-08-08 23:59 - 2017-08-01 20:46 - 000176128 _____ (Microsoft Corporation) C:\windows\system32\apprepapi.dll 2017-08-08 23:59 - 2017-08-01 20:46 - 000147456 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll 2017-08-08 23:59 - 2017-08-01 20:46 - 000094720 _____ (Microsoft Corporation) C:\windows\system32\wercplsupport.dll 2017-08-08 23:59 - 2017-08-01 20:46 - 000078336 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe 2017-08-08 23:59 - 2017-08-01 20:45 - 000472064 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2017-08-08 23:59 - 2017-08-01 20:45 - 000451072 _____ (Microsoft Corporation) C:\windows\system32\werui.dll 2017-08-08 23:59 - 2017-08-01 20:45 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE 2017-08-08 23:59 - 2017-08-01 20:44 - 001010176 _____ (Microsoft Corporation) C:\windows\system32\enterprisecsps.dll 2017-08-08 23:59 - 2017-08-01 20:43 - 000966144 _____ (Microsoft Corporation) C:\windows\system32\sbe.dll 2017-08-08 23:59 - 2017-08-01 20:43 - 000945664 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll 2017-08-08 23:59 - 2017-08-01 20:43 - 000156672 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll 2017-08-08 23:59 - 2017-08-01 20:42 - 000775168 _____ (Microsoft Corporation) C:\windows\system32\GamePanel.exe 2017-08-08 23:59 - 2017-08-01 20:41 - 002222080 _____ (Microsoft Corporation) C:\windows\system32\certmgr.dll 2017-08-08 23:59 - 2017-08-01 20:40 - 002716672 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll 2017-08-08 23:59 - 2017-08-01 20:40 - 000800768 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Web.Core.dll 2017-08-08 23:59 - 2017-08-01 20:39 - 009129984 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2017-08-08 23:59 - 2017-08-01 20:39 - 000353280 _____ (Microsoft Corporation) C:\windows\system32\windows.immersiveshell.serviceprovider.dll 2017-08-08 23:59 - 2017-08-01 20:39 - 000323072 _____ (Microsoft Corporation) C:\windows\system32\ncryptprov.dll 2017-08-08 23:59 - 2017-08-01 20:38 - 001589760 _____ (Microsoft Corporation) C:\windows\system32\msdtctm.dll 2017-08-08 23:59 - 2017-08-01 20:36 - 000295424 _____ (Microsoft Corporation) C:\windows\system32\dlnashext.dll 2017-08-08 23:59 - 2017-08-01 20:33 - 004749824 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_nt.dll 2017-08-08 23:59 - 2017-08-01 20:33 - 000230400 _____ (Microsoft Corporation) C:\windows\system32\windowslivelogin.dll 2017-08-08 23:59 - 2017-08-01 20:33 - 000167936 _____ (Microsoft Corporation) C:\windows\system32\ErrorDetails.dll 2017-08-08 23:59 - 2017-08-01 20:30 - 002916864 _____ (Microsoft Corporation) C:\windows\system32\CertEnroll.dll 2017-08-08 23:59 - 2017-08-01 20:30 - 001643008 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Speech.dll 2017-08-08 23:59 - 2017-08-01 20:30 - 000305152 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2017-08-08 23:59 - 2017-08-01 20:28 - 001490432 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2017-08-08 23:59 - 2017-08-01 20:27 - 000716800 _____ (Microsoft Corporation) C:\windows\system32\ShareHost.dll 2017-08-08 23:59 - 2017-08-01 20:25 - 001726976 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll 2017-08-08 23:59 - 2017-08-01 20:23 - 003615744 _____ (Microsoft Corporation) C:\windows\system32\win32kfull.sys 2017-08-08 23:59 - 2017-08-01 20:23 - 000886784 _____ (Microsoft Corporation) C:\windows\system32\CPFilters.dll 2017-08-08 23:59 - 2017-07-12 08:15 - 000101216 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll 2017-08-08 23:59 - 2017-07-12 08:14 - 001886896 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2017-08-08 23:59 - 2017-07-12 08:13 - 002253664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys 2017-08-08 23:59 - 2017-07-12 07:59 - 001100128 _____ (Microsoft Corporation) C:\windows\system32\hvix64.exe 2017-08-08 23:59 - 2017-07-12 07:59 - 000989024 _____ (Microsoft Corporation) C:\windows\system32\hvax64.exe 2017-08-08 23:59 - 2017-07-12 07:59 - 000947040 _____ (Microsoft Corporation) C:\windows\system32\hvloader.efi 2017-08-08 23:59 - 2017-07-12 07:55 - 004674872 _____ (Microsoft Corporation) C:\windows\explorer.exe 2017-08-08 23:59 - 2017-07-12 07:25 - 000066560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wcnfs.sys 2017-08-08 23:59 - 2017-07-12 07:24 - 000013824 _____ (Microsoft Corporation) C:\windows\system32\dabapi.dll 2017-08-08 23:59 - 2017-07-12 07:23 - 000084480 _____ (Microsoft Corporation) C:\windows\system32\frprov.dll 2017-08-08 23:59 - 2017-07-12 07:22 - 000033280 _____ (Microsoft Corporation) C:\windows\system32\wcimage.dll 2017-08-08 23:59 - 2017-07-12 07:21 - 000110080 _____ (Microsoft Corporation) C:\windows\system32\dab.dll 2017-08-08 23:59 - 2017-07-12 07:20 - 000031232 _____ (Microsoft Corporation) C:\windows\system32\httpapi.dll 2017-08-08 23:59 - 2017-07-12 07:19 - 000488960 _____ (Microsoft Corporation) C:\windows\system32\NetSetupShim.dll 2017-08-08 23:59 - 2017-07-12 07:19 - 000463872 _____ (Microsoft Corporation) C:\windows\system32\daxexec.dll 2017-08-08 23:59 - 2017-07-12 07:19 - 000156160 _____ (Microsoft Corporation) C:\windows\system32\fdeploy.dll 2017-08-08 23:59 - 2017-07-12 07:17 - 000252416 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2017-08-08 23:59 - 2017-07-12 07:16 - 000142848 _____ (Microsoft Corporation) C:\windows\system32\profsvcext.dll 2017-08-08 23:59 - 2017-07-12 07:15 - 000265216 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll 2017-08-08 23:59 - 2017-07-12 07:13 - 001478656 _____ (Microsoft Corporation) C:\windows\system32\RecoveryDrive.exe 2017-08-08 23:59 - 2017-07-12 07:12 - 000970240 _____ (Microsoft Corporation) C:\windows\system32\autochk.exe 2017-08-08 23:59 - 2017-07-12 07:12 - 000091648 _____ (Microsoft Corporation) C:\windows\system32\updatepolicy.dll 2017-08-08 23:59 - 2017-07-12 07:12 - 000035328 _____ (Microsoft Corporation) C:\windows\system32\iscsium.dll 2017-08-08 23:59 - 2017-07-12 07:11 - 000576512 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll 2017-08-08 23:59 - 2017-07-12 07:10 - 000927232 _____ (Microsoft Corporation) C:\windows\system32\autofmt.exe 2017-08-08 23:59 - 2017-07-12 07:09 - 003291136 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll 2017-08-08 23:59 - 2017-07-12 07:08 - 002861056 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll 2017-08-08 23:59 - 2017-07-12 07:07 - 000954880 _____ (Microsoft Corporation) C:\windows\system32\autoconv.exe 2017-08-08 23:59 - 2017-07-12 07:07 - 000629248 _____ (Microsoft Corporation) C:\windows\system32\uReFS.dll 2017-08-08 23:59 - 2017-07-12 07:06 - 000956416 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.desktop.dll 2017-08-08 23:59 - 2017-07-12 07:03 - 001692160 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.onecore.dll 2017-08-08 23:59 - 2017-07-12 07:03 - 000826880 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll 2017-08-08 23:59 - 2017-07-12 07:02 - 000869888 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2017-08-08 23:59 - 2017-07-12 07:01 - 002279424 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll 2017-08-08 23:59 - 2017-07-12 06:59 - 006664192 _____ (Microsoft Corporation) C:\windows\system32\mspaint.exe 2017-08-08 23:59 - 2017-07-12 06:59 - 002318336 