Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Blauer Bildschirm nach dem Anmelden auf dem Laptop. Desktop erscheint nicht. (https://www.trojaner-board.de/170750-blauer-bildschirm-anmelden-laptop-desktop-erscheint.html)

salvi1990 06.09.2015 12:43
Blauer Bildschirm nach dem Anmelden auf dem Laptop. Desktop erscheint nicht.
 
Hallo Zusammen

Kann seit gestern mein Laptop nicht mehr starten. Nach dem Anmelden erhalte ich nur ein blauer Bildschirm. Ich komme zwar in den Task Manager und kann dort auch explorer.exe starten, jedoch sehe ich kein Desktop und nichts.

Ich habe bereits Ccleaner gestartet und aufgeräumt. Ich habe auch schon FRST gestartet und mir ein LOG machen lassen. Wie kann ich nun aus diesem LOG eine "Aufräum-Datei" erstellen?
Das LOG findet ihr im Anhang.

Zur Info... Neu aufsetzen wäre die letzte Lösung. Natürlich könnte ich die Dateien einfach wegkopieren, mir wäre lieber, wenn nicht.

Danke vielmals für eure Hilfe.:dankeschoen:

schrauber 06.09.2015 13:09
Hi,

Logs bitte immer in codetags in den Thread posten :)

salvi1990 06.09.2015 13:17
Sorry :crazy:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-09-2015
Ran by SYSTEM on MININT-VJOCKKM (06-09-2015 13:23:54)
Running from E:\
Platform: Windows 7 Enterprise Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [7173632 2013-09-10] (Broadcom Corporation)
HKLM\...\Run: [RemotelyAnywhere GUI] => C:\Program Files (x86)\RemotelyAnywhere\x64\RAGui.exe [58456 2013-02-13] (LogMeIn, Inc.)
HKLM-x32\...\Run: [StartColumbus] => C:\Windows\columbus.exe [17555456 2014-06-16] (Brainware)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [184704 2012-04-26] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-05-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [OfficeScanNT Monitor] => C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe [2295992 2013-07-24] (Trend Micro Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\RunOnce: [DCERegBootClean64] => C:\Windows\RegBootClean64.exe [240176 2015-09-04] (Trend Micro Inc.)
HKLM\...\Winlogon: [Userinit] C:\Program Files (x86)\RES Software\Workspace Manager\pwrinit.exe,C:\Windows\system32\userinit.exe,
HKLM\...\Winlogon: [Shell] C:\Program Files (x86)\RES Software\Workspace Manager\pwrstart.exe [67888 2014-12-10] (RES Software) <=== ATTENTION
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\roars\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [909696 2010-12-20] (Microsoft Corporation)
HKU\roars\...\Run: [OneDrive] => C:\Users\roars\AppData\Local\Microsoft\OneDrive\OneDrive.exe [404064 2015-08-19] (Microsoft Corporation)
HKU\roars\...\Run: [apphide] => C:\Program Files (x86)\baidu\pps.exe [77824 2015-08-31] ()
HKU\rode\...\RunOnce: [Adobe Speed Launcher] => 1430308781
HKU\sys_ars\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-19] (Piriform Ltd)
HKU\sys_ars\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[C1].txt [4647 2015-09-05] ()
Startup: C:\Users\roars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk [2015-04-20]
ShortcutTarget: AutoStarter.lnk ->  (No File)
Startup: C:\Users\roars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk [2013-09-11]
ShortcutTarget: FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft)
Startup: C:\Users\roars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2013-09-11]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk *  bsmain

