Trojaner-Board - Werbetab-Virus

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Werbetab-Virus (https://www.trojaner-board.de/177318-werbetab-virus.html)

Sehr geehrtes Trojaner-Board-Team,

ich habe seit einigen Stunden scheinbar einen Virus, der meine Browser alle lahm zu legen scheint. Nach dem Überfliegen einiger Threads hier im Forum ist mir klar geworden, dass das Problem wohl recht häufig auftaucht, die Lösungen allerdings leider sehr individuell ausfallen. Von daher hoffe ich, dass ihr auch mir zur Seite stehen könnt.

Webseiten reagieren ständig nicht mehr und müssen wiederhergestellt werden und jeder Link den ich anklicke führt quasi zu einer endlosen Schleife an Werbetabs von Anbietern wie "DNS-Unlocker", "PCKeeper" oder "Reimage Repair". Dies ist in allen meinen Browsern gleich, sodass mir eine Installation von externer Software (die ich zur Behebung zu brauchen scheine...) auch fast unmöglich ist :daumenrunter:. Avast findet überhaupt nichts.

Bitte helft mir diesen Quatsch möglichst schnell wieder loszuwerden!

Vielen Dank im Voraus, mit freundlichen Grüßen

Jan

Hier mal die (zumeist) gewünschten Log-Dateien.

FRST: (Part 1)

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01

durchgeführt von Jan (Administrator) auf DESKTOP-D54262M (28-03-2016 22:18:13)

Gestartet von C:\Users\Jan\Downloads

Geladene Profile: Jan (Verfügbare Profile: Jan)

Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Edge)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\asww10mon.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\SpotifyCrashService.exe

(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-23] (AVAST Software)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify Web Helper] => C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-28] (Spotify Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify] => C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe [6805616 2016-03-28] (Spotify Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [149504 2015-07-10] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-05] (AVAST Software)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\Parameters: [NameServer] 82.163.143.171 82.163.142.173

Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [NameServer] 82.163.143.171 82.163.142.173

Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-05] (AVAST Software)

BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-05] (AVAST Software)

BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)

Toolbar: HKU\S-1-5-21-2281809953-3163866376-3614606004-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-16] [ist nicht signiert]

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]

FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF

FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-03-05]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-03-05]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-05]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-05] (AVAST Software)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4192344 2016-03-09] (INCA Internet Co., Ltd.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-05] (AVAST Software)

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-25] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-23] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-05] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-05] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-23] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-05] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-05] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-05] (AVAST Software)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2016-03-05] (Advanced Micro Devices)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-03-28 22:18 - 2016-03-28 22:18 - 00008502 _____ C:\Users\Jan\Downloads\FRST.txt

2016-03-28 22:17 - 2016-03-28 22:17 - 02374144 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe

2016-03-28 22:16 - 2016-03-28 22:16 - 02374144 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe

2016-03-28 22:12 - 2016-03-28 22:12 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_Jan_HistoryPrediction.bin

2016-03-28 21:36 - 2016-03-28 21:37 - 00000000 ____D C:\AdwCleaner

2016-03-28 21:36 - 2016-03-28 21:36 - 01538560 _____ C:\Users\Jan\Downloads\AdwCleaner_5.106.exe

2016-03-28 21:31 - 2016-03-28 22:16 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify

2016-03-28 21:31 - 2016-03-28 21:31 - 00001840 _____ C:\Users\Jan\Desktop\Spotify.lnk

2016-03-28 21:31 - 2016-03-28 21:31 - 00001826 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2016-03-28 21:31 - 2016-03-28 21:31 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify

2016-03-28 21:29 - 2016-03-28 21:31 - 00350936 _____ (Spotify Ltd) C:\Users\Jan\Downloads\SpotifySetup.exe

2016-03-28 21:23 - 2016-03-28 21:23 - 01475080 _____ C:\Users\Jan\Downloads\Spotify - CHIP-Installer.exe

2016-03-28 20:56 - 2016-03-28 20:55 - 05006864 _____ (AVAST Software) C:\Users\Jan\Downloads\Avast_Setup [1].exe

2016-03-28 20:55 - 2016-03-28 20:55 - 01006024 _____ (Cotuf ) C:\Users\Jan\Downloads\Avast_Setup.exe

2016-03-28 20:08 - 2016-03-28 22:18 - 00000000 ____D C:\FRST

2016-03-28 19:50 - 2016-03-28 19:50 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2016-03-28 19:50 - 2016-03-28 19:50 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Mozilla

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Local\Mozilla

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-03-28 19:49 - 2016-03-28 19:49 - 00242376 _____ C:\Users\Jan\Downloads\Firefox Setup Stub 45.0.1.exe

2016-03-28 19:47 - 2016-03-28 19:47 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2016-03-28 19:44 - 2016-03-28 19:44 - 06468104 _____ ( ) C:\Users\Jan\Downloads\adblockplusie-1.5.exe

2016-03-28 19:40 - 2016-03-28 19:40 - 06868672 _____ (Piriform Ltd) C:\Users\Jan\Downloads\ccsetup516.exe

2016-03-28 19:40 - 2016-03-28 19:40 - 00002866 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2016-03-28 19:40 - 2016-03-28 19:40 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-03-28 19:40 - 2016-03-28 19:40 - 00000000 ____D C:\Program Files\CCleaner

2016-03-28 17:25 - 2016-03-28 17:31 - 00000000 ____D C:\ProgramData\245bef91

2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\e5e9eaf1-31b1-0

2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{1b801477-312c-1}

2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{04895d5a-012c-0}

2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{00ff91ce-212c-0}

2016-03-28 17:25 - 2016-03-28 17:25 - 00000000 ____D C:\ProgramData\{00519dfc-212c-1}

2016-03-25 20:52 - 2016-03-25 20:52 - 00000000 ____D C:\Windows\system32\SleepStudy

2016-03-25 17:14 - 2016-03-25 17:14 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys

2016-03-25 17:14 - 2016-03-25 17:14 - 00003200 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458918867

2016-03-25 17:14 - 2016-03-25 17:14 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk

2016-03-24 00:45 - 2016-03-24 00:45 - 00000000 ____D C:\Users\Jan\AppData\Local\PeerDistRepub

2016-03-23 22:20 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-03-23 22:20 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2016-03-23 22:20 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2016-03-23 22:20 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe

2016-03-23 22:20 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2016-03-23 22:20 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-03-23 22:20 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-03-23 22:20 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-03-23 22:20 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-03-23 22:20 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL

2016-03-23 22:20 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll

2016-03-23 22:20 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll

2016-03-23 22:20 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll

2016-03-23 22:20 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll

2016-03-23 22:20 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-03-23 22:20 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-03-23 22:20 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe

2016-03-23 22:20 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-03-23 22:20 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-03-23 22:20 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2016-03-23 22:20 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2016-03-23 22:20 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe

2016-03-23 22:20 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL

2016-03-23 22:20 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll

2016-03-23 22:20 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll

2016-03-23 22:20 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll

2016-03-23 22:20 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2016-03-23 22:20 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe

2016-03-23 22:20 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll

2016-03-23 22:20 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe

2016-03-23 22:20 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2016-03-23 22:20 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll

2016-03-23 22:20 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll

2016-03-23 22:20 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-03-23 22:20 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2016-03-23 22:20 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-03-23 22:20 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2016-03-23 22:20 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll

2016-03-23 22:20 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2016-03-23 22:20 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe

2016-03-23 22:20 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2016-03-23 22:20 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll

2016-03-23 22:20 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys

2016-03-23 22:20 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll

2016-03-23 22:20 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-03-23 22:20 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-03-23 22:20 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2016-03-23 22:20 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll

2016-03-23 22:20 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-03-23 22:20 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2016-03-23 22:20 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe

2016-03-23 22:20 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll

2016-03-23 22:20 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2016-03-23 22:20 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll

2016-03-23 22:20 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2016-03-23 22:20 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2016-03-23 22:20 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-03-23 22:20 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2016-03-23 22:20 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe

2016-03-23 22:20 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll

2016-03-23 22:20 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-03-23 22:20 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2016-03-23 22:20 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-03-23 22:20 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2016-03-23 22:20 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll

2016-03-23 22:20 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll

2016-03-23 22:20 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2016-03-23 22:20 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2016-03-23 22:20 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe

2016-03-23 22:20 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll

2016-03-23 22:20 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll

2016-03-23 22:20 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2016-03-23 22:20 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2016-03-23 22:20 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll

2016-03-23 22:20 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2016-03-23 22:20 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2016-03-23 22:20 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe

2016-03-23 22:20 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-03-23 22:20 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2016-03-23 22:20 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2016-03-23 21:42 - 2016-03-23 21:42 - 00003040 _____ C:\Windows\System32\Tasks\avast! Windows 10 Start Menu helper

2016-03-23 21:41 - 2016-03-23 21:41 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2016-03-23 21:41 - 2016-03-09 12:51 - 04192344 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des

2016-03-23 21:41 - 2004-12-30 14:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys

2016-03-23 21:41 - 2003-07-15 23:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd

2016-03-05 15:53 - 2016-03-05 15:55 - 00000000 ____D C:\Users\Jan\Desktop\CSGO Config

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WinRAR

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-03-05 15:51 - 2016-03-05 15:52 - 00000000 ____D C:\Program Files\WinRAR

2016-03-05 15:51 - 2016-03-05 15:51 - 02114664 _____ C:\Users\Jan\Downloads\winrar-x64-531d.exe

2016-03-05 15:50 - 2016-03-05 15:52 - 00005100 _____ C:\Users\Jan\Downloads\config.rar

2016-03-05 15:12 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2016-03-05 15:12 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2016-03-05 15:12 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2016-03-05 15:12 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2016-03-05 15:12 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2016-03-05 15:12 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2016-03-05 15:12 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2016-03-05 15:12 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2016-03-05 15:12 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2016-03-05 15:12 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2016-03-05 15:12 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2016-03-05 15:12 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2016-03-05 15:12 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2016-03-05 15:12 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2016-03-05 15:12 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2016-03-05 15:12 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2016-03-05 15:12 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2016-03-05 15:12 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2016-03-05 15:12 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2016-03-05 15:12 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2016-03-05 15:12 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2016-03-05 15:12 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2016-03-05 15:12 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2016-03-05 15:12 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2016-03-05 15:12 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2016-03-05 15:12 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2016-03-05 15:12 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2016-03-05 15:12 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2016-03-05 15:12 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2016-03-05 15:12 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2016-03-05 15:12 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2016-03-05 15:12 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2016-03-05 15:12 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2016-03-05 15:12 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2016-03-05 15:12 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2016-03-05 15:12 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2016-03-05 15:12 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2016-03-05 15:12 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2016-03-05 15:12 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2016-03-05 15:12 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2016-03-05 15:12 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2016-03-05 15:12 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2016-03-05 15:12 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2016-03-05 15:12 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2016-03-05 15:12 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2016-03-05 15:12 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2016-03-05 15:12 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2016-03-05 15:12 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2016-03-05 15:12 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2016-03-05 15:12 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2016-03-05 15:12 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2016-03-05 15:12 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2016-03-05 15:12 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2016-03-05 15:12 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2016-03-05 15:12 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2016-03-05 15:12 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2016-03-05 15:12 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2016-03-05 15:12 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2016-03-05 15:12 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2016-03-05 14:57 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files\Google

2016-03-05 14:56 - 2016-03-05 14:56 - 00987728 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleToolbarSetup.exe

2016-03-05 13:25 - 2016-03-05 13:25 - 00001509 _____ C:\Users\Public\Desktop\Flyff.lnk

2016-03-05 13:25 - 2016-03-05 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flyff

2016-03-05 13:21 - 2016-03-05 13:21 - 00000000 ____D C:\Program Files\Webzen

2016-03-05 13:12 - 2016-03-05 13:12 - 05810184 _____ C:\Users\Jan\Downloads\Flyff_de_Downloader.exe

2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\ProgramData\WEBZEN

2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\download

2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\Steam

2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\CEF

2016-03-05 13:06 - 2016-03-28 19:41 - 00000000 ____D C:\Program Files (x86)\Steam

2016-03-05 13:06 - 2016-03-05 13:06 - 01380712 _____ C:\Users\Jan\Downloads\SteamSetup.exe

2016-03-05 13:06 - 2016-03-05 13:06 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk

2016-03-05 13:06 - 2016-03-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2016-03-05 12:38 - 2016-03-28 17:27 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8C350B2D-D49C-4624-8373-F9A16C366C9A}

2016-03-05 12:27 - 2016-03-05 12:27 - 00000000 ____D C:\Users\Jan\AppData\Roaming\dlg

2016-03-05 12:26 - 2016-03-28 17:26 - 00000000 ____D C:\ProgramData\974b174d-77c1-0

2016-03-05 12:26 - 2016-03-28 17:26 - 00000000 ____D C:\ProgramData\974b174d-4113-1

2016-03-05 12:26 - 2016-03-05 12:26 - 00000000 ____D C:\Users\Jan\AppData\Local\securityutility

2016-03-05 12:25 - 2016-03-24 00:52 - 00000000 ____D C:\Windows\system32\MRT

2016-03-05 12:25 - 2016-03-24 00:51 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-03-05 12:25 - 2016-03-05 12:25 - 00540096 _____ C:\Users\Jan\Downloads\internet_explorer.exe

2016-03-05 12:25 - 2016-03-05 12:25 - 00000000 ____D C:\Users\Jan\AppData\Local\SearchProtect