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2017-08-08 23:59 - 2017-03-04 08:57 - 000372432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.MediaControl.dll 2017-08-08 23:11 - 2017-08-09 01:12 - 000274048 _____ C:\TDSSKiller.3.1.0.15_08.08.2017_23.11.34_log.txt 2017-08-08 22:56 - 2017-08-08 23:11 - 000008474 _____ C:\TDSSKiller.3.1.0.15_08.08.2017_22.56.34_log.txt 2017-08-08 22:49 - 2017-08-10 00:06 - 000017293 _____ C:\Users\*****\Desktop\FRST.txt 2017-08-08 22:49 - 2017-08-09 01:12 - 000051731 _____ C:\Users\*****\Desktop\Addition.txt 2017-08-08 22:27 - 2017-08-08 22:56 - 004922400 _____ (AO Kaspersky Lab) C:\Users\*****\Desktop\tdsskiller.exe 2017-08-06 15:08 - 2017-08-07 01:46 - 000049850 _____ C:\Users\*****\Downloads\Addition.txt 2017-08-06 15:08 - 2017-08-07 01:45 - 000094416 _____ C:\Users\*****\Downloads\FRST.txt 2017-08-06 15:07 - 2017-08-10 00:06 - 000000000 ____D C:\FRST 2017-08-06 15:06 - 2017-08-06 15:07 - 002381312 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe 2017-08-04 22:50 - 2017-08-04 22:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-08-04 03:43 - 2017-08-04 03:43 - 000049992 _____ (Dropbox, Inc.) C:\windows\system32\DbxSvc.exe 2017-08-04 03:43 - 2017-08-04 03:43 - 000045640 _____ (Dropbox, Inc.) C:\windows\system32\Drivers\dbx-stable.sys 2017-08-04 03:43 - 2017-08-04 03:43 - 000045640 _____ (Dropbox, Inc.) C:\windows\system32\Drivers\dbx-dev.sys 2017-08-04 03:43 - 2017-08-04 03:43 - 000045640 _____ (Dropbox, Inc.) C:\windows\system32\Drivers\dbx-canary.sys 2017-07-30 23:40 - 2017-07-30 23:40 - 000001483 _____ C:\Users\*****\MBAM_Toshiba_Festplatte.txt 2017-07-27 21:05 - 2017-07-27 21:05 - 000003390 _____ C:\windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-221325706-3195113357-3611945030-1001 2017-07-15 05:55 - 2017-07-15 10:29 - 000101784 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys 2017-07-15 05:55 - 2017-07-15 10:29 - 000077376 _____ C:\windows\system32\Drivers\mbae64.sys 2017-07-15 05:55 - 2017-07-15 05:55 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-07-15 05:55 - 2017-07-15 05:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-07-15 05:55 - 2017-07-15 05:55 - 000000000 ____D C:\Program Files\Malwarebytes 2017-07-12 04:48 - 2017-07-31 17:14 - 000835576 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2017-07-12 04:48 - 2017-07-31 17:14 - 000177648 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-07-12 00:10 - 2017-07-07 09:49 - 000340824 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll 2017-07-12 00:10 - 2017-07-07 09:44 - 000108896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys 2017-07-12 00:10 - 2017-07-07 09:37 - 000468320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys 2017-07-12 00:10 - 2017-07-07 09:32 - 000404824 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2017-07-12 00:10 - 2017-07-07 09:20 - 000059904 _____ (Microsoft Corporation) C:\windows\SysWOW64\l2gpstore.dll 2017-07-12 00:10 - 2017-07-07 09:19 - 000081408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2017-07-12 00:10 - 2017-07-07 09:19 - 000025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapprovp.dll 2017-07-12 00:10 - 2017-07-07 09:18 - 000450560 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll 2017-07-12 00:10 - 2017-07-07 09:18 - 000210432 _____ (Microsoft Corporation) C:\windows\SysWOW64\onex.dll 2017-07-12 00:10 - 2017-07-07 09:17 - 000118784 _____ (Microsoft Corporation) C:\windows\SysWOW64\raschap.dll 2017-07-12 00:10 - 2017-07-07 09:14 - 000270336 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2017-07-12 00:10 - 2017-07-07 09:14 - 000126464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll 2017-07-12 00:10 - 2017-07-07 09:13 - 000310272 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll 2017-07-12 00:10 - 2017-07-07 09:11 - 000340480 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2017-07-12 00:10 - 2017-07-07 09:10 - 000755200 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2017-07-12 00:10 - 2017-07-07 09:09 - 000637952 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll 2017-07-12 00:10 - 2017-07-07 09:09 - 000506368 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2017-07-12 00:10 - 2017-07-07 09:03 - 000337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msinfo32.exe 2017-07-12 00:10 - 2017-07-07 09:02 - 001313280 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdc.dll 2017-07-12 00:10 - 2017-07-07 09:00 - 000476160 _____ (Microsoft® Windows® Operating System) C:\windows\SysWOW64\wvc.dll 2017-07-12 00:10 - 2017-07-07 08:57 - 000691712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2017-07-12 00:10 - 2017-07-07 08:55 - 004423680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll 2017-07-12 00:10 - 2017-07-07 08:54 - 002027008 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2017-07-12 00:10 - 2017-07-07 08:52 - 004561408 _____ (Microsoft) C:\windows\SysWOW64\dbgeng.dll 2017-07-12 00:10 - 2017-07-07 08:52 - 001599488 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2017-07-12 00:10 - 2017-07-07 08:52 - 001413632 _____ (Microsoft Corporation) C:\windows\SysWOW64\OpcServices.dll 2017-07-12 00:10 - 2017-07-07 08:48 - 000071680 _____ (Microsoft Corporation) C:\windows\system32\l2gpstore.dll 2017-07-12 00:10 - 2017-07-07 08:48 - 000030208 _____ (Microsoft Corporation) C:\windows\system32\eapprovp.dll 2017-07-12 00:10 - 2017-07-07 08:46 - 000231424 _____ (Microsoft Corporation) C:\windows\system32\shutdownux.dll 2017-07-12 00:10 - 2017-07-07 08:45 - 000276992 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2017-07-12 00:10 - 2017-07-07 08:44 - 000502784 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll 2017-07-12 00:10 - 2017-07-07 08:44 - 000238592 _____ (Microsoft Corporation) C:\windows\system32\onex.dll 2017-07-12 00:10 - 2017-07-07 08:44 - 000139264 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll 2017-07-12 00:10 - 2017-07-07 08:44 - 000137728 _____ (Microsoft Corporation) C:\windows\system32\raschap.dll 2017-07-12 00:10 - 2017-07-07 08:43 - 000387584 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2017-07-12 00:10 - 2017-07-07 08:43 - 000088576 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2017-07-12 00:10 - 2017-07-07 08:39 - 000282624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys 2017-07-12 00:10 - 2017-07-07 08:35 - 001397760 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll 2017-07-12 00:10 - 2017-07-07 08:33 - 000576000 _____ (Microsoft® Windows® Operating System) C:\windows\system32\wvc.dll 2017-07-12 00:10 - 2017-07-07 08:28 - 002096640 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2017-07-12 00:10 - 2017-07-07 08:28 - 000759296 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2017-07-12 00:10 - 2017-07-07 08:28 - 000589312 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2017-07-12 00:10 - 2017-07-07 08:24 - 001783296 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2017-07-12 00:10 - 2017-07-06 06:29 - 000690008 _____ (Microsoft Corporation) C:\windows\system32\msvcp120_clr0400.dll 2017-07-12 00:10 - 2017-06-22 08:17 - 000987840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll 2017-07-12 00:10 - 2017-06-22 08:17 - 000485576 