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 bwColumbus; C:\Windows\columbus.exe [17555456 2014-06-16] (Brainware)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
S3 edsservice; C:\Program Files (x86)\ESTOS\ProCall 4\EDeskShareService.exe [696120 2013-05-22] (ESTOS GmbH)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-03-28] (Intel Corporation)
S2 LMIGuardianSvc; C:\Program Files (x86)\RemotelyAnywhere\x64\LMIGuardianSvc.exe [376192 2013-02-18] (LogMeIn, Inc.)
S2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [370368 2014-02-20] (Microsoft Corporation)
S2 ntrtscan; C:\Program Files (x86)\Trend Micro\OfficeScan Client\ntrtscan.exe [3404832 2013-09-17] (Trend Micro Inc.)
S2 RAMaint; C:\Program Files (x86)\RemotelyAnywhere\x64\RaMaint.exe [148864 2013-02-18] (LogMeIn, Inc.)
S2 RemotelyAnywhere; C:\Program Files (x86)\RemotelyAnywhere\x64\RemotelyAnywhere.exe [113600 2013-02-13] (LogMeIn, Inc.)
S2 RES; C:\Program Files (x86)\RES Software\Workspace Manager\svc\res.exe [1435952 2014-12-10] (RES Software)
S3 RESPESVC; C:\Program Files (x86)\RES Software\Workspace Manager\respesvc64.exe [48368 2014-12-10] (RES Software)
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2014-02-20] (Microsoft Corporation)
S3 TMBMServer; C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe [571928 2013-06-13] (Trend Micro Inc.)
S2 tmlisten; C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmlisten.exe [3442640 2013-07-23] (Trend Micro Inc.)
S3 TmProxy; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmProxy.exe [917016 2013-07-01] (Trend Micro Inc.)
S2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe [2507344 2013-10-15] (VMware, Inc.)
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
S2 WdsManPro; C:\ProgramData\iWdsManProi\WdsManPro.exe [709288 2015-09-04] (DTools LIMITED)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-08-19] (Microsoft Corporation)
S2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [5858304 2013-09-10] (Broadcom Corporation)
S2 WMCoreService; C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe [688024 2012-05-31] (Ericsson AB)
S2 wsnm; C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm.exe [474704 2013-11-01] (VMware, Inc.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
S3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
S3 h36wgps; C:\Windows\System32\DRIVERS\h36wgps64.sys [103184 2012-03-01] (Ericsson AB)
S1 HyperVM; C:\Windows\system32\drivers\hvm.sys [41784 2015-09-04] (Beijing Rising Information Technology Co., Ltd.)
S3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-08-24] (JMicron Technology Corp.)
S3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [419400 2011-10-05] (MCCI Corporation)
S3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [430664 2011-10-05] (MCCI Corporation)
S3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [19528 2011-10-05] (MCCI Corporation)
S3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [483400 2011-10-05] (MCCI Corporation)
S2 RAInfo; C:\Program Files (x86)\RemotelyAnywhere\x64\RaInfo.sys [16056 2013-02-13] (LogMeIn, Inc.)
S3 ramirr; C:\Windows\System32\DRIVERS\ramirr.sys [11576 2013-02-13] (LogMeIn, Inc.)
S4 RARfsClientNP; no ImagePath
S2 RARfsDriver; C:\Windows\system32\drivers\RARfsDriver.sys [72232 2013-02-13] (LogMeIn, Inc.)
S2 RES AppGuard; C:\Windows\SysWow64\DRIVERS\appguard_amd64.sys [48880 2014-12-10] (RES Software)
S2 RES ImgGuard; C:\Windows\SysWow64\DRIVERS\imgguard_amd64.sys [40688 2014-12-10] (RES Software)
S2 RES NetGuard; C:\Windows\SysWow64\DRIVERS\netguard_amd64.sys [37616 2014-12-10] (RES Software)
S2 RES RegGuard; C:\Windows\SysWow64\DRIVERS\regguard_amd64.sys [39152 2014-12-10] (RES Software)
S4 RsFx0300; C:\Windows\System32\DRIVERS\RsFx0300.sys [247488 2014-02-20] (Microsoft Corporation)
S1 rsutils; C:\Windows\System32\DRIVERS\rsutils.sys [71760 2015-09-04] (Beijing Rising Information Technology Co., Ltd.)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1864328 2012-10-03] ()
S0 sysmon; C:\Windows\System32\DRIVERS\sysmon.sys [119168 2015-09-04] (Beijing Rising Information Technology Co., Ltd.)
S2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [85376 2013-06-13] (Trend Micro Inc.)
S1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173992 2013-06-26] (Trend Micro Inc.)
S2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [65336 2013-06-13] (Trend Micro Inc.)
S2 TmFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmXPFlt.sys [351032 2014-08-30] (Trend Micro Inc.)
S2 TmPreFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPreFlt.sys [44856 2014-08-30] (Trend Micro Inc.)
S1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [109080 2013-06-18] (Trend Micro Inc.)
S2 VSApiNt; C:\Program Files (x86)\Trend Micro\OfficeScan Client\VSApiNt.sys [2316600 2014-08-30] (Trend Micro Inc.)
S3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [279312 2012-04-27] (Ericsson AB)
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 radpms; system32\DRIVERS\radpms.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S3 vmwvusb; System32\Drivers\vmwvusb.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-06 03:08 - 2015-09-06 03:08 - 00000122 _____ C:\Windows\BWPatchDeploy.log