2016-03-05 12:25 - 2016-03-05 12:25 - 00000000 _____ C:\END

2016-03-05 12:24 - 2016-03-28 19:47 - 00000000 ____D C:\Users\Jan\AppData\LocalLow\Adblock Plus for IE

FRST: (Part 2)

Code:

2016-03-05 12:19 - 2016-01-31 08:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2016-03-05 12:19 - 2016-01-31 08:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2016-03-05 12:19 - 2016-01-31 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll

2016-03-05 12:19 - 2016-01-31 07:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2016-03-05 12:19 - 2016-01-31 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll

2016-03-05 12:19 - 2016-01-31 07:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2016-03-05 12:19 - 2016-01-31 07:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2016-03-05 12:19 - 2016-01-31 07:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys

2016-03-05 12:19 - 2016-01-31 07:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-03-05 12:19 - 2016-01-31 07:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll

2016-03-05 12:19 - 2016-01-31 07:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-03-05 12:19 - 2016-01-05 05:07 - 02463704 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2016-03-05 12:19 - 2016-01-05 05:06 - 01063504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-03-05 12:19 - 2016-01-05 05:06 - 00119800 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-03-05 12:19 - 2016-01-05 05:04 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00779928 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00233992 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00090912 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 02152744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 00882208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 00100712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL

2016-03-05 12:19 - 2016-01-05 04:29 - 00208688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 02445128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00645144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00635312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00082096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll

2016-03-05 12:19 - 2016-01-05 04:09 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2016-03-05 12:19 - 2016-01-05 04:02 - 01672192 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-03-05 12:19 - 2016-01-05 04:02 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-03-05 12:19 - 2016-01-05 04:01 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-03-05 12:19 - 2016-01-05 03:57 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-03-05 12:19 - 2016-01-05 03:32 - 01541632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2016-03-05 12:19 - 2016-01-05 03:32 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2016-03-05 12:19 - 2016-01-05 03:31 - 00563200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2016-03-05 12:19 - 2016-01-05 03:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax

2016-03-05 12:19 - 2016-01-05 03:26 - 00373760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-03-05 12:19 - 2015-12-01 08:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gpuenergydrv.sys

2016-03-05 12:19 - 2015-11-25 07:40 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2016-03-05 12:19 - 2015-11-25 06:49 - 01569280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll

2016-03-05 12:19 - 2015-11-25 06:30 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2016-03-05 12:19 - 2015-11-25 06:30 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2016-03-05 12:19 - 2015-11-25 06:25 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2016-03-05 12:19 - 2015-11-25 06:22 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2016-03-05 12:19 - 2015-11-25 06:19 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2016-03-05 12:19 - 2015-11-25 06:18 - 01233920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll

2016-03-05 12:19 - 2015-11-25 06:10 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll

2016-03-05 12:19 - 2015-11-05 07:14 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2016-03-05 12:19 - 2015-11-05 07:13 - 00577888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2016-03-05 12:19 - 2015-11-05 06:56 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2016-03-05 12:19 - 2015-11-05 06:17 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2016-03-05 12:19 - 2015-11-05 06:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2016-03-05 12:19 - 2015-11-05 05:40 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2016-03-05 12:19 - 2015-10-06 05:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2016-03-05 12:19 - 2015-09-25 06:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2016-03-05 12:19 - 2015-09-25 05:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll

2016-03-05 12:19 - 2015-09-25 05:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll

2016-03-05 12:19 - 2015-09-25 04:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll

2016-03-05 12:19 - 2015-09-25 04:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll

2016-03-05 12:19 - 2015-09-25 04:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll

2016-03-05 12:19 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2016-03-05 12:19 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-03-05 12:19 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2016-03-05 12:19 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2016-03-05 12:19 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2016-03-05 12:19 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2016-03-05 12:19 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll

2016-03-05 12:19 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll

2016-03-05 12:19 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2016-03-05 12:19 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll

2016-03-05 12:19 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll

2016-03-05 12:19 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe

2016-03-05 12:19 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll

2016-03-05 12:19 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll

2016-03-05 12:19 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe

2016-03-05 12:19 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll

2016-03-05 12:19 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2016-03-05 12:19 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-03-05 12:19 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys

2016-03-05 12:19 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2016-03-05 12:19 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll

2016-03-05 12:19 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll

2016-03-05 12:19 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll

2016-03-05 12:19 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2016-03-05 12:19 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll

2016-03-05 12:19 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-03-05 12:19 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2016-03-05 12:19 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2016-03-05 12:19 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-03-05 12:19 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll

2016-03-05 12:19 - 2015-08-11 11:11 - 02446336 _____ C:\Windows\system32\InputService.dll

2016-03-05 12:19 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll

2016-03-05 12:19 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe

2016-03-05 12:19 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2016-03-05 12:19 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll

2016-03-05 12:19 - 2015-08-11 10:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll

2016-03-05 12:19 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2016-03-05 12:19 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys

2016-03-05 12:19 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2016-03-05 12:19 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll

2016-03-05 12:19 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-03-05 12:19 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll

2016-03-05 12:19 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll

2016-03-05 12:19 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-03-05 12:19 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll

2016-03-05 12:19 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll

2016-03-05 12:19 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys

2016-03-05 12:19 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2016-03-05 12:19 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys

2016-03-05 12:19 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll

2016-03-05 12:19 - 2015-07-24 04:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll

2016-03-05 12:19 - 2015-07-22 07:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2016-03-05 12:19 - 2015-07-22 06:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2016-03-05 12:19 - 2015-07-17 06:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys

2016-03-05 12:19 - 2015-07-17 06:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2016-03-05 12:19 - 2015-07-17 04:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll

2016-03-05 12:19 - 2015-07-17 03:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll

2016-03-05 12:19 - 2015-07-16 07:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

2016-03-05 12:19 - 2015-07-16 05:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll

2016-03-05 12:19 - 2015-07-15 04:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2016-03-05 12:19 - 2015-07-14 04:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys

2016-03-05 12:19 - 2015-07-12 02:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll

2016-03-05 12:19 - 2015-07-11 03:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2016-03-05 12:19 - 2015-07-10 12:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll

2016-03-05 12:18 - 2016-01-31 08:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2016-03-05 12:18 - 2016-01-31 08:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll

2016-03-05 12:18 - 2016-01-31 07:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2016-03-05 12:18 - 2016-01-31 07:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll

2016-03-05 12:18 - 2016-01-31 07:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-03-05 12:18 - 2016-01-31 07:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll

2016-03-05 12:18 - 2016-01-31 07:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll

2016-03-05 12:18 - 2016-01-31 07:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2016-03-05 12:18 - 2016-01-31 07:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2016-03-05 12:18 - 2016-01-31 07:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-03-05 12:18 - 2016-01-31 07:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll

2016-03-05 12:18 - 2016-01-31 07:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-03-05 12:18 - 2016-01-31 07:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll

2016-03-05 12:18 - 2016-01-31 07:02 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-03-05 12:18 - 2016-01-05 05:07 - 00377592 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL

2016-03-05 12:18 - 2016-01-05 05:04 - 02641928 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2016-03-05 12:18 - 2016-01-05 05:04 - 00787720 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL

2016-03-05 12:18 - 2016-01-05 05:04 - 00249464 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL

2016-03-05 12:18 - 2016-01-05 05:04 - 00083704 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll

2016-03-05 12:18 - 2016-01-05 04:50 - 00345080 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2016-03-05 12:18 - 2016-01-05 04:50 - 00205072 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL

2016-03-05 12:18 - 2016-01-05 04:30 - 02459096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2016-03-05 12:18 - 2016-01-05 04:30 - 00368776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL

2016-03-05 12:18 - 2016-01-05 04:30 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL

2016-03-05 12:18 - 2016-01-05 04:28 - 00695752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL

2016-03-05 12:18 - 2016-01-05 04:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll

2016-03-05 12:18 - 2016-01-05 04:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\usermgrcli.dll

2016-03-05 12:18 - 2016-01-05 04:10 - 00305776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL

2016-03-05 12:18 - 2016-01-05 04:10 - 00188032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL

2016-03-05 12:18 - 2016-01-05 04:09 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-03-05 12:18 - 2016-01-05 04:02 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2016-03-05 12:18 - 2016-01-05 03:57 - 00712704 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll

2016-03-05 12:18 - 2016-01-05 03:57 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2016-03-05 12:18 - 2016-01-05 03:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll

2016-03-05 12:18 - 2016-01-05 03:44 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usermgrcli.dll

2016-03-05 12:18 - 2016-01-05 03:29 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-03-05 12:18 - 2016-01-05 03:29 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-03-05 12:18 - 2015-11-25 07:42 - 00168288 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe

2016-03-05 12:18 - 2015-11-25 06:49 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll

2016-03-05 12:18 - 2015-11-25 06:49 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll

2016-03-05 12:18 - 2015-11-25 06:49 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\RasMediaManager.dll

2016-03-05 12:18 - 2015-11-25 06:48 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\EthernetMediaManager.dll

2016-03-05 12:18 - 2015-11-25 06:48 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\DAMediaManager.dll

2016-03-05 12:18 - 2015-11-25 06:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll

2016-03-05 12:18 - 2015-11-05 07:15 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll

2016-03-05 12:18 - 2015-11-05 07:11 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll

2016-03-05 12:18 - 2015-11-05 07:06 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2016-03-05 12:18 - 2015-11-05 06:30 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll

2016-03-05 12:18 - 2015-11-05 06:23 - 00762888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll

2016-03-05 12:18 - 2015-11-05 06:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll

2016-03-05 12:18 - 2015-11-05 06:18 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2016-03-05 12:18 - 2015-11-05 06:10 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2016-03-05 12:18 - 2015-11-05 05:58 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll

2016-03-05 12:18 - 2015-11-05 05:55 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll

2016-03-05 12:18 - 2015-11-05 05:42 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2016-03-05 12:18 - 2015-11-05 05:35 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2016-03-05 12:18 - 2015-11-05 05:34 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll

2016-03-05 12:18 - 2015-11-05 05:27 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll

2016-03-05 12:18 - 2015-10-06 04:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2016-03-05 12:18 - 2015-10-01 05:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2016-03-05 12:18 - 2015-09-25 05:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll

2016-03-05 12:18 - 2015-09-25 05:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll

2016-03-05 12:18 - 2015-09-25 04:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll

2016-03-05 12:18 - 2015-09-25 04:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2016-03-05 12:18 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll

2016-03-05 12:18 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2016-03-05 12:18 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2016-03-05 12:18 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll

2016-03-05 12:18 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll

2016-03-05 12:18 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2016-03-05 12:18 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll

2016-03-05 12:18 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe

2016-03-05 12:18 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll

2016-03-05 12:18 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll

2016-03-05 12:18 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll

2016-03-05 12:18 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll

2016-03-05 12:18 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll

2016-03-05 12:18 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll

2016-03-05 12:18 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll

2016-03-05 12:18 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll

2016-03-05 12:18 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll

2016-03-05 12:18 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2016-03-05 12:18 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll

2016-03-05 12:18 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll

2016-03-05 12:18 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll

2016-03-05 12:18 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll

2016-03-05 12:18 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll

2016-03-05 12:18 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll

2016-03-05 12:18 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll

2016-03-05 12:18 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2016-03-05 12:18 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2016-03-05 12:18 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll

2016-03-05 12:18 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2016-03-05 12:18 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll

2016-03-05 12:18 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll

2016-03-05 12:18 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll

2016-03-05 12:18 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll

2016-03-05 12:18 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll

2016-03-05 12:18 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll

2016-03-05 12:18 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll

2016-03-05 12:18 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll

2016-03-05 12:18 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll

2016-03-05 12:18 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll

2016-03-05 12:18 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll

2016-03-05 12:18 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2016-03-05 12:18 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe

2016-03-05 12:18 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll

2016-03-05 12:18 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll

2016-03-05 12:18 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll

2016-03-05 12:18 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll

2016-03-05 12:18 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll

2016-03-05 12:18 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll

2016-03-05 12:18 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll

2016-03-05 12:18 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll

2016-03-05 12:18 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll

2016-03-05 12:18 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2016-03-05 12:18 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll

2016-03-05 12:18 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll

2016-03-05 12:18 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2016-03-05 12:18 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2016-03-05 12:18 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2016-03-05 12:18 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll

2016-03-05 12:18 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2016-03-05 12:18 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2016-03-05 12:18 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll

2016-03-05 12:18 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll

2016-03-05 12:18 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll

2016-03-05 12:18 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll

2016-03-05 12:18 - 2015-08-11 12:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe

2016-03-05 12:18 - 2015-08-11 11:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe

2016-03-05 12:18 - 2015-08-11 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll

2016-03-05 12:18 - 2015-08-11 11:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe

2016-03-05 12:18 - 2015-08-11 11:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll

2016-03-05 12:18 - 2015-08-11 11:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll

2016-03-05 12:18 - 2015-08-11 10:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe

2016-03-05 12:18 - 2015-08-11 10:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll

2016-03-05 12:18 - 2015-08-04 05:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll

2016-03-05 12:18 - 2015-08-03 04:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll

2016-03-05 12:18 - 2015-08-03 04:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll