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp120_clr0400.dll 2017-07-12 00:10 - 2017-06-21 10:18 - 001470816 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppVEntSubsystems32.dll 2017-07-12 00:10 - 2017-06-21 09:54 - 000603488 _____ (Microsoft Corporation) C:\windows\system32\ContentDeliveryManager.Utilities.dll 2017-07-12 00:10 - 2017-06-21 09:53 - 000794928 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Shell.Broker.dll 2017-07-12 00:10 - 2017-06-21 09:52 - 000774224 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll 2017-07-12 00:10 - 2017-06-21 09:52 - 000088416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scmbus.sys 2017-07-12 00:10 - 2017-06-21 09:42 - 000601712 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll 2017-07-12 00:10 - 2017-06-21 09:40 - 000328008 _____ (Microsoft Corporation) C:\windows\system32\Windows.Storage.ApplicationData.dll 2017-07-12 00:10 - 2017-06-21 09:39 - 002048496 _____ C:\windows\SysWOW64\CoreUIComponents.dll 2017-07-12 00:10 - 2017-06-21 09:38 - 007220192 _____ (Microsoft Corporation) C:\windows\system32\windows.storage.dll 2017-07-12 00:10 - 2017-06-21 09:38 - 000790752 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2017-07-12 00:10 - 2017-06-21 09:36 - 000129888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS 2017-07-12 00:10 - 2017-06-21 09:33 - 000408600 _____ (Microsoft Corporation) C:\windows\system32\tsmf.dll 2017-07-12 00:10 - 2017-06-21 09:31 - 001277824 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll 2017-07-12 00:10 - 2017-06-21 09:31 - 000160096 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostBroker.dll 2017-07-12 00:10 - 2017-06-21 09:30 - 000869848 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll 2017-07-12 00:10 - 2017-06-21 09:30 - 000196960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ifsutil.dll 2017-07-12 00:10 - 2017-06-21 09:29 - 005722320 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.storage.dll 2017-07-12 00:10 - 2017-06-21 09:28 - 002277288 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll 2017-07-12 00:10 - 2017-06-21 09:28 - 001504056 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll 2017-07-12 00:10 - 2017-06-21 09:28 - 000524776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll 2017-07-12 00:10 - 2017-06-21 09:28 - 000170960 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2017-07-12 00:10 - 2017-06-21 09:27 - 001122344 _____ (Microsoft Corporation) C:\windows\SysWOW64\dcomp.dll 2017-07-12 00:10 - 2017-06-21 09:27 - 000975744 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll 2017-07-12 00:10 - 2017-06-21 09:27 - 000861024 _____ (Microsoft Corporation) C:\windows\SysWOW64\LicenseManager.dll 2017-07-12 00:10 - 2017-06-21 09:27 - 000549088 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll 2017-07-12 00:10 - 2017-06-21 09:25 - 002168288 _____ (Microsoft Corporation) C:\windows\SysWOW64\combase.dll 2017-07-12 00:10 - 2017-06-21 09:24 - 000846560 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinTypes.dll 2017-07-12 00:10 - 2017-06-21 09:24 - 000154432 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntmarta.dll 2017-07-12 00:10 - 2017-06-21 09:22 - 000361104 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsmf.dll 2017-07-12 00:10 - 2017-06-21 09:21 - 001557808 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2017-07-12 00:10 - 2017-06-21 09:21 - 000952416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll 2017-07-12 00:10 - 2017-06-21 09:21 - 000374448 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFPlay.dll 2017-07-12 00:10 - 2017-06-21 09:20 - 000962768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll 2017-07-12 00:10 - 2017-06-21 09:20 - 000312472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll 2017-07-12 00:10 - 2017-06-21 09:04 - 001631232 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-07-12 00:10 - 2017-06-21 09:04 - 001631232 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.Resources.dll 2017-07-12 00:10 - 2017-06-21 09:04 - 000026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\odbcconf.dll 2017-07-12 00:10 - 2017-06-21 09:03 - 000013312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rootmdm.sys 2017-07-12 00:10 - 2017-06-21 09:02 - 000030208 _____ (Microsoft Corporation) C:\windows\system32\odbcconf.dll 2017-07-12 00:10 - 2017-06-21 09:01 - 000185344 _____ (Microsoft Corporation) C:\windows\system32\DisplayManager.dll 2017-07-12 00:10 - 2017-06-21 09:01 - 000141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Radios.dll 2017-07-12 00:10 - 2017-06-21 09:01 - 000138752 _____ (Microsoft Corporation) C:\windows\system32\VEDataLayerHelpers.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000519168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ngccredprov.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000295424 _____ (Microsoft Corporation) C:\windows\system32\unimdm.tsp 2017-07-12 00:10 - 2017-06-21 09:00 - 000233984 _____ (Microsoft Corporation) C:\windows\system32\ProvisioningHandlers.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000193536 _____ (Microsoft Corporation) C:\windows\system32\WinRtTracing.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserDeviceRegistration.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000143360 _____ (Microsoft Corporation) C:\windows\SysWOW64\uudf.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000138240 _____ (Microsoft Corporation) C:\windows\SysWOW64\DisplayManager.dll 2017-07-12 00:10 - 2017-06-21 09:00 - 000114688 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-07-12 00:10 - 2017-06-21 08:59 - 000467968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.XboxLive.Storage.dll 2017-07-12 00:10 - 2017-06-21 08:59 - 000285184 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-07-12 00:10 - 2017-06-21 08:59 - 000255488 _____ (Microsoft Corporation) C:\windows\SysWOW64\unimdm.tsp 2017-07-12 00:10 - 2017-06-21 08:59 - 000149504 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Core.dll 2017-07-12 00:10 - 2017-06-21 08:59 - 000137216 _____ (Microsoft Corporation) C:\windows\system32\tdlrecover.exe 2017-07-12 00:10 - 2017-06-21 08:59 - 000097792 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.SystemManagement.dll 2017-07-12 00:10 - 2017-06-21 08:58 - 000418304 _____ C:\windows\system32\Windows.Perception.Stub.dll 2017-07-12 00:10 - 2017-06-21 08:58 - 000136192 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinRtTracing.dll 2017-07-12 00:10 - 2017-06-21 08:58 - 000129024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SerialCommunication.dll 2017-07-12 00:10 - 2017-06-21 08:58 - 000094208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.StateRepositoryClient.dll 2017-07-12 00:10 - 2017-06-21 08:58 - 000059904 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.UserDeviceAssociation.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000505856 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.WiFiDirect.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000418304 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.BlockedShutdown.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000360448 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000243712 _____ (Microsoft Corporation) C:\windows\system32\credprovhost.