2015-09-06 03:06 - 2015-09-06 03:06 - 00000067 _____ C:\Windows\TMFilter.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00448816 _____ C:\Windows\System32\FNTCACHE.DAT
2015-09-06 03:05 - 2015-09-06 03:05 - 00000056 _____ C:\Windows\setupact.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\setuperr.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\Brainware_4.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\Brainware_3.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\Brainware_2.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\Brainware_1.log
2015-09-06 03:05 - 2015-09-06 03:05 - 00000000 _____ C:\Windows\Brainware_0.log
2015-09-06 02:58 - 2015-09-06 02:58 - 00616130 _____ C:\Users\sys_ars\Desktop\cc_20150906_125820.reg
2015-09-06 02:51 - 2015-09-06 02:51 - 00000000 ____D C:\Users\sys_ars\AppData\Roaming\Adobe
2015-09-06 02:50 - 2015-09-06 02:50 - 00002796 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-09-06 02:49 - 2015-09-06 02:50 - 00000000 ____D C:\Program Files\CCleaner
2015-09-06 02:49 - 2015-09-06 02:49 - 00000829 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-09-05 06:57 - 2015-09-05 06:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-05 06:56 - 2015-09-05 06:56 - 00000000 ___RD C:\Users\sys_ars\OneDrive
2015-09-05 06:31 - 2015-09-06 13:23 - 00000000 ____D C:\FRST
2015-09-05 06:27 - 2015-09-05 06:29 - 00000000 ____D C:\AdwCleaner
2015-09-05 06:17 - 2015-09-06 02:57 - 00000000 ____D C:\Users\sys_ars\AppData\Roaming\Notepad++
2015-09-05 01:55 - 2015-09-05 06:56 - 00000000 ____D C:\users\sys_ars
2015-09-05 01:55 - 2015-09-05 01:55 - 00018180 __RSH C:\Users\sys_ars\ntuser.pol
2015-09-05 01:55 - 2015-09-05 01:55 - 00000020 ___SH C:\Users\sys_ars\ntuser.ini
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Vorlagen
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Startmenü
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Netzwerkumgebung
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Lokale Einstellungen
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Eigene Dateien
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Druckumgebung
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Documents\Eigene Musik
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Documents\Eigene Bilder
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\AppData\Local\Verlauf
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\AppData\Local\Anwendungsdaten
2015-09-05 01:55 - 2015-09-05 01:55 - 00000000 _SHDL C:\Users\sys_ars\Anwendungsdaten
2015-09-05 01:55 - 2015-08-24 21:04 - 00000000 ____D C:\Users\sys_ars\AppData\Roaming\Sun
2015-09-05 01:55 - 2013-09-10 23:39 - 00000000 ____D C:\Users\sys_ars\AppData\Local\Trend Micro
2015-09-05 01:55 - 2013-09-10 23:32 - 00000000 ____D C:\Users\sys_ars\AppData\Local\VMware
2015-09-05 01:55 - 2013-09-10 23:32 - 00000000 ____D C:\Users\sys_ars\AppData\Local\ESTOS
2015-09-05 01:55 - 2013-09-10 22:55 - 00000000 ____D C:\Users\sys_ars\AppData\Local\Microsoft Help
2015-09-05 01:55 - 2013-09-10 22:22 - 00000000 ____D C:\Users\sys_ars\AppData\Roaming\hpqLog
2015-09-05 01:49 - 2015-09-05 01:49 - 00035580 __RSH C:\Users\roars\ntuser.pol
2015-09-05 01:41 - 2015-09-05 01:41 - 00003148 _____ C:\Windows\System32\Tasks\{AB65B45A-E0D9-4BC9-B842-58CD5B3C2CAA}
2015-09-04 09:32 - 2015-09-04 09:29 - 00041784 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\System32\Drivers\hvm.sys
2015-09-04 07:35 - 2015-09-05 01:49 - 00000000 ___RD C:\RavBin
2015-09-04 07:35 - 2015-09-04 07:35 - 00000150 __RSH C:\rising.ini
2015-09-04 07:35 - 2015-09-04 07:35 - 00000134 _____ C:\Windows\SysWOW64\BsMain.ini
2015-09-04 07:35 - 2014-07-29 18:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\vpatch.dll
2015-09-04 07:35 - 2014-01-01 23:37 - 00325400 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\System32\ravext64.dll
2015-09-04 07:35 - 2013-12-29 23:33 - 00256280 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\ravext.dll
2015-09-04 07:35 - 2012-09-05 16:30 - 00240472 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\bsmain.exe
2015-09-04 07:34 - 2015-09-04 09:28 - 00119168 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\System32\Drivers\sysmon.sys
2015-09-04 07:34 - 2015-09-04 09:28 - 00071760 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\System32\Drivers\rsutils.sys
2015-09-04 07:34 - 2012-02-28 23:49 - 00011888 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\System32\Drivers\rsndisp.sys
2015-09-04 07:32 - 2015-09-04 07:34 - 00000000 ____D C:\Users\roars\AppData\Roaming\Tencent
2015-09-04 07:18 - 2015-09-04 07:18 - 00007436 _____ C:\Windows\RegBootClean64.CFG
2015-09-04 07:01 - 2015-09-04 07:01 - 00000000 ____D C:\Users\roars\AppData\Local\SysassistByHotWheel
2015-09-04 07:00 - 2015-09-05 01:40 - 00000000 ____D C:\Users\roars\AppData\Local\Unity
2015-09-04 07:00 - 2015-09-04 07:00 - 00000000 ____D C:\Users\roars\AppData\Roaming\IQIYI Video
2015-09-04 07:00 - 2015-09-04 07:00 - 00000000 ____D C:\Users\Public\QiYi
2015-09-04 06:59 - 2015-09-04 06:59 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-09-04 06:59 - 2015-09-04 06:59 - 00000000 ____D C:\ProgramData\iWdsManProi
2015-09-04 06:59 - 2015-09-04 06:59 - 00000000 ____D C:\Program Files (x86)\baidu