2016-03-05 12:18 - 2015-08-03 03:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-03-05 12:18 - 2015-08-03 03:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll

2016-03-05 12:18 - 2015-08-03 03:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll

2016-03-05 12:18 - 2015-08-03 03:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll

2016-03-05 12:18 - 2015-08-03 03:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll

2016-03-05 12:18 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2016-03-05 12:18 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll

2016-03-05 12:18 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe

2016-03-05 12:18 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll

2016-03-05 12:18 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll

2016-03-05 12:18 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll

2016-03-05 12:18 - 2015-07-26 05:40 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2016-03-05 12:18 - 2015-07-26 05:30 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2016-03-05 12:18 - 2015-07-24 04:55 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll

2016-03-05 12:18 - 2015-07-24 04:52 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll

2016-03-05 12:18 - 2015-07-24 04:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll

2016-03-05 12:18 - 2015-07-24 04:30 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2016-03-05 12:18 - 2015-07-22 06:02 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2016-03-05 12:18 - 2015-07-22 05:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll

2016-03-05 12:18 - 2015-07-22 05:07 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2016-03-05 12:18 - 2015-07-18 09:43 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll

2016-03-05 12:18 - 2015-07-18 09:29 - 03443200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll

2016-03-05 12:18 - 2015-07-18 06:06 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll

2016-03-05 12:18 - 2015-07-18 05:52 - 04169728 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll

2016-03-05 12:18 - 2015-07-17 04:31 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-03-05 12:18 - 2015-07-17 04:26 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll

2016-03-05 12:18 - 2015-07-17 03:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll

2016-03-05 12:18 - 2015-07-16 06:04 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll

2016-03-05 12:18 - 2015-07-16 05:47 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll

2016-03-05 12:18 - 2015-07-16 05:36 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll

2016-03-05 12:18 - 2015-07-16 05:32 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll

2016-03-05 12:18 - 2015-07-15 04:04 - 00032768 _____ C:\Windows\system32\LicenseManagerApi.dll

2016-03-05 12:18 - 2015-07-15 03:57 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\OmaDmAgent.dll

2016-03-05 12:18 - 2015-07-15 03:35 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\unenrollhook.dll

2016-03-05 12:18 - 2015-07-15 03:27 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll

2016-03-05 12:18 - 2015-07-13 02:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe

2016-03-05 12:18 - 2015-07-13 01:30 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe

2016-03-05 12:18 - 2015-07-12 02:25 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe

2016-03-05 12:18 - 2015-07-12 02:18 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll

2016-03-05 12:18 - 2015-07-12 01:46 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll

2016-03-05 12:18 - 2015-07-11 03:28 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll

2016-03-05 12:18 - 2015-07-11 03:17 - 06305792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2016-03-05 12:18 - 2015-07-11 03:07 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll

2016-03-05 12:18 - 2015-07-11 03:05 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll

2016-03-05 12:18 - 2015-07-11 03:04 - 03362816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2016-03-05 12:18 - 2015-07-11 03:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2016-03-05 12:18 - 2015-07-11 03:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll

2016-03-05 12:18 - 2015-07-11 02:57 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll

2016-03-05 12:18 - 2015-07-11 02:51 - 04398080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2016-03-05 12:18 - 2015-07-11 02:43 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll

2016-03-05 12:18 - 2015-07-11 02:42 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll

2016-03-05 12:18 - 2015-07-11 02:41 - 03687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2016-03-05 12:18 - 2015-07-11 02:40 - 02606080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2016-03-05 12:18 - 2015-07-11 02:40 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2016-03-05 12:18 - 2015-07-10 17:51 - 00823336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2016-03-05 12:18 - 2015-07-10 17:00 - 01101792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2016-03-05 12:18 - 2015-07-10 11:53 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll

2016-03-05 12:17 - 2016-01-31 08:25 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-03-05 12:17 - 2016-01-31 08:24 - 01824880 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-03-05 12:17 - 2016-01-31 08:23 - 01420392 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-03-05 12:17 - 2016-01-31 08:06 - 01535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-03-05 12:17 - 2016-01-31 08:06 - 01531368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-03-05 12:17 - 2016-01-31 08:04 - 01180696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2016-03-05 12:17 - 2016-01-31 07:33 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\IoTAssignedAccessLockFramework.dll

2016-03-05 12:17 - 2016-01-31 07:24 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2016-03-05 12:17 - 2016-01-31 07:19 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-03-05 12:17 - 2016-01-31 07:11 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2016-03-05 12:17 - 2016-01-31 07:05 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-03-05 12:17 - 2016-01-05 05:06 - 01991120 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2016-03-05 12:17 - 2016-01-05 05:06 - 01270104 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll

2016-03-05 12:17 - 2016-01-05 05:04 - 01591848 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-03-05 12:17 - 2016-01-05 05:04 - 00862056 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll

2016-03-05 12:17 - 2016-01-05 05:04 - 00772448 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-03-05 12:17 - 2016-01-05 05:04 - 00751992 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL

2016-03-05 12:17 - 2016-01-05 05:04 - 00667856 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-03-05 12:17 - 2016-01-05 05:04 - 00115704 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL

2016-03-05 12:17 - 2016-01-05 04:50 - 00723648 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-03-05 12:17 - 2016-01-05 04:31 - 01365576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-03-05 12:17 - 2016-01-05 04:30 - 02162064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL

2016-03-05 12:17 - 2016-01-05 04:30 - 01106872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll

2016-03-05 12:17 - 2016-01-05 04:28 - 00714808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll

2016-03-05 12:17 - 2016-01-05 04:28 - 00696192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL

2016-03-05 12:17 - 2016-01-05 04:28 - 00497896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-03-05 12:17 - 2016-01-05 04:28 - 00107952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL

2016-03-05 12:17 - 2016-01-05 04:28 - 00072808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll

2016-03-05 12:17 - 2016-01-05 04:15 - 00931328 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL

2016-03-05 12:17 - 2016-01-05 04:10 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\mfh264enc.dll

2016-03-05 12:17 - 2016-01-05 04:00 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-03-05 12:17 - 2016-01-05 03:59 - 00572928 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-03-05 12:17 - 2016-01-05 03:51 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL

2016-03-05 12:17 - 2016-01-05 03:51 - 01009664 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL

2016-03-05 12:17 - 2016-01-05 03:51 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2016-03-05 12:17 - 2016-01-05 03:51 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL

2016-03-05 12:17 - 2016-01-05 03:51 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL

2016-03-05 12:17 - 2016-01-05 03:42 - 00871936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL

2016-03-05 12:17 - 2016-01-05 03:38 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfh264enc.dll

2016-03-05 12:17 - 2016-01-05 03:20 - 00890880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL

2016-03-05 12:17 - 2016-01-05 03:19 - 01070080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL

2016-03-05 12:17 - 2016-01-05 03:19 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL

2016-03-05 12:17 - 2016-01-05 03:19 - 00409088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL

2016-03-05 12:17 - 2016-01-05 03:19 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL

2016-03-05 12:17 - 2015-11-25 07:27 - 01366680 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2016-03-05 12:17 - 2015-11-25 07:09 - 01310880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2016-03-05 12:17 - 2015-11-25 06:37 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2016-03-05 12:17 - 2015-11-25 06:36 - 01710592 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll

2016-03-05 12:17 - 2015-11-25 06:35 - 00929792 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2016-03-05 12:17 - 2015-11-25 06:35 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe

2016-03-05 12:17 - 2015-11-25 06:29 - 01649152 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2016-03-05 12:17 - 2015-11-25 06:29 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll

2016-03-05 12:17 - 2015-11-25 06:27 - 02180608 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2016-03-05 12:17 - 2015-11-25 06:26 - 00849408 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2016-03-05 12:17 - 2015-11-25 06:26 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll

2016-03-05 12:17 - 2015-11-25 06:23 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-03-05 12:17 - 2015-11-25 06:22 - 01717248 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2016-03-05 12:17 - 2015-11-25 06:22 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll

2016-03-05 12:17 - 2015-11-25 06:19 - 01795584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2016-03-05 12:17 - 2015-11-25 06:17 - 00774656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2016-03-05 12:17 - 2015-11-25 06:16 - 01442816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll

2016-03-05 12:17 - 2015-11-25 06:16 - 00786432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe

2016-03-05 12:17 - 2015-11-25 06:13 - 02153984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2016-03-05 12:17 - 2015-11-25 06:11 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll

2016-03-05 12:17 - 2015-11-25 06:10 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll

2016-03-05 12:17 - 2015-11-25 06:08 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2016-03-05 12:17 - 2015-11-25 06:04 - 01467392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2016-03-05 12:17 - 2015-11-25 06:04 - 00480768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\duser.dll

2016-03-05 12:17 - 2015-11-25 06:04 - 00474624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-03-05 12:17 - 2015-11-05 06:12 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll

2016-03-05 12:17 - 2015-11-05 06:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll

2016-03-05 12:17 - 2015-11-05 06:03 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll

2016-03-05 12:17 - 2015-11-05 05:59 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll

2016-03-05 12:17 - 2015-11-05 05:54 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll

2016-03-05 12:17 - 2015-11-05 05:27 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll

2016-03-05 12:17 - 2015-11-05 05:23 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll

2016-03-05 12:17 - 2015-10-01 06:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-03-05 12:17 - 2015-09-25 06:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2016-03-05 12:17 - 2015-09-25 05:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi

2016-03-05 12:17 - 2015-09-25 05:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2016-03-05 12:17 - 2015-09-25 04:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2016-03-05 12:17 - 2015-09-25 04:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2016-03-05 12:17 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2016-03-05 12:17 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll

2016-03-05 12:17 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys

2016-03-05 12:17 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-03-05 12:17 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll

2016-03-05 12:17 - 2015-09-17 08:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll

2016-03-05 12:17 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll

2016-03-05 12:17 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll

2016-03-05 12:17 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll

2016-03-05 12:17 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2016-03-05 12:17 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-03-05 12:17 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll

2016-03-05 12:17 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll

2016-03-05 12:17 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll

2016-03-05 12:17 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2016-03-05 12:17 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll

2016-03-05 12:17 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2016-03-05 12:17 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2016-03-05 12:17 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-03-05 12:17 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll

2016-03-05 12:17 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll

2016-03-05 12:17 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2016-03-05 12:17 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll

2016-03-05 12:17 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll

2016-03-05 12:17 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2016-03-05 12:17 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2016-03-05 12:17 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll

2016-03-05 12:17 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2016-03-05 12:17 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe

2016-03-05 12:17 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll

2016-03-05 12:17 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll

2016-03-05 12:17 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll

2016-03-05 12:17 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2016-03-05 12:17 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2016-03-05 12:17 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll

2016-03-05 12:17 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll

2016-03-05 12:17 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll

2016-03-05 12:17 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2016-03-05 12:17 - 2015-08-11 11:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2016-03-05 12:17 - 2015-08-11 11:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll

2016-03-05 12:17 - 2015-08-11 11:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll

2016-03-05 12:17 - 2015-08-11 11:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2016-03-05 12:17 - 2015-08-11 11:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll

2016-03-05 12:17 - 2015-08-11 11:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2016-03-05 12:17 - 2015-08-11 10:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2016-03-05 12:17 - 2015-08-11 10:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2016-03-05 12:17 - 2015-08-11 10:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2016-03-05 12:17 - 2015-08-08 08:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2016-03-05 12:17 - 2015-08-08 08:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2016-03-05 12:17 - 2015-08-08 08:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2016-03-05 12:17 - 2015-08-06 05:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys

2016-03-05 12:17 - 2015-08-03 04:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys

2016-03-05 12:17 - 2015-08-03 04:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe

2016-03-05 12:17 - 2015-08-03 03:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

2016-03-05 12:17 - 2015-08-03 03:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll

2016-03-05 12:17 - 2015-08-03 03:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll

2016-03-05 12:17 - 2015-08-03 03:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll

2016-03-05 12:17 - 2015-08-03 03:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll

2016-03-05 12:17 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2016-03-05 12:17 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll

2016-03-05 12:17 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2016-03-05 12:17 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2016-03-05 12:17 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2016-03-05 12:17 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2016-03-05 12:17 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2016-03-05 12:17 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2016-03-05 12:17 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll

2016-03-05 12:17 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2016-03-05 12:17 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll

2016-03-05 12:17 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2016-03-05 12:17 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll

2016-03-05 12:17 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll

2016-03-05 12:17 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2016-03-05 12:17 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll

2016-03-05 12:17 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2016-03-05 12:17 - 2015-07-26 05:49 - 04760576 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2016-03-05 12:17 - 2015-07-26 05:49 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2016-03-05 12:17 - 2015-07-26 05:38 - 04350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2016-03-05 12:17 - 2015-07-26 05:34 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2016-03-05 12:17 - 2015-07-24 05:17 - 00695136 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll

2016-03-05 12:17 - 2015-07-24 05:17 - 00521568 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe

2016-03-05 12:17 - 2015-07-24 04:24 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe

2016-03-05 12:17 - 2015-07-19 06:04 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll

2016-03-05 12:17 - 2015-07-19 05:18 - 00430592 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll

2016-03-05 12:17 - 2015-07-18 10:47 - 00082616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll

2016-03-05 12:17 - 2015-07-18 09:37 - 01043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll

2016-03-05 12:17 - 2015-07-18 09:28 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll