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000171520 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SerialCommunication.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000144896 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Lights.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000142336 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.WiFi.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000122880 _____ (Microsoft Corporation) C:\windows\SysWOW64\sendmail.dll 2017-07-12 00:10 - 2017-06-21 08:57 - 000088576 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserDeviceRegistration.Ngc.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 001507840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.FaceAnalysis.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000912384 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SmartCards.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000719872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdiWiFi.sys 2017-07-12 00:10 - 2017-06-21 08:56 - 000568320 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.LowLevel.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000392192 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.Input.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000374784 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.LowLevel.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000315904 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000299520 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserDataAccountApis.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000237056 _____ (Microsoft Corporation) C:\windows\SysWOW64\SyncSettings.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000231936 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000216576 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Scanners.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\credprovhost.dll 2017-07-12 00:10 - 2017-06-21 08:56 - 000113152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Lights.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000404992 _____ (Microsoft Corporation) C:\windows\SysWOW64\dsreg.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000358912 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000310784 _____ (Microsoft Corporation) C:\windows\system32\SyncSettings.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000265728 _____ C:\windows\SysWOW64\Windows.Perception.Stub.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000252416 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Identity.Provider.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Core.dll 2017-07-12 00:10 - 2017-06-21 08:55 - 000020480 _____ (Microsoft Corporation) C:\windows\SysWOW64\regsvr32.exe 2017-07-12 00:10 - 2017-06-21 08:54 - 001159680 _____ (Microsoft Corporation) C:\windows\system32\XblGameSave.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000949248 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.PointOfService.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000671744 _____ (Microsoft Corporation) C:\windows\system32\mbsmsapi.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000609280 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Import.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000574976 _____ (Microsoft Corporation) C:\windows\system32\tileobjserver.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000472064 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Bluetooth.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000337408 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Picker.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000298496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Management.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000245760 _____ (Microsoft Corporation) C:\windows\system32\WwaApi.dll 2017-07-12 00:10 - 2017-06-21 08:54 - 000141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\easwrt.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000437248 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Usb.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000390656 _____ (Microsoft Corporation) C:\windows\SysWOW64\CredProvDataModel.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000386048 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.WiFiDirect.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000332288 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Bluetooth.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleacc.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000284160 _____ (Microsoft Corporation) C:\windows\system32\AboveLockAppHost.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000271360 _____ (Microsoft Corporation) C:\windows\SysWOW64\deviceaccess.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000218624 _____ (Microsoft Corporation) C:\windows\SysWOW64\WwaApi.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000202752 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000201728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExecModelClient.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000185856 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2017-07-12 00:10 - 2017-06-21 08:53 - 000175616 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Scanners.dll 2017-07-12 00:10 - 2017-06-21 08:52 - 000410112 _____ (Microsoft Corporation) C:\windows\system32\DevicesFlowBroker.dll 2017-07-12 00:10 - 2017-06-21 08:52 - 000352256 _____ (Microsoft Corporation) C:\windows\system32\XpsDocumentTargetPrint.dll 2017-07-12 00:10 - 2017-06-21 08:52 - 000331264 _____ (Microsoft Corporation) C:\windows\system32\NgcCtnrSvc.dll 2017-07-12 00:10 - 2017-06-21 08:52 - 000262144 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Picker.dll 2017-07-12 00:10 - 2017-06-21 08:52 - 000182784 _____ (Microsoft Corporation) C:\windows\SysWOW64\BioCredProv.dll 2017-07-12 00:10 - 2017-06-21 08:51 - 000747520 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Ocr.dll 2017-07-12 00:10 - 2017-06-21 08:51 - 000314368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Usb.dll 2017-07-12 00:10 - 2017-06-21 08:51 - 000284672 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.dll 2017-07-12 00:10 - 2017-06-21 08:51 - 000258048 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsDocumentTargetPrint.dll 2017-07-12 00:10 - 2017-06-21 08:50 - 001167360 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe 2017-07-12 00:10 - 2017-06-21 08:50 - 000857600 _____ (Microsoft Corporation) C:\windows\SysWOW64\EmailApis.dll 2017-07-12 00:10 - 2017-06-21 08:50 - 000529920 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll 2017-07-12 00:10 - 2017-06-21 08:50 - 000238080 _____ (Microsoft Corporation) C:\windows\SysWOW64\AboveLockAppHost.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 003778048 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 002104320 _____ (Microsoft Corporation) C:\windows\system32\wlidsvc.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 001403392 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Editing.