2015-09-04 06:57 - 2015-09-06 02:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2015-09-04 06:00 - 2015-09-04 06:00 - 00000000 ____D C:\swsetup
2015-08-31 21:27 - 2015-08-31 21:27 - 00000000 ____D C:\Users\roars\AppData\Roaming\Sun
2015-08-31 21:27 - 2015-08-31 21:27 - 00000000 ____D C:\Users\roars\.oracle_jre_usage
2015-08-25 00:46 - 2015-08-25 00:46 - 00005844 _____ C:\Users\roars\AppData\Local\axsysEN-GB-6.2.1000.8001.kti
2015-08-24 21:04 - 2015-08-24 21:04 - 00110688 _____ (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2015-08-24 21:04 - 2015-08-24 21:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Sun
2015-08-24 21:04 - 2015-08-24 21:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Sun
2015-08-23 20:51 - 2015-08-23 20:51 - 25191936 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-08-23 20:51 - 2015-08-23 20:51 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-23 20:51 - 2015-08-23 20:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-23 20:51 - 2015-08-23 20:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2015-08-23 20:48 - 2015-08-23 20:48 - 14177280 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-08-23 20:48 - 2015-08-23 20:48 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 03208192 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2015-08-23 20:47 - 2015-08-23 20:47 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 01648128 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 01180160 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00041984 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2015-08-23 20:47 - 2015-08-23 20:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 14451200 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 05923328 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 02885632 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 02427904 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-08-23 20:46 - 2015-08-23 20:46 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-23 20:46 - 2015-08-23 20:46 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 01545728 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2015-08-23 20:46 - 2015-08-23 20:46 - 00816640 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00801280 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00720384 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-08-23 20:46 - 2015-08-23 20:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00584192 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00417792 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2015-08-23 20:46 - 2015-08-23 20:46 - 00389840 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-23 20:46 - 2015-08-23 20:46 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00260096 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2015-08-23 20:46 - 2015-08-23 20:46 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-23 20:46 - 2015-08-23 20:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2015-08-23 20:46 - 2015-08-23 20:46 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-23 20:46 - 2015-08-23 20:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 03722752 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 02004992 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 01887232 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2015-08-23 20:44 - 2015-08-23 20:44 - 00124624 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 20:44 - 2015-08-23 20:44 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 05568960 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 01743360 _____ (Microsoft Corporation) C:\Windows\System32\sysmain.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01730496 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01216512 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00729088 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00159232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00094656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mountmgr.sys
2015-08-23 20:42 - 2015-08-23 20:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\msmmsp.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-23 20:42 - 2015-08-23 20:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2015-08-23 20:42 - 2015-08-23 20:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-23 20:39 - 2015-08-23 20:39 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\basesrv.dll
2015-08-23 20:38 - 2015-08-23 20:38 - 00193536 _____ (Microsoft Corporation) C:\Windows\System32\notepad.exe
2015-08-23 20:38 - 2015-08-23 20:38 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-23 20:38 - 2015-08-23 20:38 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-06 03:13 - 2013-09-10 22:09 - 00166742 _____ C:\Windows\Brainware.Log
2015-09-06 03:12 - 2011-11-10 01:19 - 00935650 _____ C:\Windows\System32\perfh010.dat
2015-09-06 03:12 - 2011-11-10 01:19 - 00224244 _____ C:\Windows\System32\perfc010.dat
2015-09-06 03:12 - 2011-11-10 01:11 - 00941320 _____ C:\Windows\System32\perfh00C.dat
2015-09-06 03:12 - 2011-11-10 01:11 - 00226978 _____ C:\Windows\System32\perfc00C.dat
2015-09-06 03:12 - 2011-11-10 01:04 - 00903748 _____ C:\Windows\System32\perfh007.dat
2015-09-06 03:12 - 2011-11-10 01:04 - 00227146 _____ C:\Windows\System32\perfc007.dat