2016-03-05 12:17 - 2015-07-18 09:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll

2016-03-05 12:17 - 2015-07-18 07:17 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll

2016-03-05 12:17 - 2015-07-18 05:59 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll

2016-03-05 12:17 - 2015-07-18 05:59 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll

2016-03-05 12:17 - 2015-07-18 05:50 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll

2016-03-05 12:17 - 2015-07-18 05:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe

2016-03-05 12:17 - 2015-07-17 06:13 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2016-03-05 12:17 - 2015-07-17 04:33 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\omadmprc.exe

2016-03-05 12:17 - 2015-07-17 04:18 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2016-03-05 12:17 - 2015-07-17 03:44 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2016-03-05 12:17 - 2015-07-16 06:03 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll

2016-03-05 12:17 - 2015-07-16 05:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2016-03-05 12:17 - 2015-07-16 05:41 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll

2016-03-05 12:17 - 2015-07-15 04:41 - 01135312 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe

2016-03-05 12:17 - 2015-07-15 04:22 - 02112512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2016-03-05 12:17 - 2015-07-15 03:47 - 04611584 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2016-03-05 12:17 - 2015-07-15 03:37 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.ProxyStub.dll

2016-03-05 12:17 - 2015-07-11 02:34 - 00294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll

2016-03-05 12:17 - 2015-07-10 12:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll

2016-03-05 12:17 - 2015-07-10 12:05 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll

2016-03-05 12:17 - 2015-07-10 11:29 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll

2016-03-05 12:16 - 2016-01-31 07:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll

2016-03-05 12:16 - 2016-01-31 07:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2016-03-05 12:16 - 2016-01-31 07:18 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll

2016-03-05 12:16 - 2016-01-31 07:13 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll

2016-03-05 12:16 - 2016-01-31 07:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll

2016-03-05 12:16 - 2016-01-31 07:05 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll

2016-03-05 12:16 - 2016-01-31 06:58 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll

2016-03-05 12:16 - 2016-01-05 05:04 - 00250520 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL

2016-03-05 12:16 - 2016-01-05 05:04 - 00243248 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2016-03-05 12:16 - 2016-01-05 04:52 - 00441696 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-03-05 12:16 - 2016-01-05 04:50 - 01817064 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll

2016-03-05 12:16 - 2016-01-05 04:50 - 00251544 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL

2016-03-05 12:16 - 2016-01-05 04:28 - 00277400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL

2016-03-05 12:16 - 2016-01-05 04:28 - 00116728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2016-03-05 12:16 - 2016-01-05 04:10 - 00278424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL

2016-03-05 12:16 - 2015-11-25 07:42 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2016-03-05 12:16 - 2015-11-25 07:32 - 00113184 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll

2016-03-05 12:16 - 2015-11-25 07:12 - 04047288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2016-03-05 12:16 - 2015-11-25 06:59 - 00092992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll

2016-03-05 12:16 - 2015-11-25 06:36 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2016-03-05 12:16 - 2015-11-25 06:31 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll

2016-03-05 12:16 - 2015-11-25 06:30 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll

2016-03-05 12:16 - 2015-11-25 06:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll

2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll

2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZST.DLL

2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL

2016-03-05 12:16 - 2015-11-25 06:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL

2016-03-05 12:16 - 2015-11-25 06:07 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll

2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll

2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZST.DLL

2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL

2016-03-05 12:16 - 2015-11-25 06:04 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL

2016-03-05 12:16 - 2015-11-25 04:52 - 00775312 _____ C:\Windows\SysWOW64\locale.nls

2016-03-05 12:16 - 2015-11-25 04:52 - 00775312 _____ C:\Windows\system32\locale.nls

2016-03-05 12:16 - 2015-11-05 06:56 - 00025280 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-03-05 12:16 - 2015-10-10 09:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-03-05 12:16 - 2015-09-25 05:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll

2016-03-05 12:16 - 2015-09-25 05:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll

2016-03-05 12:16 - 2015-09-25 05:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll

2016-03-05 12:16 - 2015-09-25 05:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll

2016-03-05 12:16 - 2015-09-25 04:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll

2016-03-05 12:16 - 2015-09-25 04:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll

2016-03-05 12:16 - 2015-09-25 04:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll

2016-03-05 12:16 - 2015-09-25 04:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll

2016-03-05 12:16 - 2015-09-25 04:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll

2016-03-05 12:16 - 2015-09-25 04:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll

2016-03-05 12:16 - 2015-09-25 04:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll

2016-03-05 12:16 - 2015-09-25 04:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll

2016-03-05 12:16 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll

2016-03-05 12:16 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll

2016-03-05 12:16 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2016-03-05 12:16 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2016-03-05 12:16 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2016-03-05 12:16 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2016-03-05 12:16 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll

2016-03-05 12:16 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll

2016-03-05 12:16 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2016-03-05 12:16 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll

2016-03-05 12:16 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll

2016-03-05 12:16 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll

2016-03-05 12:16 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe

2016-03-05 12:16 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll

2016-03-05 12:16 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll

2016-03-05 12:16 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll

2016-03-05 12:16 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2016-03-05 12:16 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll

2016-03-05 12:16 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2016-03-05 12:16 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2016-03-05 12:16 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll

2016-03-05 12:16 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll

2016-03-05 12:16 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll

2016-03-05 12:16 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll

2016-03-05 12:16 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll

2016-03-05 12:16 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll

2016-03-05 12:16 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll

2016-03-05 12:16 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll

2016-03-05 12:16 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll

2016-03-05 12:16 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll

2016-03-05 12:16 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll

2016-03-05 12:16 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll

2016-03-05 12:16 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll

2016-03-05 12:16 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll

2016-03-05 12:16 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll

2016-03-05 12:16 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll

2016-03-05 12:16 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll

2016-03-05 12:16 - 2015-08-18 08:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll

2016-03-05 12:16 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll

2016-03-05 12:16 - 2015-08-18 06:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList

2016-03-05 12:16 - 2015-08-11 11:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll

2016-03-05 12:16 - 2015-08-11 11:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll

2016-03-05 12:16 - 2015-08-11 11:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2016-03-05 12:16 - 2015-08-11 10:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll

2016-03-05 12:16 - 2015-08-11 10:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll

2016-03-05 12:16 - 2015-08-11 10:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll

2016-03-05 12:16 - 2015-08-11 10:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2016-03-05 12:16 - 2015-08-11 10:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll

2016-03-05 12:16 - 2015-08-05 06:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2016-03-05 12:16 - 2015-08-05 05:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2016-03-05 12:16 - 2015-08-03 04:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll

2016-03-05 12:16 - 2015-08-03 04:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll

2016-03-05 12:16 - 2015-08-03 04:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2016-03-05 12:16 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2016-03-05 12:16 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2016-03-05 12:16 - 2015-08-03 03:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll

2016-03-05 12:16 - 2015-08-03 03:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll

2016-03-05 12:16 - 2015-08-03 03:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2016-03-05 12:16 - 2015-08-03 02:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll

2016-03-05 12:16 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2016-03-05 12:16 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll

2016-03-05 12:16 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll

2016-03-05 12:16 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll

2016-03-05 12:16 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll

2016-03-05 12:16 - 2015-07-26 05:47 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2016-03-05 12:16 - 2015-07-26 05:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll

2016-03-05 12:16 - 2015-07-26 05:35 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2016-03-05 12:16 - 2015-07-26 05:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll

2016-03-05 12:16 - 2015-07-24 05:12 - 00584544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll

2016-03-05 12:16 - 2015-07-24 04:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll

2016-03-05 12:16 - 2015-07-22 06:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe

2016-03-05 12:16 - 2015-07-22 05:21 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe

2016-03-05 12:16 - 2015-07-19 05:23 - 00505344 _____ C:\Windows\system32\EditionUpgradeManagerObj.dll

2016-03-05 12:16 - 2015-07-18 07:02 - 00290312 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe

2016-03-05 12:16 - 2015-07-18 05:49 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe

2016-03-05 12:16 - 2015-07-18 05:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll

2016-03-05 12:16 - 2015-07-18 05:49 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll

2016-03-05 12:16 - 2015-07-18 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-03-05 12:16 - 2015-07-17 04:39 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2016-03-05 12:16 - 2015-07-17 04:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2016-03-05 12:16 - 2015-07-16 05:33 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll

2016-03-05 12:16 - 2015-07-16 05:19 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll

2016-03-05 12:16 - 2015-07-14 05:00 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2016-03-05 12:16 - 2015-07-14 04:37 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2016-03-05 12:16 - 2015-07-14 03:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll

2016-03-05 12:16 - 2015-07-14 03:38 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll

2016-03-05 12:16 - 2015-07-14 03:20 - 00279552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll

2016-03-05 12:16 - 2015-07-10 17:47 - 00265480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2016-03-05 12:16 - 2015-07-10 16:52 - 00335248 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2016-03-05 12:16 - 2015-07-10 12:42 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll

2016-03-05 12:13 - 2016-03-05 12:15 - 00000000 ____D C:\Users\Jan\AppData\Local\Comms

2016-03-05 12:09 - 2016-03-05 12:09 - 00004280 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2016-03-05 12:09 - 2016-03-05 12:09 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk

2016-03-05 12:09 - 2016-03-05 12:09 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk

2016-03-05 12:09 - 2016-03-05 12:09 - 00000000 ____D C:\Users\Jan\AppData\Roaming\AVAST Software

2016-03-05 12:08 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files (x86)\Google

2016-03-05 12:08 - 2016-03-23 21:42 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys

2016-03-05 12:08 - 2016-03-23 21:42 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys

2016-03-05 12:08 - 2016-03-05 14:59 - 00000000 ____D C:\Users\Jan\AppData\Local\Google

2016-03-05 12:08 - 2016-03-05 12:09 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

2016-03-05 12:08 - 2016-03-05 12:09 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys

2016-03-05 12:08 - 2016-03-05 12:08 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2016-03-05 12:08 - 2016-03-05 12:08 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys

2016-03-05 12:08 - 2016-03-05 12:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2016-03-05 12:08 - 2016-03-05 12:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys

2016-03-05 12:08 - 2016-03-05 12:08 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr

2016-03-05 12:08 - 2016-03-05 12:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys

2016-03-05 12:07 - 2016-03-25 17:14 - 00000000 ____D C:\Program Files\AVAST Software

2016-03-05 12:06 - 2016-03-05 12:06 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys

2016-03-05 12:05 - 2016-03-25 17:14 - 00000000 ____D C:\ProgramData\AVAST Software

2016-03-05 12:04 - 2016-03-05 12:05 - 201900432 _____ (AVAST Software) C:\Users\Jan\Downloads\avast_free2253_antivirus_setup.exe

2016-03-05 12:03 - 2016-03-05 12:03 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Macromedia

2016-03-05 12:02 - 2016-03-05 12:02 - 00002352 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-03-05 12:02 - 2016-03-05 12:02 - 00000000 ___RD C:\Users\Jan\OneDrive

2016-03-05 12:02 - 2016-03-05 12:02 - 00000000 ____D C:\Users\Jan\AppData\Local\MicrosoftEdge

2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\Users\Jan\AppData\Roaming\ATI

2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\Users\Jan\AppData\Local\ATI

2016-03-05 12:01 - 2016-03-05 12:01 - 00000000 ____D C:\ProgramData\ATI

2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\Program Files\ATI Technologies

2016-03-05 12:00 - 2016-03-05 12:00 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2016-03-05 11:59 - 2016-03-05 11:59 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll

2016-03-05 11:59 - 2016-03-05 11:59 - 00102912 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdWT6.sys

2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\ProgramData\Package Cache

2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\Program Files\AMD

2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 ____D C:\AMD

2016-03-05 11:59 - 2016-03-05 11:59 - 00000000 _____ C:\Windows\ativpsrm.bin

2016-03-05 11:58 - 2016-03-28 21:11 - 01699356 _____ C:\Windows\system32\PerfStringBackup.INI

2016-03-05 11:58 - 2016-03-05 11:58 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 39720944 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 30775792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys

2016-03-05 11:58 - 2016-03-05 11:58 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 10211016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 08982432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 07482560 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap

2016-03-05 11:58 - 2016-03-05 11:58 - 03437632 _____ C:\Windows\system32\atiumd6a.cap

2016-03-05 11:58 - 2016-03-05 11:58 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 01223544 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00833800 _____ C:\Windows\system32\amdicdxx.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00737410 _____ C:\Windows\system32\atiicdxx.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys

2016-03-05 11:58 - 2016-03-05 11:58 - 00662400 _____ C:\Windows\SysWOW64\atiapfxx.blb

2016-03-05 11:58 - 2016-03-05 11:58 - 00662400 _____ C:\Windows\system32\atiapfxx.blb

2016-03-05 11:58 - 2016-03-05 11:58 - 00631792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00471320 _____ C:\Windows\system32\amdmiracast.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00322868 _____ C:\Windows\system32\ativvaxy_vi.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00321200 _____ C:\Windows\system32\ativvaxy_vi_nd.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00255808 _____ C:\Windows\system32\ativvaxy_cz_nd.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00250884 _____ C:\Windows\system32\ativvaxy_FJ.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00249088 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00243696 _____ C:\Windows\system32\clinfo.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00234420 _____ C:\Windows\system32\ativvaxy_cik.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00232752 _____ C:\Windows\system32\ativvaxy_cik_nd.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00204952 _____ C:\Windows\system32\ativvsvl.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00177344 _____ C:\Windows\system32\ativce03.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00175648 _____ C:\Windows\system32\amde31a.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00168944 _____ C:\Windows\system32\atieah64.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00157144 _____ C:\Windows\system32\ativvsva.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00143344 _____ C:\Windows\system32\amdhdl64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00143056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00130064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00100816 _____ C:\Windows\system32\ativce02.dat