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000500224 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000458752 _____ (Microsoft Corporation) C:\windows\system32\RTMediaFrame.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000295936 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000288256 _____ (Microsoft Corporation) C:\windows\SysWOW64\CryptoWinRT.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000175616 _____ (Microsoft Corporation) C:\windows\system32\SystemSettings.DeviceEncryptionHandlers.dll 2017-07-12 00:10 - 2017-06-21 08:49 - 000169984 _____ (Microsoft Corporation) C:\windows\system32\Windows.Energy.dll 2017-07-12 00:10 - 2017-06-21 08:48 - 000395264 _____ (Microsoft Corporation) C:\windows\SysWOW64\dmenrollengine.dll 2017-07-12 00:10 - 2017-06-21 08:48 - 000336384 _____ (Microsoft Corporation) C:\windows\SysWOW64\azroleui.dll 2017-07-12 00:10 - 2017-06-21 08:47 - 013873664 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2017-07-12 00:10 - 2017-06-21 08:47 - 007655424 _____ (Microsoft Corporation) C:\windows\system32\mos.dll 2017-07-12 00:10 - 2017-06-21 08:47 - 001105408 _____ (Microsoft Corporation) C:\windows\system32\MiracastReceiver.dll 2017-07-12 00:10 - 2017-06-21 08:47 - 000442368 _____ (Microsoft Corporation) C:\windows\system32\PlayToDevice.dll 2017-07-12 00:10 - 2017-06-21 08:46 - 001323008 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsp_fs.dll 2017-07-12 00:10 - 2017-06-21 08:46 - 001137152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsp_health.dll 2017-07-12 00:10 - 2017-06-21 08:46 - 001077760 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Editing.dll 2017-07-12 00:10 - 2017-06-21 08:46 - 000627200 _____ (Microsoft Corporation) C:\windows\system32\SpaceControl.dll 2017-07-12 00:10 - 2017-06-21 08:46 - 000355328 _____ (Microsoft Corporation) C:\windows\SysWOW64\RTMediaFrame.dll 2017-07-12 00:10 - 2017-06-21 08:45 - 000471552 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2017-07-12 00:10 - 2017-06-21 08:45 - 000313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppXDeploymentClient.dll 2017-07-12 00:10 - 2017-06-21 08:45 - 000102400 _____ (Microsoft Corporation) C:\windows\SysWOW64\uexfat.dll 2017-07-12 00:10 - 2017-06-21 08:44 - 000795648 _____ (Microsoft Corporation) C:\windows\SysWOW64\MiracastReceiver.dll 2017-07-12 00:10 - 2017-06-21 08:44 - 000343040 _____ (Microsoft Corporation) C:\windows\SysWOW64\PlayToDevice.dll 2017-07-12 00:10 - 2017-06-21 08:44 - 000136704 _____ (Microsoft Corporation) C:\windows\SysWOW64\ufat.dll 2017-07-12 00:10 - 2017-06-21 08:44 - 000027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdProxy.dll 2017-07-12 00:10 - 2017-06-21 08:43 - 001534464 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.3D.dll 2017-07-12 00:10 - 2017-06-21 08:43 - 001217024 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Audio.dll 2017-07-12 00:10 - 2017-06-21 08:43 - 000713216 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnapps.dll 2017-07-12 00:10 - 2017-06-21 08:43 - 000653312 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.AccountsControl.dll 2017-07-12 00:10 - 2017-06-21 08:43 - 000035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\cnvfat.dll 2017-07-12 00:10 - 2017-06-21 08:42 - 003307008 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2017-07-12 00:10 - 2017-06-21 08:42 - 000539136 _____ (Microsoft Corporation) C:\windows\system32\PlayToManager.dll 2017-07-12 00:10 - 2017-06-21 08:42 - 000470016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2017-07-12 00:10 - 2017-06-21 08:42 - 000467968 _____ (Microsoft Corporation) C:\windows\system32\Geolocation.dll 2017-07-12 00:10 - 2017-06-21 08:42 - 000380416 _____ (Microsoft Corporation) C:\windows\SysWOW64\uReFSv1.dll 2017-07-12 00:10 - 2017-06-21 08:41 - 001080320 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Ocr.dll 2017-07-12 00:10 - 2017-06-21 08:41 - 000983040 _____ (Microsoft Corporation) C:\windows\system32\ngcsvc.dll 2017-07-12 00:10 - 2017-06-21 08:41 - 000459776 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 001891328 _____ (Microsoft Corporation) C:\windows\system32\pnidui.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 000901120 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 000895488 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 000611328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 000220672 _____ (Microsoft Corporation) C:\windows\SysWOW64\PlayToReceiver.dll 2017-07-12 00:10 - 2017-06-21 08:40 - 000090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\olepro32.dll 2017-07-12 00:10 - 2017-06-21 08:39 - 002208768 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.3D.dll 2017-07-12 00:10 - 2017-06-21 08:39 - 000816640 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 003733504 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_47.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 002424320 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Perception.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 001275392 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 001221120 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Audio.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 000846336 _____ (Microsoft Corporation) C:\windows\system32\MbaeApiPublic.dll 2017-07-12 00:10 - 2017-06-21 08:38 - 000753152 _____ (Microsoft Corporation) C:\windows\SysWOW64\imapi2fs.dll 2017-07-12 00:10 - 2017-06-21 08:37 - 006109696 _____ (Microsoft Corporation) C:\windows\SysWOW64\mos.dll 2017-07-12 00:10 - 2017-06-21 08:37 - 000400384 _____ (Microsoft Corporation) C:\windows\SysWOW64\PlayToManager.dll 2017-07-12 00:10 - 2017-06-21 08:37 - 000357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\Geolocation.dll 2017-07-12 00:10 - 2017-06-21 08:37 - 000103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Devices.dll 2017-07-12 00:10 - 2017-06-21 08:36 - 001424896 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.Maps.dll 2017-07-12 00:10 - 2017-06-21 08:36 - 001247232 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 002740224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 001656320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Perception.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 001369088 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.Phone.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 001232384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.Maps.