2015-09-06 03:12 - 2009-07-13 21:13 - 04531516 _____ C:\Windows\System32\PerfStringBackup.INI
2015-09-06 03:12 - 2009-07-13 20:45 - 00019104 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-06 03:12 - 2009-07-13 20:45 - 00019104 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-06 03:08 - 2013-09-10 22:12 - 01379240 _____ C:\Windows\WindowsUpdate.log
2015-09-06 03:07 - 2013-09-10 23:39 - 11240760 _____ C:\Windows\SysWOW64\TmInstall.log
2015-09-06 03:07 - 2013-09-10 23:39 - 06034312 _____ C:\Windows\System32\TmInstall.log
2015-09-06 03:05 - 2013-09-10 22:30 - 00000000 ____D C:\Windows\Columbus Debug Files
2015-09-06 03:05 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-06 02:57 - 2013-09-11 08:06 - 00000000 ____D C:\Windows\Panther
2015-09-06 02:56 - 2013-12-27 22:04 - 00000000 ____D C:\Windows\Minidump
2015-09-06 02:52 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\L2Schemas
2015-09-06 02:35 - 2013-09-10 23:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-06 02:26 - 2015-01-22 22:13 - 00000000 ____D C:\ProgramData\RemotelyAnywhere
2015-09-05 06:46 - 2009-07-13 19:20 - 00000000 ___HD C:\Windows\System32\GroupPolicy
2015-09-05 06:46 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-09-05 01:55 - 2013-09-10 22:29 - 00000128 _____ C:\Windows\System32\config\netlogon.ftl
2015-09-05 01:53 - 2013-09-10 22:32 - 00000000 ____D C:\Windows\Columbus Log Files
2015-09-05 01:49 - 2013-09-11 00:56 - 00000000 ____D C:\users\roars
2015-09-05 01:49 - 2013-09-10 23:44 - 00010000 _____ C:\Windows\cfgall.ini
2015-09-05 01:33 - 2015-03-20 07:18 - 00000000 ____D C:\OneDrive
2015-09-05 00:54 - 2013-09-11 00:57 - 00000000 ____D C:\Users\roars\AppData\Roaming\Columbus
2015-09-04 07:35 - 2013-09-18 06:06 - 00129424 _____ C:\Users\roars\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-04 07:18 - 2014-11-24 22:01 - 00240176 _____ (Trend Micro Inc.) C:\Windows\RegBootClean64.exe
2015-09-04 07:00 - 2013-09-10 22:30 - 00029466 __RSH C:\ProgramData\ntuser.pol
2015-09-04 05:01 - 2013-09-11 04:02 - 00000000 ____D C:\Users\roars\AppData\Roaming\VMware
2015-09-03 23:23 - 2013-10-24 21:40 - 00007563 _____ C:\Users\roars\AppData\Local\RAExpertHistory.xml
2015-09-02 00:16 - 2014-09-30 22:07 - 00000000 ____D C:\Users\roars\AppData\Roaming\TeamViewer
2015-09-01 04:16 - 2015-01-20 07:18 - 00051712 _____ C:\Users\roars\java0.log
2015-09-01 04:16 - 2015-01-20 07:18 - 00003850 _____ C:\Users\roars\.ganttproject
2015-09-01 04:16 - 2015-01-20 06:40 - 00001774 _____ C:\Users\roars\ganttproject.log
2015-08-31 03:32 - 2013-09-10 23:04 - 00000000 ____D C:\Software
2015-08-30 20:48 - 2014-07-17 01:39 - 04364467 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT42.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 01099373 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT45.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00837271 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT41.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00524561 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT44.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00507367 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT43.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00272437 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT40.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00020679 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT36.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00016797 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT35.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00003291 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT15.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00000687 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT66.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00000473 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT113.auc
2015-08-30 20:48 - 2014-07-17 01:39 - 00000021 _____ C:\Users\roars\AppData\Local\ax_GUI_{1076109D-1FEF-4204-A761-567A0355EA64}_CRT39.auc
2015-08-26 21:33 - 2013-11-11 10:06 - 00000000 ____D C:\temp
2015-08-26 20:56 - 2013-09-10 23:31 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2015-08-25 21:01 - 2013-09-10 23:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-25 02:27 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2015-08-24 21:05 - 2015-06-02 20:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-24 21:05 - 2014-04-23 05:15 - 00000000 ____D C:\Program Files\Java
2015-08-24 21:05 - 2013-09-10 22:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-08-24 21:05 - 2013-09-10 22:47 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2015-08-24 21:05 - 2013-09-10 22:11 - 00000000 ____D C:\Windows\Cache
2015-08-24 21:01 - 2014-11-13 07:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-24 21:01 - 2014-11-13 07:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-23 20:33 - 2015-01-27 22:06 - 00000228 _____ C:\Windows\C
2015-08-23 20:33 - 2013-09-10 23:48 - 00004854 _____ C:\Windows\coladmin.cfg
2015-08-11 23:35 - 2013-09-10 23:48 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 23:35 - 2013-09-10 23:48 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 23:35 - 2013-09-10 22:47 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================