2016-03-05 11:58 - 2016-03-05 11:58 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe

2016-03-05 11:58 - 2016-03-05 11:58 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll

2016-03-05 11:58 - 2016-03-05 11:58 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll

2016-03-05 03:15 - 2016-03-05 03:15 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2016-03-05 03:14 - 2016-03-05 03:14 - 00469192 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys

2016-03-05 03:13 - 2016-03-28 20:51 - 00000000 ____D C:\Users\Jan\AppData\Local\Packages

2016-03-05 03:13 - 2016-03-25 17:11 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-03-05 03:13 - 2016-03-25 17:08 - 00000000 ____D C:\Users\Jan

2016-03-05 03:13 - 2016-03-05 12:09 - 00000000 ____D C:\Users\Jan\AppData\Local\VirtualStore

2016-03-05 03:13 - 2016-03-05 03:13 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_defaultuser0_HistoryPrediction.bin

2016-03-05 03:13 - 2016-03-05 03:13 - 00000020 ___SH C:\Users\Jan\ntuser.ini

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Vorlagen

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Startmenü

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Netzwerkumgebung

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Lokale Einstellungen

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Eigene Dateien

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Druckumgebung

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Videos

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Musik

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Documents\Eigene Bilder

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Local\Verlauf

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\AppData\Local\Anwendungsdaten

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 _SHDL C:\Users\Jan\Anwendungsdaten

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Adobe

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Local\TileDataLayer

2016-03-05 03:13 - 2016-03-05 03:13 - 00000000 ____D C:\Users\Jan\AppData\Local\Publishers

2016-03-05 03:10 - 2015-12-01 09:01 - 02115936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2016-03-05 03:07 - 2016-03-05 03:07 - 00000000 ____D C:\Windows\CSC

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Vorlagen

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Startmenü

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Programme

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Vorlagen

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Startmenü

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Dokumente

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2016-03-05 03:06 - 2016-03-05 03:06 - 00000000 _SHDL C:\Dokumente und Einstellungen

2016-03-05 03:05 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2016-03-05 03:03 - 2016-03-05 03:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2016-03-05 03:02 - 2016-03-28 19:41 - 00000000 ____D C:\Windows\Panther
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-03-28 21:11 - 2015-07-10 18:34 - 00733448 _____ C:\Windows\system32\perfh007.dat

2016-03-28 21:11 - 2015-07-10 18:34 - 00146184 _____ C:\Windows\system32\perfc007.dat

2016-03-28 21:11 - 2015-07-10 13:02 - 00000000 ____D C:\Windows\INF

2016-03-28 21:06 - 2015-07-10 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-03-28 21:06 - 2015-07-10 11:05 - 00131072 ___SH C:\Windows\system32\config\BBI

2016-03-28 20:51 - 2015-07-10 13:04 - 00000000 ___HD C:\Program Files\WindowsApps

2016-03-28 20:51 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\AppReadiness

2016-03-25 20:53 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\rescache

2016-03-25 17:39 - 2015-10-30 21:28 - 00000000 ___HD C:\$WINDOWS.~BT

2016-03-25 17:11 - 2015-07-10 14:20 - 00194272 _____ C:\Windows\system32\FNTCACHE.DAT

2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Portable Devices

2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform

2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices

2016-03-25 17:09 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2016-03-24 00:47 - 2015-07-10 12:55 - 00000000 ____D C:\Windows\CbsTemp

2016-03-08 09:10 - 2015-07-10 13:06 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-03-08 09:10 - 2015-07-10 13:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-03-05 12:30 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\SysWOW64\oobe

2016-03-05 12:29 - 2015-07-10 18:44 - 00000000 ____D C:\Program Files\Windows Journal

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___SD C:\Windows\SysWOW64\F12

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___SD C:\Windows\system32\F12

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PurchaseDialog

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\DevicesFlow

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\oobe

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\appraiser

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Provisioning

2016-03-05 12:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\L2Schemas

2016-03-05 12:29 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\SysWOW64\Dism

2016-03-05 12:29 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Dism

2016-03-05 11:57 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\appcompat

2016-03-05 03:13 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PrintDialog

2016-03-05 03:13 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\MiracastView

2016-03-05 03:07 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\spool

2016-03-05 03:06 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT

2016-03-05 03:05 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\FxsTmp

2016-03-05 03:04 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Sysprep

2016-03-05 03:02 - 2015-07-10 13:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template
 

Einige Dateien in TEMP:

====================

C:\Users\Jan\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-03-24 00:45
 

==================== Ende von FRST.txt ============================

Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01

durchgeführt von Jan (2016-03-28 22:19:00)

Gestartet von C:\Users\Jan\Downloads

Windows 10 Pro (X64) (2016-03-05 01:11:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2281809953-3163866376-3614606004-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2281809953-3163866376-3614606004-503 - Limited - Disabled)

Gast (S-1-5-21-2281809953-3163866376-3614606004-501 - Limited - Disabled)

Jan (S-1-5-21-2281809953-3163866376-3614606004-1001 - Administrator - Enabled) => C:\Users\Jan
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{588B7DD2-3480-4A89-A8F6-C6781CBFAD56}) (Version: 1.5 - Eyeo GmbH)

AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Flyff (HKLM-x32\...\{7E210E1C-52A1-40E3-817B-D504E9F64DFA}_is1) (Version: Flyff - WEBZEN Inc)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Mozilla Firefox 45.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 de)) (Version: 45.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1 - Mozilla)

SafeZone Stable 1.48.2066.44 (x32 Version: 1.48.2066.44 - Avast Software) Hidden

Spotify (HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Spotify) (Version: 1.0.25.127.g58007b4c - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {07BE7E64-EB70-4075-A75F-1F35D3DCE413} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-24] (Microsoft Corporation)

Task: {1F49E084-5B06-49B9-B48B-5CC2AEDCE2F5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-05] (AVAST Software)

Task: {36120697-510F-4F8B-91B3-6D9C2DC92180} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {589B567D-4576-4F69-9180-2B2BD586EA7E} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe [2016-03-23] (AVAST Software)

Task: {F0A64389-7FC1-4AD5-A938-43C3C8161E09} - System32\Tasks\SafeZone scheduled Autoupdate 1458918867 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-02-01] (Avast Software)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-03-05 12:18 - 2015-07-15 04:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll

2016-03-05 12:17 - 2015-08-11 11:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll

2016-03-05 12:17 - 2015-09-17 08:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll

2016-03-05 12:16 - 2015-09-17 07:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll

2016-03-05 12:18 - 2015-11-25 06:20 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-03-05 12:18 - 2015-11-25 06:17 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-03-05 12:18 - 2015-11-25 06:17 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-03-05 12:18 - 2015-09-17 07:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-07-10 13:00 - 2015-07-10 18:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll

2016-03-05 12:08 - 2016-03-05 12:08 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2016-03-05 12:08 - 2016-03-05 12:08 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2016-03-28 20:21 - 2016-03-28 20:21 - 02846208 _____ () C:\Program Files\AVAST Software\Avast\defs\16032801\algo.dll

2016-03-05 12:08 - 2016-03-05 12:08 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll

2016-03-05 12:08 - 2016-03-05 12:08 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2016-03-28 21:31 - 2016-03-28 21:31 - 47503472 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libcef.dll

2016-03-28 21:31 - 2016-03-28 21:31 - 01584240 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libglesv2.dll

2016-03-28 21:31 - 2016-03-28 21:31 - 00082032 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2015-07-10 13:04 - 2015-07-10 13:02 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jan\Desktop\NzY1MDcwOTM2ODgxOENFRDhCODY6ZjhhMGU1NmI4NGI5MmUxOTc1ZGYwYTA5ZTI5ZGY1NzI6Ojo6OjA=.jpg

DNS Servers: 82.163.143.171 - 82.163.142.173

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{FBF8CB45-CFAF-462F-8558-782DE9B39278}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{9DAB605D-2031-4FED-9F48-C713D8AAFA5C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{8E2A7B55-7124-4335-B96F-B9770D13BF3D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{21EC1F95-1DC0-4DB1-A7B5-06CB279CF232}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{3CC7776E-CA7F-4707-A14D-00F2F49F28F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{8746B499-1920-47A7-8165-9B70118D3D97}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{7D13FE0D-713B-44E0-B32A-D57B7A6CC979}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{4FF1C0F7-E9BA-4C39-B1F8-5D40403983CC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{1122DE50-834C-4AD6-8290-F15FB84D455A}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{48BFAE3C-C781-4B6B-9C3C-57A9737C1357}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe
 

==================== Wiederherstellungspunkte =========================
 

05-03-2016 03:10:03 Windows Modules Installer

23-03-2016 21:40:52 Windows Modules Installer

28-03-2016 19:45:22 Installed Adblock Plus for IE (32-bit and 64-bit)
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (03/28/2016 09:24:14 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 10f8
 

Startzeit: 01d1892707bb1ef9
 

Beendigungszeit: 28
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
 

Berichts-ID: a5c6287f-f51a-11e5-9bc8-a4badbf255f8
 

Vollständiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (03/28/2016 09:19:49 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1534
 

Startzeit: 01d18925bd43f9c7
 

Beendigungszeit: 107
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
 

Berichts-ID: 0792bf9e-f51a-11e5-9bc8-a4badbf255f8
 

Vollständiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (03/28/2016 09:12:15 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 12a4
 

Startzeit: 01d189259a38913c
 

Beendigungszeit: 32
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
 

Berichts-ID: f9e7a3cf-f518-11e5-9bc8-a4badbf255f8
 

Vollständiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (03/28/2016 09:11:16 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.10240.16603 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 114c
 

Startzeit: 01d1892561d8e294
 

Beendigungszeit: 31
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
 

Berichts-ID: d5f4e888-f518-11e5-9bc8-a4badbf255f8
 

Vollständiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (03/28/2016 09:09:41 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:

hr=0xC004C003

Befehlszeilenargumente:

RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 

Error: (03/28/2016 09:09:40 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )

Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C003

SKU-ID=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 

Error: (03/28/2016 09:09:40 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )

Description: Lizenzerwerb-Fehlerdetails. 

hr=0xC004C003
 

Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:

hr=0x8007139F

Befehlszeilenargumente:

RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 

Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )

Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C003

SKU-ID=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 

Error: (03/28/2016 09:07:13 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )

Description: Lizenzerwerb-Fehlerdetails. 

hr=0xC004C003
 
 

Systemfehler:

=============

Error: (03/28/2016 10:13:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20.
 

Error: (03/28/2016 09:05:57 PM) (Source: Service Control Manager) (EventID: 7043) (User: )

Description: Der Dienst Gruppenrichtlinienclient konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
 

Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_Session1 erreicht.
 

Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdatenspeicher _Session1 erreicht.
 

Error: (03/28/2016 09:05:22 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Benutzerdatenspeicher _Session1" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (03/28/2016 09:05:14 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-D54262M)

Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca
 

Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/28/2016 09:05:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz

Prozentuale Nutzung des RAM: 46%

Installierter physikalischer RAM: 3959.11 MB

Verfügbarer physikalischer RAM: 2122.89 MB

Summe virtueller Speicher: 5047.11 MB

Verfügbarer virtueller Speicher: 2880.57 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:487.74 GB) (Free:443.35 GB) NTFS

Drive d: () (Removable) (Total:7.44 GB) (Free:3.54 GB) NTFS

Drive e: () (Fixed) (Total:31.98 GB) (Free:9.01 GB) FAT32

Drive f: () (Fixed) (Total:443.23 GB) (Free:442.53 GB) NTFS

Drive k: (6517000001300) (CDROM) (Total:0.21 GB) (Free:0 GB) UDF
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 48000000)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=487.7 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

Partition 4: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS)
 

========================================================

Disk: 5 (Size: 7.4 GB) (Disk ID: 00063839)

Partition 1: (Active) - (Size=7.4 GB) - (Type=07 NTFS)
 

========================================================

Disk: 6 (Size: 298.1 GB) (Disk ID: 00DF4685)

Partition 1: (Not Active) - (Size=32 GB) - (Type=0C)
 

==================== Ende von Addition.txt ============================

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hallo Cosinus,

erstmal vielen Dank für deine schnelle Antwort!

Weitere Logs habe ich momentan nicht und neue Scans soll ich ja nicht machen, richtig?

Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel. Wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen.

Gib Bescheid wenn Avast weg ist.

Avast deinstallieren, trotz dass ich momentan keine Alternative auf dem Rechner habe und gegebenenfalls im Rahmen der Behebung meines Problems noch Downloads vornehmen muss (auch wenn Avast da nur sehr begrenzt schützt)?

Kurzes "Ja" reicht aus, sollte das der Fall sein. Dann werde ich das sofort tun...^^

Dein tolles Avast konnte dich nicht vor der Junkware beschützen, aber nun hast du Angst wenn du für den Zeitraum der Bereinigung kein Avast hast? :wtf:

Hast ja Recht :rolleyes:

Ist deinstalliert.

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Logfile nach dem ersten Scan mit 2 Malware Funden.