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 000827904 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 000732160 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsSpellCheckingFacility.dll 2017-07-12 00:10 - 2017-06-21 08:35 - 000348160 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Midi.dll 2017-07-12 00:10 - 2017-06-21 08:34 - 000654336 _____ (Microsoft Corporation) C:\windows\SysWOW64\MbaeApiPublic.dll 2017-07-12 00:10 - 2017-06-21 08:34 - 000621056 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.dll 2017-07-12 00:10 - 2017-06-21 08:34 - 000179712 _____ (Microsoft Corporation) C:\windows\system32\tssrvlic.dll 2017-07-12 00:10 - 2017-06-21 08:33 - 001170944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.Phone.dll 2017-07-12 00:10 - 2017-06-21 08:33 - 000439296 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe 2017-07-12 00:10 - 2017-06-21 08:33 - 000048128 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2017-07-12 00:10 - 2017-06-21 08:32 - 000353280 _____ (Microsoft Corporation) C:\windows\SysWOW64\TextInputFramework.dll 2017-07-12 00:10 - 2017-06-21 08:30 - 000038912 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll 2017-07-12 00:10 - 2017-06-21 08:10 - 000483840 _____ (Microsoft Corporation) C:\windows\SysWOW64\CoreMessaging.dll 2017-07-12 00:10 - 2017-06-20 04:42 - 000993632 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll 2017-07-12 00:10 - 2017-03-04 08:56 - 000263472 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Storage.ApplicationData.dll 2017-07-12 00:10 - 2017-03-04 08:28 - 000279552 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.HumanInterfaceDevice.dll 2017-07-12 00:10 - 2017-03-04 08:26 - 000307200 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs3D.dll 2017-07-12 00:10 - 2017-03-04 08:23 - 001145856 _____ (Microsoft Corporation) C:\windows\system32\EmailApis.dll 2017-07-12 00:10 - 2017-03-04 08:23 - 000583680 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll 2017-07-12 00:10 - 2017-03-04 08:21 - 001243136 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.FaceAnalysis.dll 2017-07-12 00:10 - 2017-03-04 08:21 - 000670208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.PointOfService.dll 2017-07-12 00:10 - 2017-03-04 08:20 - 000562176 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SmartCards.dll 2017-07-12 00:10 - 2017-03-04 08:20 - 000206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\vaultcli.dll 2017-07-12 00:10 - 2017-03-04 08:19 - 000498688 _____ (Microsoft Corporation) C:\windows\SysWOW64\mbsmsapi.dll 2017-07-12 00:10 - 2017-03-04 08:17 - 000864256 _____ (Microsoft Corporation) C:\windows\system32\wpnapps.dll 2017-07-12 00:10 - 2017-03-04 08:16 - 000584192 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2017-07-12 00:10 - 2017-03-04 08:15 - 001078784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll 2017-07-12 00:10 - 2017-03-04 08:14 - 000279552 _____ (Microsoft Corporation) C:\windows\system32\PlayToReceiver.dll 2017-07-12 00:10 - 2017-03-04 08:02 - 002138112 _____ (Microsoft Corporation) C:\windows\SysWOW64\InputService.dll 2017-07-12 00:09 - 2017-07-07 08:49 - 000115200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys 2017-07-12 00:09 - 2017-07-07 08:47 - 000201728 _____ (Microsoft Corporation) C:\windows\system32\ScDeviceEnum.dll 2017-07-12 00:09 - 2017-07-07 08:46 - 000052224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys 2017-07-12 00:09 - 2017-07-07 08:44 - 000193536 _____ (Microsoft Corporation) C:\windows\system32\certprop.dll 2017-07-12 00:09 - 2017-07-07 08:42 - 000352256 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll 2017-07-12 00:09 - 2017-07-07 08:36 - 000369664 _____ (Microsoft Corporation) C:\windows\system32\msinfo32.exe 2017-07-12 00:09 - 2017-07-07 08:29 - 000932864 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2017-07-12 00:09 - 2017-07-07 08:28 - 000927744 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll 2017-07-12 00:09 - 2017-07-07 08:25 - 004708864 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll 2017-07-12 00:09 - 2017-07-07 08:24 - 005388800 _____ (Microsoft) C:\windows\system32\dbgeng.dll 2017-07-12 00:09 - 2017-07-07 08:24 - 002217472 _____ (Microsoft Corporation) C:\windows\system32\OpcServices.dll 2017-07-12 00:09 - 2017-06-21 09:56 - 001405280 _____ (Microsoft Corporation) C:\windows\system32\AppVEntSubsystemController.dll 2017-07-12 00:09 - 2017-06-21 09:55 - 002170720 _____ (Microsoft Corporation) C:\windows\system32\AppVEntSubsystems64.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 001669984 _____ (Microsoft Corporation) C:\windows\system32\AppVIntegration.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000822624 _____ (Microsoft Corporation) C:\windows\system32\AppVClient.exe 2017-07-12 00:09 - 2017-06-21 09:54 - 000813408 _____ (Microsoft Corporation) C:\windows\system32\AppVEntStreamingManager.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000758624 _____ (Microsoft Corporation) C:\windows\system32\AppVOrchestration.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000704352 _____ (Microsoft Corporation) C:\windows\system32\AppVEntVirtualization.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000696160 _____ (Microsoft Corporation) C:\windows\system32\AppVPublishing.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000565088 _____ (Microsoft Corporation) C:\windows\system32\AppVCatalog.dll 2017-07-12 00:09 - 2017-06-21 09:54 - 000406368 _____ (Microsoft Corporation) C:\windows\system32\AppVScripting.dll 2017-07-12 00:09 - 2017-06-21 09:51 - 000434528 _____ (Microsoft Corporation) C:\windows\system32\hal.dll 2017-07-12 00:09 - 2017-06-21 09:50 - 000126304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mup.sys 2017-07-12 00:09 - 2017-06-21 09:48 - 002681200 _____ C:\windows\system32\CoreUIComponents.dll 2017-07-12 00:09 - 2017-06-21 09:47 - 000764392 _____ (Microsoft Corporation) C:\windows\system32\CoreMessaging.dll 2017-07-12 00:09 - 2017-06-21 09:40 - 001069720 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll 2017-07-12 00:09 - 2017-06-21 09:40 - 000224096 _____ (Microsoft Corporation) C:\windows\system32\ifsutil.dll 2017-07-12 00:09 - 2017-06-21 09:38 - 001738560 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2017-07-12 00:09 - 2017-06-21 09:37 - 001369240 _____ (Microsoft Corporation) C:\windows\system32\dcomp.dll 2017-07-12 00:09 - 2017-06-21 09:37 - 001157008 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll 2017-07-12 00:09 - 2017-06-21 09:35 - 002915704 _____ (Microsoft Corporation) C:\windows\system32\combase.dll 2017-07-12 00:09 - 2017-06-21 09:35 - 001267512 _____ (Microsoft Corporation) C:\windows\system32\WinTypes.dll 2017-07-12 00:09 - 2017-06-21 09:03 - 000167936 _____ (Microsoft Corporation) C:\windows\system32\uudf.dll 2017-07-12 00:09 - 2017-06-21 09:02 - 000124416 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.SystemManagement.dll 2017-07-12 00:09 - 2017-06-21 09:01 - 000156160 _____ (Microsoft Corporation) C:\windows\system32\Family.Client.dll 2017-07-12 00:09 - 2017-06-21 09:01 - 000108032 _____ (Microsoft Corporation) C:\windows\system32\Family.Authentication.dll 2017-07-12 00:09 - 2017-06-21 09:01 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\snmptrap.exe 2017-07-12 00:09 - 2017-06-21 09:00 - 000259072 _____ (Microsoft Corporation) C:\windows\system32\Family.SyncEngine.dll 2017-07-12 00:09 - 2017-06-21 09:00 - 000224256 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_SignInOptions.dll 2017-07-12 00:09 - 2017-06-21 09:00 - 000193536 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.WiFi.dll 2017-07-12 00:09 - 2017-06-21 09:00 - 000148480 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Profile.RetailInfo.dll 2017-07-12 00:09 - 2017-06-21 09:00 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.UserDeviceAssociation.dll 2017-07-12 00:09 - 2017-06-21 09:00 - 000073216 _____ (Microsoft Corporation) C:\windows\system32\Windows.StateRepositoryBroker.