Restore point date: 2015-08-20 02:53:06
Restore point date: 2015-08-23 20:38:39
Restore point date: 2015-08-23 20:39:07
Restore point date: 2015-08-23 22:32:36
Restore point date: 2015-08-31 00:28:54
Restore point date: 2015-09-05 06:46:55
Restore point date: 2015-09-06 03:00:04

==================== Memory info ===========================

Percentage of memory in use: 7%
Total physical RAM: 16265.51 MB
Available physical RAM: 15040.99 MB
Total Virtual: 16263.71 MB
Available Virtual: 15042.78 MB

==================== Drives ================================

Drive c: (N7RO062) (Fixed) (Total:223.57 GB) (Free:119.47 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: (Bootfähig Windows 8 Pro) (Removable) (Total:7.5 GB) (Free:3.76 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 6974E775)
Partition 1: (Active) - (Size=223.6 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 02162085)
Partition 1: (Active) - (Size=7.5 GB) - (Type=07 NTFS)


LastRegBack: 2015-08-31 22:45

==================== End of FRST.txt ============================
--- --- ---

schrauber 07.09.2015 09:26
kommst Du gar nicht mehr auf den Desktop? Wenn möglich FRST bitte vom Desktop aus im normalen oder abgesicherten Modus.

salvi1990 07.09.2015 15:01
Hallo

Danke für Deine Antwort.

Ich habe mittlerweile mein Laptop neu aufgesetzt. Konnte nicht mehr warten.

Nein, ich kam nicht mehr auf meinen Desktop. Ich hatte nur einen blauen Bildschirm nach dem anmelden. Keine Taskleiste, keine Icons, gar nichts nur die Maus.
Ich konnte über CTRL+ALT+Delete den Task Manager starten und von dort aus den Explorer.

Das LOG hab ich durch "Computer reparieren" in der Eingabeauforderungsmaske erstellt.

Via Explorer hab ich mir meine wichtige Dateien auf den USB-Stick kopiert und dann halt alles neu aufgesetzt.

Danke trotzdem für deine Hilfe und einen schönen Tag wünsche ich Dir. :daumenhoc

schrauber 08.09.2015 07:18
ok :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:08 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19