Code:

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 10.0.9200 Windows 10 x64
 

Account is Administrative
 

Internet Explorer version: 11.0.10240.16724
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED

CPU speed: 3.059000 GHz

Memory total: 4151431168, free: 2155233280
 

Downloaded database version: v2016.03.29.03

Downloaded database version: v2016.03.12.01

Downloaded database version: v2016.03.24.01

=======================================

Initializing...

Driver version: 0.3.0.4

------------ Kernel report ------------

     03/29/2016 14:47:26

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kd.dll

\SystemRoot\system32\mcupdate_GenuineIntel.dll

\SystemRoot\System32\drivers\werkernel.sys

\SystemRoot\System32\drivers\CLFS.SYS

\SystemRoot\System32\drivers\tm.sys

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\BOOTVID.dll

\SystemRoot\System32\drivers\cmimcext.sys

\SystemRoot\System32\drivers\ntosext.sys

\SystemRoot\system32\CI.dll

\SystemRoot\System32\drivers\msrpc.sys

\SystemRoot\System32\drivers\FLTMGR.SYS

\SystemRoot\System32\drivers\ksecdd.sys

\SystemRoot\System32\drivers\clipsp.sys

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\System32\Drivers\acpiex.sys

\SystemRoot\System32\Drivers\WppRecorder.sys

\SystemRoot\System32\Drivers\cng.sys

\SystemRoot\System32\drivers\ACPI.sys

\SystemRoot\System32\drivers\WMILIB.SYS

\SystemRoot\system32\drivers\WindowsTrustedRT.sys

\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\drivers\msisadrv.sys

\SystemRoot\System32\drivers\pci.sys

\SystemRoot\System32\drivers\vdrvroot.sys

\SystemRoot\system32\drivers\pdc.sys

\SystemRoot\system32\drivers\CEA.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\System32\drivers\pciide.sys

\SystemRoot\System32\drivers\PCIIDEX.SYS

\SystemRoot\System32\drivers\spaceport.sys

\SystemRoot\System32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\System32\drivers\atapi.sys

\SystemRoot\System32\drivers\ataport.SYS

\SystemRoot\System32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\Wof.sys

\SystemRoot\system32\drivers\WdFilter.sys

\SystemRoot\System32\Drivers\NTFS.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\System32\drivers\wfplwfs.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\System32\drivers\volsnap.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\System32\drivers\disk.sys

\SystemRoot\System32\drivers\CLASSPNP.SYS

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\drivers\cdrom.sys

\SystemRoot\system32\drivers\filecrypt.sys

\SystemRoot\system32\drivers\tbs.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\BasicDisplay.sys

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\BasicRender.sys

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\drivers\afd.sys

\SystemRoot\System32\drivers\vwififlt.sys

\SystemRoot\System32\drivers\pacer.sys

\SystemRoot\system32\drivers\netbios.sys

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\csc.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\System32\drivers\npsvctrig.sys

\SystemRoot\System32\drivers\mssmbios.sys

\SystemRoot\System32\drivers\gpuenergydrv.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\DRIVERS\ahcache.sys

\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys

\SystemRoot\System32\drivers\kdnic.sys

\SystemRoot\System32\drivers\umbus.sys

\SystemRoot\System32\drivers\intelppm.sys

\SystemRoot\system32\DRIVERS\atikmpag.sys

\SystemRoot\system32\DRIVERS\atikmdag.sys

\SystemRoot\System32\drivers\HDAudBus.sys

\SystemRoot\System32\drivers\portcls.sys

\SystemRoot\System32\drivers\drmk.sys

\SystemRoot\System32\drivers\ks.sys

\SystemRoot\System32\drivers\HECIx64.sys

\SystemRoot\System32\drivers\usbehci.sys

\SystemRoot\System32\drivers\USBPORT.SYS

\SystemRoot\System32\drivers\k57nd60a.sys

\SystemRoot\System32\drivers\NdisVirtualBus.sys

\SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys

\SystemRoot\System32\drivers\rdpbus.sys

\SystemRoot\System32\drivers\usbhub.sys

\SystemRoot\System32\drivers\USBD.SYS

\SystemRoot\system32\drivers\AtihdWT6.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\system32\DRIVERS\HdAudio.sys

\SystemRoot\System32\drivers\usbccgp.sys

\SystemRoot\System32\drivers\hidusb.sys

\SystemRoot\System32\drivers\HIDCLASS.SYS

\SystemRoot\System32\drivers\HIDPARSE.SYS

\SystemRoot\System32\drivers\mouhid.sys

\SystemRoot\System32\drivers\mouclass.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\win32kfull.sys

\SystemRoot\System32\win32kbase.sys

\SystemRoot\System32\drivers\USBSTOR.SYS

\SystemRoot\System32\drivers\kbdhid.sys

\SystemRoot\System32\drivers\kbdclass.sys

\SystemRoot\System32\drivers\dxgmms1.sys

\SystemRoot\System32\drivers\dxgmms2.sys

\SystemRoot\System32\Drivers\fastfat.SYS

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\System32\drivers\monitor.sys

\SystemRoot\system32\drivers\luafv.sys

\SystemRoot\system32\drivers\storqosflt.sys

\SystemRoot\system32\drivers\WudfPf.sys

\SystemRoot\system32\DRIVERS\WUDFRd.sys

\SystemRoot\System32\drivers\WpdUpFltr.sys

\SystemRoot\system32\drivers\mslldp.sys

\SystemRoot\system32\drivers\lltdio.sys

\SystemRoot\system32\drivers\rspndr.sys

\SystemRoot\system32\DRIVERS\udfs.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\System32\Drivers\dump_dumpata.sys

\SystemRoot\System32\Drivers\dump_atapi.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\SystemRoot\System32\drivers\mpsdrv.sys

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\system32\drivers\Ndu.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\system32\drivers\peauth.sys

\SystemRoot\system32\drivers\mmcss.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\System32\DRIVERS\srv.sys

\SystemRoot\System32\drivers\tunnel.sys

\SystemRoot\System32\drivers\umpass.sys

\SystemRoot\System32\drivers\condrv.sys

\SystemRoot\system32\Drivers\WdNisDrv.sys

\??\C:\Windows\system32\drivers\mbamchameleon.sys

\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys

----------- End -----------

Done!
 

Scan started

Database versions:

  main:    v2016.03.29.03

  rootkit: v2016.03.12.01
 

<<<2>>>

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xffffe00102cfb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe00102cffb10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe00102cfb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

DevicePointer: 0xffffe00102b38040, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffffe00102b21060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\

------------ End ----------

Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...

Done!

Drive 0

This is a System drive

Scanning MBR on drive 0...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 48000000
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 204800

    Partition is bootable

    Partition file system is NTFS
 

    Partition 1 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 206848  Numsec = 1022873600

    Partition is not bootable

    Partition file system is NTFS
 

    Partition 2 type is Other (0x27)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1023080448  Numsec = 921600

    Partition is not bootable

    Partition file system is NTFS
 

    Partition 3 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1024002048  Numsec = 929517568

    Partition is not bootable

    Partition file system is NTFS
 

Disk Size: 1000204886016 bytes

Sector size: 512 bytes
 

Done!

Physical Sector Size: 0

Drive: 1, DevicePointer: 0xffffe001032d5610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe0010395a040, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001032d5610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001032d2b10, DeviceName: \Device\0000003a\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 2, DevicePointer: 0xffffe0010395a610, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe00102badb10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe0010395a610, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\

DevicePointer: 0xffffe00103520b10, DeviceName: \Device\0000003b\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 3, DevicePointer: 0xffffe001032c1060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001032c1b10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001032c1060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001032c2b10, DeviceName: \Device\0000003c\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 4, DevicePointer: 0xffffe001032bf060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001032bfb10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001032bf060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001032d5060, DeviceName: \Device\0000003d\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 512

Drive: 5, DevicePointer: 0xffffe001032f8060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001032f8b10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001032f8060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001034fa060, DeviceName: \Device\0000003e\, DriverName: \Driver\USBSTOR\

------------ End ----------

Alternate DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 5

Scanning MBR on drive 5...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 63839
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 15603712

    Partition is bootable

    Partition file system is NTFS
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 7990149120 bytes

Sector size: 512 bytes
 

Done!

Physical Sector Size: 512

Drive: 6, DevicePointer: 0xffffe0010149a060, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001014a1b10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe0010149a060, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001014ac440, DeviceName: \Device\00000045\, DriverName: \Driver\USBSTOR\

------------ End ----------

Alternate DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 6

Scanning MBR on drive 6...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: DF4685
 

Partition information:
 

    Partition 0 type is Other (0xc)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 63  Numsec = 67108801

    Partition is not bootable

    Partition file system is FAT32
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 320072933376 bytes

Sector size: 512 bytes
 

Done!

File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)

Infected: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{8b736c68-f413-4e9c-8814-e1131775c2b1}|NameServer --> [Trojan.DNSChanger.DNSRst]

Infected: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer --> [Trojan.DNSChanger.DNSRst]

Scan finished

Creating System Restore point...

Cleaning up...

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action reg.exe...

Success!

Queuing an action reg.exe

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Executing an action cmd.exe...

Success!

Removal scheduling successful. System shutdown needed.

System shutdown occurred

=======================================
 
 

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 10.0.10240 Windows 10 x64
 

Account is Administrative
 

Internet Explorer version: 11.0.10240.16724
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED

CPU speed: 3.059000 GHz

Memory total: 4151431168, free: 2717261824

Logfile nach dem zweiten Scan ohne Fund.

Code:

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 10.0.9200 Windows 10 x64
 

Account is Administrative
 

Internet Explorer version: 11.0.10240.16724
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED

CPU speed: 3.059000 GHz

Memory total: 4151431168, free: 2788978688
 

Downloaded database version: v2016.03.29.03

Downloaded database version: v2016.03.12.01

Downloaded database version: v2016.03.24.01

=======================================

Initializing...

Driver version: 0.3.0.4

------------ Kernel report ------------

     03/29/2016 15:05:07

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kd.dll

\SystemRoot\system32\mcupdate_GenuineIntel.dll

\SystemRoot\System32\drivers\werkernel.sys

\SystemRoot\System32\drivers\CLFS.SYS

\SystemRoot\System32\drivers\tm.sys

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\BOOTVID.dll

\SystemRoot\System32\drivers\cmimcext.sys

\SystemRoot\System32\drivers\ntosext.sys

\SystemRoot\system32\CI.dll

\SystemRoot\System32\drivers\msrpc.sys

\SystemRoot\System32\drivers\FLTMGR.SYS

\SystemRoot\System32\drivers\ksecdd.sys

\SystemRoot\System32\drivers\clipsp.sys

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\System32\Drivers\acpiex.sys

\SystemRoot\System32\Drivers\WppRecorder.sys

\SystemRoot\System32\Drivers\cng.sys

\SystemRoot\System32\drivers\ACPI.sys

\SystemRoot\System32\drivers\WMILIB.SYS

\SystemRoot\system32\drivers\WindowsTrustedRT.sys

\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys

\SystemRoot\system32\drivers\CLASSPNP.SYS

\SystemRoot\System32\drivers\imofugc.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\drivers\msisadrv.sys

\SystemRoot\System32\drivers\pci.sys

\SystemRoot\System32\drivers\vdrvroot.sys

\SystemRoot\system32\drivers\pdc.sys

\SystemRoot\system32\drivers\CEA.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\System32\drivers\pciide.sys

\SystemRoot\System32\drivers\PCIIDEX.SYS

\SystemRoot\System32\drivers\spaceport.sys

\SystemRoot\System32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\System32\drivers\atapi.sys

\SystemRoot\System32\drivers\ataport.SYS

\SystemRoot\System32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\Wof.sys

\SystemRoot\system32\drivers\WdFilter.sys

\SystemRoot\System32\Drivers\NTFS.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\System32\drivers\wfplwfs.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\System32\drivers\volsnap.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\System32\drivers\disk.sys

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\drivers\cdrom.sys

\SystemRoot\system32\drivers\filecrypt.sys

\SystemRoot\system32\drivers\tbs.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\BasicDisplay.sys

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\BasicRender.sys

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\drivers\afd.sys

\SystemRoot\System32\drivers\vwififlt.sys

\SystemRoot\System32\drivers\pacer.sys

\SystemRoot\system32\drivers\netbios.sys

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\csc.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\System32\drivers\npsvctrig.sys

\SystemRoot\System32\drivers\mssmbios.sys

\SystemRoot\System32\drivers\gpuenergydrv.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\DRIVERS\ahcache.sys

\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys

\SystemRoot\System32\drivers\kdnic.sys

\SystemRoot\System32\drivers\umbus.sys

\SystemRoot\System32\drivers\intelppm.sys

\SystemRoot\system32\DRIVERS\atikmpag.sys

\SystemRoot\system32\DRIVERS\atikmdag.sys

\SystemRoot\System32\drivers\HDAudBus.sys

\SystemRoot\System32\drivers\portcls.sys

\SystemRoot\System32\drivers\drmk.sys

\SystemRoot\System32\drivers\ks.sys

\SystemRoot\System32\drivers\HECIx64.sys

\SystemRoot\System32\drivers\usbehci.sys

\SystemRoot\System32\drivers\USBPORT.SYS

\SystemRoot\System32\drivers\k57nd60a.sys

\SystemRoot\System32\drivers\NdisVirtualBus.sys

\SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys

\SystemRoot\System32\drivers\rdpbus.sys

\SystemRoot\System32\drivers\usbhub.sys

\SystemRoot\System32\drivers\USBD.SYS

\SystemRoot\system32\drivers\AtihdWT6.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\system32\DRIVERS\HdAudio.sys