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000196096 _____ (Microsoft Corporation) C:\windows\system32\UserDeviceRegistration.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000182272 _____ (Microsoft Corporation) C:\windows\system32\DeviceDirectoryClient.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000136192 _____ (Microsoft Corporation) C:\windows\system32\sendmail.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000122880 _____ (Microsoft Corporation) C:\windows\system32\Windows.StateRepositoryClient.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000101888 _____ (Microsoft Corporation) C:\windows\system32\UserDeviceRegistration.Ngc.dll 2017-07-12 00:09 - 2017-06-21 08:59 - 000082944 _____ (Microsoft Corporation) C:\windows\system32\KdsCli.dll 2017-07-12 00:09 - 2017-06-21 08:58 - 000547840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.Input.dll 2017-07-12 00:09 - 2017-06-21 08:58 - 000257024 _____ (Microsoft Corporation) C:\windows\system32\CloudDomainJoinDataModelServer.dll 2017-07-12 00:09 - 2017-06-21 08:58 - 000224768 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll 2017-07-12 00:09 - 2017-06-21 08:58 - 000186368 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Radios.dll 2017-07-12 00:09 - 2017-06-21 08:58 - 000144896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys 2017-07-12 00:09 - 2017-06-21 08:57 - 000157696 _____ (Microsoft Corporation) C:\windows\system32\XamlTileRender.dll 2017-07-12 00:09 - 2017-06-21 08:57 - 000087552 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll 2017-07-12 00:09 - 2017-06-21 08:56 - 000852480 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Import.dll 2017-07-12 00:09 - 2017-06-21 08:56 - 000324608 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.LockScreen.dll 2017-07-12 00:09 - 2017-06-21 08:56 - 000267264 _____ (Microsoft Corporation) C:\windows\system32\vaultcli.dll 2017-07-12 00:09 - 2017-06-21 08:55 - 000407552 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Management.dll 2017-07-12 00:09 - 2017-06-21 08:54 - 000247808 _____ (Microsoft Corporation) C:\windows\system32\ExecModelClient.dll 2017-07-12 00:09 - 2017-06-21 08:54 - 000168960 _____ (Microsoft Corporation) C:\windows\system32\easwrt.dll 2017-07-12 00:09 - 2017-06-21 08:53 - 000339968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.dll 2017-07-12 00:09 - 2017-06-21 08:53 - 000329728 _____ (Microsoft Corporation) C:\windows\system32\deviceaccess.dll 2017-07-12 00:09 - 2017-06-21 08:52 - 017198592 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2017-07-12 00:09 - 2017-06-21 08:52 - 000896512 _____ (Microsoft Corporation) C:\windows\system32\Windows.AccountsControl.dll 2017-07-12 00:09 - 2017-06-21 08:52 - 000560128 _____ (Microsoft Corporation) C:\windows\system32\AppReadiness.dll 2017-07-12 00:09 - 2017-06-21 08:51 - 000634368 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll 2017-07-12 00:09 - 2017-06-21 08:51 - 000410112 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentClient.dll 2017-07-12 00:09 - 2017-06-21 08:50 - 001054208 _____ (Microsoft Corporation) C:\windows\system32\qmgr.dll 2017-07-12 00:09 - 2017-06-21 08:49 - 001913856 _____ (Microsoft Corporation) C:\windows\system32\wsp_fs.dll 2017-07-12 00:09 - 2017-06-21 08:49 - 001584128 _____ (Microsoft Corporation) C:\windows\system32\wsp_health.dll 2017-07-12 00:09 - 2017-06-21 08:48 - 000112640 _____ (Microsoft Corporation) C:\windows\system32\uexfat.dll 2017-07-12 00:09 - 2017-06-21 08:47 - 000152064 _____ (Microsoft Corporation) C:\windows\system32\ufat.dll 2017-07-12 00:09 - 2017-06-21 08:47 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\fdProxy.dll 2017-07-12 00:09 - 2017-06-21 08:46 - 000516608 _____ (Microsoft Corporation) C:\windows\system32\uReFSv1.dll 2017-07-12 00:09 - 2017-06-21 08:46 - 000039424 _____ (Microsoft Corporation) C:\windows\system32\cnvfat.dll 2017-07-12 00:09 - 2017-06-21 08:43 - 000961536 _____ (Microsoft Corporation) C:\windows\system32\imapi2fs.dll 2017-07-12 00:09 - 2017-06-21 08:43 - 000130560 _____ (Microsoft Corporation) C:\windows\system32\SpaceAgent.exe 2017-07-12 00:09 - 2017-06-21 08:42 - 000981504 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.OnlineId.dll 2017-07-12 00:09 - 2017-06-21 08:42 - 000139776 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Devices.dll 2017-07-12 00:09 - 2017-06-21 08:42 - 000079360 _____ (Microsoft Corporation) C:\windows\system32\LocationFrameworkInternalPS.dll 2017-07-12 00:09 - 2017-06-21 08:41 - 001359872 _____ (Microsoft Corporation) C:\windows\system32\SharedStartModel.dll 2017-07-12 00:09 - 2017-06-21 08:41 - 001021440 _____ (Microsoft Corporation) C:\windows\system32\usermgr.dll 2017-07-12 00:09 - 2017-06-21 08:41 - 000460800 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Midi.dll 2017-07-12 00:09 - 2017-06-21 08:40 - 004474368 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_47.dll 2017-07-12 00:09 - 2017-06-21 08:40 - 001586176 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll 2017-07-12 00:09 - 2017-06-21 08:40 - 001421824 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe 2017-07-12 00:09 - 2017-06-21 08:40 - 000376832 _____ (Microsoft Corporation) C:\windows\system32\CryptoWinRT.dll 2017-07-12 00:09 - 2017-06-21 08:39 - 000971264 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll 2017-07-12 00:09 - 2017-06-21 08:39 - 000673792 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe 2017-07-12 00:09 - 2017-06-21 08:38 - 005611008 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll 2017-07-12 00:09 - 2017-06-21 08:36 - 000881152 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.dll 2017-07-12 00:09 - 2017-06-21 08:36 - 000180224 _____ (Microsoft Corporation) C:\windows\system32\enrollmentapi.dll 2017-07-12 00:09 - 2017-06-21 08:34 - 000035328 _____ (Microsoft Corporation) C:\windows\system32\spaceman.exe 2017-07-12 00:09 - 2017-03-04 08:27 - 000391168 _____ (Microsoft Corporation) C:\windows\system32\oleacc.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-08-09 23:54 - 2016-11-17 00:14 - 000000000 ____D C:\windows\system32\SleepStudy 2017-08-09 20:51 - 2016-12-14 20:33 - 000000000 ____D C:\Users\*****\AppData\Local\ClassicShell 2017-08-09 20:11 - 2016-07-16 08:04 - 000032768 _____ C:\windows\system32\config\ELAM 2017-08-09 20:09 - 2016-11-16 15:21 - 004607702 _____ C:\windows\system32\PerfStringBackup.INI 2017-08-09 20:09 - 2016-11-15 14:30 - 002260730 _____ C:\windows\system32\perfh007.dat 2017-08-09 20:09 - 2016-11-15 14:30 - 000584670 _____ C:\windows\system32\perfc007.dat 2017-08-09 20:06 - 2016-12-14 17:40 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla 2017-08-09 20:05 - 2017-05-28 21:47 - 000000082 _____ C:\windows\SysWOW64\winsevr.dat 2017-08-09 20:05 - 2017-05-28 21:47 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper 2017-08-09 20:05 - 2016-12-14 20:03 - 000253856 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2017-08-09 20:05 - 2016-12-13 14:43 - 000000000 __SHD C:\Users\*****\IntelGraphicsProfiles 2017-08-09 20:05 - 2016-12-13 14:43 - 000000000 ____D C:\Users\***** 2017-08-09 20:05 - 2016-12-13 10:39 - 000000180 _____ C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-08-09 20:05 - 2016-11-17 00:15 - 000000006 ____H C:\windows\Tasks\SA.DAT 2017-08-09 20:05 - 2016-07-16 08:04 - 000524288 _____ C:\windows\system32\config\BBI 2017-08-09 20:04 - 2016-12-14 19:40 - 000000008 __RSH C:\ProgramData\ntuser.pol 2017-08-09 18:34 - 2016-11-16 15:14 - 000000000 ____D C:\windows\Panther 2017-08-09 18:27 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps 2017-08-09 18:27 - 2016-07-16 13:47 - 000000000 ____D C:\windows\AppReadiness 2017-08-09 18:23 - 2016-12-14 16:00 - 000004184 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{8405A37D-04D1-4F45-B2FB-4C74185DB9E1} 2017-08-09 18:15 - 2016-12-14 16:05 - 000004654 _____ C:\windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-08-09 18:15 - 2016-11-16 15:17 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-08-09 18:15 - 2016-07-16 13:47 - 000000000 ____D C:\windows\SysWOW64\Macromed 2017-08-09 18:15 - 2016-07-16 13:47 - 000000000 ____D C:\windows\system32\Macromed 2017-08-09 18:14 - 2016-11-17 00:14 - 000346664 _____ C:\windows\system32\FNTCACHE.DAT 2017-08-09 18:14 - 2016-07-16 13:45 - 000000000 ____D C:\windows\INF 2017-08-09 02:59 - 2016-07-16 16:29 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ___RD C:\windows\ImmersiveControlPanel 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ___RD C:\Program Files\Windows Defender 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\windows\system32\oobe 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\windows\ShellExperiences 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\windows\Provisioning 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\windows\PolicyDefinitions 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\windows\bcastdvr 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Common Files\System 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-08-09 02:59 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2017-08-09 02:55 - 2016-12-17 14:56 - 000000000 ____D C:\Users\*****\Arbeit 2017-08-09 00:08 - 2016-07-16 13:36 - 000000000 ____D C:\windows\CbsTemp 2017-08-09 00:02 - 2016-12-14 15:45 - 000000000 ____D C:\windows\system32\MRT 2017-08-09 00:01 - 2016-12-14 15:45 - 140394280 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe 2017-08-08 23:24 - 2016-11-15 14:24 - 001081856 _____ (Microsoft Corporation) C:\windows\system32\Chakradiag.dll 2017-08-08 23:24 - 2016-11-15 14:24 - 000057400 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe 2017-08-08 21:11 - 2016-11-30 10:23 - 000004562 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task 2017-08-08 21:11 - 2016-11-30 10:23 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-08-08 06:15 - 2017-05-28 22:19 - 000001024 ____H C:\SYSTAG.BIN 2017-08-08 06:15 - 2017-05-28 21:47 - 000000000 ____D C:\ProgramData\AomeiBR 2017-08-07 01:53 - 2017-04-10 01:01 - 000000000 ____D C:\Users\*****\Documents\Eigene Scans 2017-08-07 01:47 - 2017-01-22 02:11 - 000000000 ____D C:\Users\*****\PC_Probleme 2017-08-06 02:58 - 2016-12-17 14:58 - 000000000 ____D C:\Users\*****\Privat 2017-08-04 22:50 - 2016-12-14 19:05 - 000000000 ____D C:\Program Files (x86)\Dropbox 2017-07-30 19:23 - 2016-12-17 14:53 - 000000000 ____D C:\Users\*****\Bewerbung u_a 2017-07-29 01:41 - 2016-12-14 20:03 - 000093600 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys 2017-07-27 21:05 - 2017-01-24 04:17 - 000000000 ___RD C:\Users\*****\OneDrive 2017-07-27 21:05 - 2016-12-13 14:45 - 000002411 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-07-16 17:11 - 2016-12-14 17:43 - 000000000 ____D C:\Users\*****\AppData\Roaming\vlc 2017-07-16 16:55 - 2017-01-29 21:48 - 000000000 ____D C:\Users\*****\AppData\Roaming\dvdcss 2017-07-15 10:29 - 2016-12-14 20:03 - 000188352 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMChameleon.sys 2017-07-15 10:29 - 2016-12-14 20:03 - 000045472 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys 2017-07-15 05:55 - 2016-12-14 20:03 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-07-15 05:55 - 2016-12-14 20:03 - 000000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2017-07-15 05:50 - 2016-12-17 14:56 - 000000000 ____D C:\Users\*****\Briefe 2017-07-14 13:44 - 2016-07-16 13:47 - 000000000 ____D C:\windows\rescache 2017-07-14 02:12 - 2016-12-14 16:01 - 000000000 ____D C:\Users\*****\AppData\Local\Adobe 2017-07-14 02:09 - 2016-12-14 19:05 - 000000000 ____D C:\Users\*****\AppData\Local\Dropbox 2017-07-12 04:47 - 2016-07-16 13:47 - 000000000 ____D C:\windows\system32\appraiser 2017-07-11 21:23 - 2016-11-15 14:24 - 001790464 _____ (Microsoft Corporation) C:\windows\system32\LocationFramework.dll 2017-07-11 21:23 - 2016-11-15 14:24 - 000141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\dialclient.dll 2017-07-11 21:23 - 2016-11-15 14:23 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\AuthBroker.dll 2017-07-11 21:23 - 2016-11-15 14:23 - 000134656 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Energy.dll 2017-07-11 21:23 - 2016-11-15 14:23 - 000092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2017-07-11 21:23 - 2016-07-16 13:43 - 000157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\enrollmentapi.dll ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-12-14 19:11 - 2016-12-14 19:11 - 000000779 _____ () C:\Users\*****\AppData\Roaming\gdscan.log 2017-05-21 22:41 - 2017-05-21 22:41 - 000004813 _____ () C:\Users\*****\AppData\Local\recently-used.xbel 2016-11-30 10:24 - 2016-11-30 10:24 - 000000000 ____H () C:\ProgramData\DP45977C.lfl 2016-12-20 00:38 - 2017-04-10 00:49 - 000007194 _____ () C:\ProgramData\hpzinstall.log 2017-05-28 14:06 - 2017-05-28 14:06 - 000001534 _____ () C:\ProgramData\ss.ini Einige Dateien in TEMP: ==================== 2017-06-24 16:37 - 2017-06-24 16:38 - 032100680 _____ () C:\Users\*****\AppData\Local\Temp\vlc-2.2.6-win64.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\windows\system32\winlogon.exe => Datei ist digital signiert C:\windows\system32\wininit.exe => Datei ist digital signiert C:\windows\explorer.exe => Datei ist digital signiert C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\windows\system32\svchost.exe => Datei ist digital signiert C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\windows\system32\services.exe => Datei ist digital signiert C:\windows\system32\User32.dll => Datei ist digital signiert C:\windows\SysWOW64\User32.dll => Datei ist digital signiert C:\windows\system32\userinit.exe => Datei ist digital signiert C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\windows\system32\rpcss.dll => Datei ist digital signiert C:\windows\system32\dnsapi.dll => Datei ist digital signiert C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-08-03 00:49 ==================== Ende von FRST.txt ============================ |
![]() |
Themen zu Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1) |
.dll, administratorrechte, adobe flash player, auftrag, autorun, blockiert, defender, explorer, externe festplatte, festplatte, firefox, flash player, frage, gdata, gen:variant.razy.203163, homepage, infizierte, mozilla, opera, programm, prozesse, realtek, registry, security, services.exe, trojan.agent.spy, trojan.generickd.5624497, virus, windows, windowsapps |