\SystemRoot\System32\drivers\usbccgp.sys

\SystemRoot\System32\drivers\hidusb.sys

\SystemRoot\System32\drivers\HIDCLASS.SYS

\SystemRoot\System32\drivers\HIDPARSE.SYS

\SystemRoot\System32\drivers\mouhid.sys

\SystemRoot\System32\drivers\mouclass.sys

\SystemRoot\System32\drivers\USBSTOR.SYS

\SystemRoot\system32\DRIVERS\udfs.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\win32kfull.sys

\SystemRoot\System32\win32kbase.sys

\SystemRoot\System32\drivers\kbdhid.sys

\SystemRoot\System32\drivers\kbdclass.sys

\SystemRoot\System32\drivers\dxgmms1.sys

\SystemRoot\System32\Drivers\fastfat.SYS

\SystemRoot\System32\drivers\dxgmms2.sys

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\System32\drivers\monitor.sys

\SystemRoot\System32\Drivers\dump_dumpata.sys

\SystemRoot\System32\Drivers\dump_atapi.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\system32\drivers\luafv.sys

\SystemRoot\system32\drivers\storqosflt.sys

\SystemRoot\system32\drivers\WudfPf.sys

\SystemRoot\system32\DRIVERS\WUDFRd.sys

\SystemRoot\System32\drivers\WpdUpFltr.sys

\SystemRoot\system32\drivers\mslldp.sys

\SystemRoot\system32\drivers\lltdio.sys

\SystemRoot\system32\drivers\rspndr.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\SystemRoot\System32\drivers\mpsdrv.sys

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\system32\drivers\Ndu.sys

\SystemRoot\system32\drivers\mmcss.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\system32\drivers\peauth.sys

\SystemRoot\System32\DRIVERS\srv.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\System32\drivers\tunnel.sys

\SystemRoot\System32\drivers\umpass.sys

\SystemRoot\system32\Drivers\WdNisDrv.sys

\SystemRoot\System32\drivers\condrv.sys

\??\C:\Windows\system32\drivers\mbamchameleon.sys

\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys

----------- End -----------

Done!
 

Scan started

Database versions:

  main:    v2016.03.29.03

  rootkit: v2016.03.12.01
 

<<<2>>>

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xffffe001fbacf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fbacfb10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fbacf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fafeae40, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xffffe001fb8c3060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\

------------ End ----------

Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...

Done!

Drive 0

This is a System drive

Scanning MBR on drive 0...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 48000000
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 204800

    Partition is bootable

    Partition file system is NTFS
 

    Partition 1 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 206848  Numsec = 1022873600

    Partition is not bootable

    Partition file system is NTFS
 

    Partition 2 type is Other (0x27)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1023080448  Numsec = 921600

    Partition is not bootable

    Partition file system is NTFS
 

    Partition 3 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 1024002048  Numsec = 929517568

    Partition is not bootable

    Partition file system is NTFS
 

Disk Size: 1000204886016 bytes

Sector size: 512 bytes
 

Done!

Physical Sector Size: 0

Drive: 1, DevicePointer: 0xffffe001fc95e610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fc95d040, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fc95e610, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc966b10, DeviceName: \Device\0000003a\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 2, DevicePointer: 0xffffe001fb8c0060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fb8c0b10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fb8c0060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc9628c0, DeviceName: \Device\0000003b\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 3, DevicePointer: 0xffffe001fc949060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fc947040, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fc949060, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc960060, DeviceName: \Device\0000003c\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 0

Drive: 4, DevicePointer: 0xffffe001fc95d610, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fc947b10, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fc95d610, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc95f060, DeviceName: \Device\0000003d\, DriverName: \Driver\USBSTOR\

------------ End ----------

Physical Sector Size: 512

Drive: 5, DevicePointer: 0xffffe001fc948060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fc948aa0, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fc948060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc946b10, DeviceName: \Device\0000003e\, DriverName: \Driver\USBSTOR\

------------ End ----------

Alternate DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 5

Scanning MBR on drive 5...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 63839
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 15603712

    Partition is bootable

    Partition file system is NTFS
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 7990149120 bytes

Sector size: 512 bytes
 

Done!

Physical Sector Size: 512

Drive: 6, DevicePointer: 0xffffe001fc98f610, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

--------- Disk Stack ------

DevicePointer: 0xffffe001fc98e040, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xffffe001fc98f610, DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

DevicePointer: 0xffffe001fc98f060, DeviceName: \Device\00000045\, DriverName: \Driver\USBSTOR\

------------ End ----------

Alternate DeviceName: \Device\Harddisk6\DR6\, DriverName: \Driver\disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 6

Scanning MBR on drive 6...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: DF4685
 

Partition information:
 

    Partition 0 type is Other (0xc)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 63  Numsec = 67108801

    Partition is not bootable

    Partition file system is FAT32
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 320072933376 bytes

Sector size: 512 bytes
 

Done!

File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)

Scan finished

=======================================
 
 

Removal queue found; removal started

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-206848-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-2-1023080448-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-3-1024002048-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-5-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-5-0-2048-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-5-r.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-6-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-6-0-63-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-6-r.mbam...

Removal finished

Was ist als nächstes zu tun?

:dankeschoen:

Anleitung richtig lesen. Richtiges Log posten :D

Sorry :twak: neuer Versuch!

Log Nr. 1

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.03.29.03

  rootkit: v2016.03.12.01
 

Windows 10 x64 NTFS

Internet Explorer 11.0.10240.16724

Jan :: DESKTOP-D54262M [administrator]
 

29.03.2016 14:47:37

mbar-log-2016-03-29 (14-47-37).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 333618

Time elapsed: 12 minute(s), 11 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 1

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{8b736c68-f413-4e9c-8814-e1131775c2b1}|NameServer (Trojan.DNSChanger.DNSRst) -> Data: 82.163.143.171 82.163.142.173 -> Delete on reboot. [5334612c7e1b3501f5fd90fabc4814ec]
 

Registry Data Items Detected: 1

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer (Trojan.DNSChanger.DNSRst) -> Bad: (82.163.143.171 82.163.142.173) Good: (8.8.8.8) -> Replace on reboot. [493efc91c2d784b2835545e8e2230ef2]
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Log Nr. 2

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.03.29.03

  rootkit: v2016.03.12.01
 

Windows 10 x64 NTFS

Internet Explorer 11.0.10240.16724

Jan :: DESKTOP-D54262M [administrator]
 

29.03.2016 15:05:20

mbar-log-2016-03-29 (15-05-20).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 333441

Time elapsed: 11 minute(s), 1 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

:heilig:

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

adwCleaner-Log

Code:

# AdwCleaner v5.107 - Bericht erstellt am 29/03/2016 um 15:47:31

# Aktualisiert am 28/03/2016 von Xplode

# Datenbank : 2016-03-28.2 [Server]

# Betriebssystem : Windows 10 Pro  (x64)

# Benutzername : Jan - DESKTOP-D54262M

# Gestartet von : C:\Users\Jan\Desktop\AdwCleaner_5.107.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 

[-] Ordner Gelöscht : C:\ProgramData\245bef91

[-] Ordner Gelöscht : C:\ProgramData\974b174d-4113-1

[-] Ordner Gelöscht : C:\ProgramData\974b174d-77c1-0

[-] Ordner Gelöscht : C:\ProgramData\e5e9eaf1-31b1-0

[-] Ordner Gelöscht : C:\ProgramData\{00519dfc-212c-1}

[-] Ordner Gelöscht : C:\ProgramData\{00ff91ce-212c-0}

[-] Ordner Gelöscht : C:\ProgramData\{04895d5a-012c-0}

[-] Ordner Gelöscht : C:\ProgramData\{1b801477-312c-1}

[-] Ordner Gelöscht : C:\Users\Jan\AppData\Local\SearchProtect

[-] Ordner Gelöscht : C:\Users\Jan\AppData\Local\SecurityUtility
 

***** [ Dateien ] *****
 

[-] Datei Gelöscht : C:\END
 

***** [ DLLs ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Wert GGelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564

[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WebBar

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\bestpriceninja.com

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.bestpriceninja.com

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\utop.it

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\d19tqk5t6qcjac.cloudfront.net

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pstatic.eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\d19tqk5t6qcjac.cloudfront.net

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pstatic.eshopcomp.com

[-] Schlüssel Gelöscht : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C1].txt - [4549 Bytes] - [29/03/2016 15:47:31]

C:\AdwCleaner\AdwCleaner[S3].txt - [4500 Bytes] - [29/03/2016 15:46:33]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4695 Bytes] ##########

JRT.txt

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.4 (03.14.2016)

Operating System: Windows 10 Pro x64 

Ran by Jan (Administrator) on 29.03.2016 at 15:57:47,45

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 1 
 

Successfully deleted: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default\extensions\staged (Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 29.03.2016 at 15:58:26,09

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Frischer FRST-Log (Part 1)

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01

durchgeführt von Jan (Administrator) auf DESKTOP-D54262M (29-03-2016 16:00:10)

Gestartet von C:\Users\Jan\Desktop

Geladene Profile: Jan (Verfügbare Profile: Jan)

Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Edge)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify Web Helper] => C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-28] (Spotify Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Spotify] => C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe [6805616 2016-03-28] (Spotify Ltd)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [149504 2015-07-10] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4

Tcpip\..\Interfaces\{8b736c68-f413-4e9c-8814-e1131775c2b1}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKU\S-1-5-21-2281809953-3163866376-3614606004-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)

BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)

Toolbar: HKU\S-1-5-21-2281809953-3163866376-3614606004-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\sy339dux.default

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-16] [ist nicht signiert]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4192344 2016-03-09] (INCA Internet Co., Ltd.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2016-03-05] (Advanced Micro Devices)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-03-29 15:58 - 2016-03-29 15:58 - 00000666 _____ C:\Users\Jan\Desktop\JRT.txt

2016-03-29 15:55 - 2016-03-29 15:55 - 00004781 _____ C:\Users\Jan\Desktop\AdwCleaner[C1].txt

2016-03-29 15:49 - 2016-03-29 15:49 - 00016148 _____ C:\Windows\system32\DESKTOP-D54262M_Jan_HistoryPrediction.bin

2016-03-29 15:43 - 2016-03-29 15:55 - 01610352 _____ (Malwarebytes) C:\Users\Jan\Desktop\JRT.exe

2016-03-29 15:40 - 2016-03-29 15:40 - 03102208 _____ C:\Users\Jan\Desktop\AdwCleaner_5.107.exe

2016-03-29 14:47 - 2016-03-29 15:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-03-29 14:47 - 2016-03-29 15:05 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-03-29 14:47 - 2016-03-29 14:47 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-03-29 14:46 - 2016-03-29 15:28 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-03-29 14:45 - 2016-03-29 15:29 - 00000000 ____D C:\Users\Jan\Desktop\MBAR

2016-03-29 14:15 - 2016-03-29 14:15 - 00000000 ____D C:\Users\Jan\Tracing

2016-03-29 14:14 - 2016-03-29 15:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype

2016-03-29 14:14 - 2016-03-29 14:14 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk

2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ___RD C:\Program Files (x86)\Skype

2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ____D C:\ProgramData\Skype

2016-03-29 14:14 - 2016-03-29 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2016-03-29 14:13 - 2016-03-29 14:13 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Jan\Downloads\SkypeSetup.exe

2016-03-29 13:54 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-03-28 22:19 - 2016-03-28 22:19 - 00019554 _____ C:\Users\Jan\Desktop\Addition.txt

2016-03-28 22:18 - 2016-03-29 16:00 - 00005922 _____ C:\Users\Jan\Desktop\FRST.txt

2016-03-28 22:16 - 2016-03-28 22:16 - 02374144 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe

2016-03-28 21:36 - 2016-03-29 15:47 - 00000000 ____D C:\AdwCleaner

2016-03-28 21:36 - 2016-03-28 21:36 - 01538560 _____ C:\Users\Jan\Downloads\AdwCleaner_5.106.exe

2016-03-28 21:31 - 2016-03-29 13:04 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify

2016-03-28 21:31 - 2016-03-29 13:04 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify

2016-03-28 21:31 - 2016-03-28 21:31 - 00001840 _____ C:\Users\Jan\Desktop\Spotify.lnk

2016-03-28 21:31 - 2016-03-28 21:31 - 00001826 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2016-03-28 21:29 - 2016-03-28 21:31 - 00350936 _____ (Spotify Ltd) C:\Users\Jan\Downloads\SpotifySetup.exe

2016-03-28 21:23 - 2016-03-28 21:23 - 01475080 _____ C:\Users\Jan\Downloads\Spotify - CHIP-Installer.exe

2016-03-28 20:56 - 2016-03-28 20:55 - 05006864 _____ (AVAST Software) C:\Users\Jan\Downloads\Avast_Setup [1].exe

2016-03-28 20:55 - 2016-03-28 20:55 - 01006024 _____ (Cotuf ) C:\Users\Jan\Downloads\Avast_Setup.exe

2016-03-28 20:08 - 2016-03-29 16:00 - 00000000 ____D C:\FRST

2016-03-28 19:50 - 2016-03-28 19:50 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2016-03-28 19:50 - 2016-03-28 19:50 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Mozilla

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Users\Jan\AppData\Local\Mozilla

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-03-28 19:50 - 2016-03-28 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-03-28 19:49 - 2016-03-28 19:49 - 00242376 _____ C:\Users\Jan\Downloads\Firefox Setup Stub 45.0.1.exe

2016-03-28 19:47 - 2016-03-28 19:47 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2016-03-28 19:44 - 2016-03-28 19:44 - 06468104 _____ ( ) C:\Users\Jan\Downloads\adblockplusie-1.5.exe

2016-03-28 19:40 - 2016-03-28 19:40 - 06868672 _____ (Piriform Ltd) C:\Users\Jan\Downloads\ccsetup516.exe

2016-03-28 19:40 - 2016-03-28 19:40 - 00002866 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2016-03-28 19:40 - 2016-03-28 19:40 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-03-28 19:40 - 2016-03-28 19:40 - 00000000 ____D C:\Program Files\CCleaner

2016-03-25 20:52 - 2016-03-25 20:52 - 00000000 ____D C:\Windows\system32\SleepStudy

2016-03-24 00:45 - 2016-03-24 00:45 - 00000000 ____D C:\Users\Jan\AppData\Local\PeerDistRepub

2016-03-23 22:20 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-03-23 22:20 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2016-03-23 22:20 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2016-03-23 22:20 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe

2016-03-23 22:20 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2016-03-23 22:20 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-03-23 22:20 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-03-23 22:20 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-03-23 22:20 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-03-23 22:20 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL

2016-03-23 22:20 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll

2016-03-23 22:20 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll

2016-03-23 22:20 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll

2016-03-23 22:20 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll

2016-03-23 22:20 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll

2016-03-23 22:20 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-03-23 22:20 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-03-23 22:20 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe

2016-03-23 22:20 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-03-23 22:20 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-03-23 22:20 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2016-03-23 22:20 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2016-03-23 22:20 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe

2016-03-23 22:20 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL

2016-03-23 22:20 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll

2016-03-23 22:20 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll

2016-03-23 22:20 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll

2016-03-23 22:20 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2016-03-23 22:20 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe

2016-03-23 22:20 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll

2016-03-23 22:20 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe

2016-03-23 22:20 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2016-03-23 22:20 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll

2016-03-23 22:20 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll

2016-03-23 22:20 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-03-23 22:20 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2016-03-23 22:20 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-03-23 22:20 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2016-03-23 22:20 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll

2016-03-23 22:20 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2016-03-23 22:20 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe

2016-03-23 22:20 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2016-03-23 22:20 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll

2016-03-23 22:20 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys

2016-03-23 22:20 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll

2016-03-23 22:20 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-03-23 22:20 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-03-23 22:20 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2016-03-23 22:20 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll

2016-03-23 22:20 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-03-23 22:20 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2016-03-23 22:20 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe

2016-03-23 22:20 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll

2016-03-23 22:20 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2016-03-23 22:20 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll

2016-03-23 22:20 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2016-03-23 22:20 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2016-03-23 22:20 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-03-23 22:20 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2016-03-23 22:20 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe

2016-03-23 22:20 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll

2016-03-23 22:20 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-03-23 22:20 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2016-03-23 22:20 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-03-23 22:20 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2016-03-23 22:20 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll

2016-03-23 22:20 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll

2016-03-23 22:20 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2016-03-23 22:20 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2016-03-23 22:20 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe

2016-03-23 22:20 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll

2016-03-23 22:20 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll

2016-03-23 22:20 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll

2016-03-23 22:20 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2016-03-23 22:20 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2016-03-23 22:20 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll

2016-03-23 22:20 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2016-03-23 22:20 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2016-03-23 22:20 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe

2016-03-23 22:20 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-03-23 22:20 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2016-03-23 22:20 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2016-03-23 21:42 - 2016-03-23 21:42 - 00003040 _____ C:\Windows\System32\Tasks\avast! Windows 10 Start Menu helper

2016-03-23 21:41 - 2016-03-23 21:41 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2016-03-23 21:41 - 2016-03-09 12:51 - 04192344 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des

2016-03-23 21:41 - 2004-12-30 14:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys

2016-03-23 21:41 - 2003-07-15 23:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd

2016-03-05 15:53 - 2016-03-05 15:55 - 00000000 ____D C:\Users\Jan\Desktop\CSGO Config

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WinRAR

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-03-05 15:52 - 2016-03-05 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-03-05 15:51 - 2016-03-05 15:52 - 00000000 ____D C:\Program Files\WinRAR

2016-03-05 15:51 - 2016-03-05 15:51 - 02114664 _____ C:\Users\Jan\Downloads\winrar-x64-531d.exe

2016-03-05 15:50 - 2016-03-05 15:52 - 00005100 _____ C:\Users\Jan\Downloads\config.rar

2016-03-05 15:12 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2016-03-05 15:12 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2016-03-05 15:12 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2016-03-05 15:12 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2016-03-05 15:12 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2016-03-05 15:12 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2016-03-05 15:12 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2016-03-05 15:12 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2016-03-05 15:12 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2016-03-05 15:12 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2016-03-05 15:12 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2016-03-05 15:12 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2016-03-05 15:12 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2016-03-05 15:12 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2016-03-05 15:12 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2016-03-05 15:12 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2016-03-05 15:12 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2016-03-05 15:12 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2016-03-05 15:12 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2016-03-05 15:12 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2016-03-05 15:12 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2016-03-05 15:12 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2016-03-05 15:12 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2016-03-05 15:12 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2016-03-05 15:12 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2016-03-05 15:12 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2016-03-05 15:12 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2016-03-05 15:12 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2016-03-05 15:12 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2016-03-05 15:12 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2016-03-05 15:12 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2016-03-05 15:12 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2016-03-05 15:12 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2016-03-05 15:12 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2016-03-05 15:12 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2016-03-05 15:12 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2016-03-05 15:12 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2016-03-05 15:12 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2016-03-05 15:12 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2016-03-05 15:12 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2016-03-05 15:12 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2016-03-05 15:12 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2016-03-05 15:12 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2016-03-05 15:12 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2016-03-05 15:12 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2016-03-05 15:12 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2016-03-05 15:12 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2016-03-05 15:12 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2016-03-05 15:12 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2016-03-05 15:12 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2016-03-05 15:12 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2016-03-05 15:12 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2016-03-05 15:12 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2016-03-05 15:12 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2016-03-05 15:12 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2016-03-05 15:12 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2016-03-05 15:12 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2016-03-05 15:12 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2016-03-05 15:12 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2016-03-05 15:12 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2016-03-05 15:12 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2016-03-05 15:12 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2016-03-05 15:12 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2016-03-05 15:12 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2016-03-05 15:12 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2016-03-05 15:12 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2016-03-05 15:12 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2016-03-05 15:12 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2016-03-05 15:12 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2016-03-05 15:12 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2016-03-05 15:12 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2016-03-05 15:12 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2016-03-05 15:12 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2016-03-05 15:12 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2016-03-05 15:12 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2016-03-05 15:12 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2016-03-05 15:12 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2016-03-05 15:12 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2016-03-05 15:12 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2016-03-05 15:12 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2016-03-05 15:12 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2016-03-05 15:12 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2016-03-05 14:57 - 2016-03-23 22:06 - 00000000 ____D C:\Program Files\Google

2016-03-05 14:56 - 2016-03-05 14:56 - 00987728 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleToolbarSetup.exe

2016-03-05 13:25 - 2016-03-05 13:25 - 00001509 _____ C:\Users\Public\Desktop\Flyff.lnk

2016-03-05 13:25 - 2016-03-05 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flyff

2016-03-05 13:21 - 2016-03-05 13:21 - 00000000 ____D C:\Program Files\Webzen

2016-03-05 13:12 - 2016-03-05 13:12 - 05810184 _____ C:\Users\Jan\Downloads\Flyff_de_Downloader.exe

2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\ProgramData\WEBZEN

2016-03-05 13:12 - 2016-03-05 13:12 - 00000000 ____D C:\download

2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\Steam

2016-03-05 13:08 - 2016-03-05 13:08 - 00000000 ____D C:\Users\Jan\AppData\Local\CEF

2016-03-05 13:06 - 2016-03-28 19:41 - 00000000 ____D C:\Program Files (x86)\Steam

2016-03-05 13:06 - 2016-03-05 13:06 - 01380712 _____ C:\Users\Jan\Downloads\SteamSetup.exe

2016-03-05 13:06 - 2016-03-05 13:06 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk

2016-03-05 13:06 - 2016-03-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2016-03-05 12:38 - 2016-03-29 13:05 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8C350B2D-D49C-4624-8373-F9A16C366C9A}

2016-03-05 12:27 - 2016-03-05 12:27 - 00000000 ____D C:\Users\Jan\AppData\Roaming\dlg

2016-03-05 12:25 - 2016-03-24 00:52 - 00000000 ____D C:\Windows\system32\MRT

2016-03-05 12:25 - 2016-03-24 00:51 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-03-05 12:25 - 2016-03-05 12:25 - 00540096 _____ C:\Users\Jan\Downloads\internet_explorer.exe

2016-03-05 12:24 - 2016-03-28 19:47 - 00000000 ____D C:\Users\Jan\AppData\LocalLow\Adblock Plus for IE

2016-03-05 12:19 - 2016-01-31 08:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2016-03-05 12:19 - 2016-01-31 08:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2016-03-05 12:19 - 2016-01-31 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll

2016-03-05 12:19 - 2016-01-31 07:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2016-03-05 12:19 - 2016-01-31 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll

2016-03-05 12:19 - 2016-01-31 07:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2016-03-05 12:19 - 2016-01-31 07:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2016-03-05 12:19 - 2016-01-31 07:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys

2016-03-05 12:19 - 2016-01-31 07:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-03-05 12:19 - 2016-01-31 07:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll

2016-03-05 12:19 - 2016-01-31 07:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-03-05 12:19 - 2016-01-05 05:07 - 02463704 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2016-03-05 12:19 - 2016-01-05 05:06 - 01063504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-03-05 12:19 - 2016-01-05 05:06 - 00119800 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-03-05 12:19 - 2016-01-05 05:04 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00779928 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00233992 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2016-03-05 12:19 - 2016-01-05 05:04 - 00090912 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 02152744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 00882208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll

2016-03-05 12:19 - 2016-01-05 04:30 - 00100712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL

2016-03-05 12:19 - 2016-01-05 04:29 - 00208688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 02445128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00645144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00635312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2016-03-05 12:19 - 2016-01-05 04:28 - 00082096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll

2016-03-05 12:19 - 2016-01-05 04:09 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2016-03-05 12:19 - 2016-01-05 04:02 - 01672192 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-03-05 12:19 - 2016-01-05 04:02 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-03-05 12:19 - 2016-01-05 04:01 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-03-05 12:19 - 2016-01-05 03:57 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-03-05 12:19 - 2016-01-05 03:32 - 01541632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2016-03-05 12:19 - 2016-01-05 03:32 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2016-03-05 12:19 - 2016-01-05 03:31 - 00563200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2016-03-05 12:19 - 2016-01-05 03:31 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax

2016-03-05 12:19 - 2016-01-05 03:26 - 00373760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-03-05 12:19 - 2015-12-01 08:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gpuenergydrv.sys

2016-03-05 12:19 - 2015-11-25 07:40 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2016-03-05 12:19 - 2015-11-25 06:49 - 01569280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll

2016-03-05 12:19 - 2015-11-25 06:30 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2016-03-05 12:19 - 2015-11-25 06:30 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2016-03-05 12:19 - 2015-11-25 06:25 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2016-03-05 12:19 - 2015-11-25 06:22 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2016-03-05 12:19 - 2015-11-25 06:19 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2016-03-05 12:19 - 2015-11-25 06:18 - 01233920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll

2016-03-05 12:19 - 2015-11-25 06:10 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll

2016-03-05 12:19 - 2015-11-05 07:14 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2016-03-05 12:19 - 2015-11-05 07:13 - 00577888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2016-03-05 12:19 - 2015-11-05 06:56 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2016-03-05 12:19 - 2015-11-05 06:17 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2016-03-05 12:19 - 2015-11-05 06:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2016-03-05 12:19 - 2015-11-05 05:40 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2016-03-05 12:19 - 2015-10-06 05:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2016-03-05 12:19 - 2015-09-25 06:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2016-03-05 12:19 - 2015-09-25 05:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll

2016-03-05 12:19 - 2015-09-25 05:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll

2016-03-05 12:19 - 2015-09-25 04:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll

2016-03-05 12:19 - 2015-09-25 04:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll

2016-03-05 12:19 - 2015-09-25 04:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll

2016-03-05 12:19 - 2015-09-25 04:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll

2016-03-05 12:19 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2016-03-05 12:19 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-03-05 12:19 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-03-05 12:19 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2016-03-05 12:19 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2016-03-05 12:19 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2016-03-05 12:19 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2016-03-05 12:19 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll

2016-03-05 12:19 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll

2016-03-05 12:19 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2016-03-05 12:19 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll

2016-03-05 12:19 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll

2016-03-05 12:19 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe

2016-03-05 12:19 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll

2016-03-05 12:19 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll

2016-03-05 12:19 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll

2016-03-05 12:19 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe

2016-03-05 12:19 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2016-03-05 12:19 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll

2016-03-05 12:19 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2016-03-05 12:19 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-03-05 12:19 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys

2016-03-05 12:19 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2016-03-05 12:19 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll

2016-03-05 12:19 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll

2016-03-05 12:19 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2016-03-05 12:19 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll

2016-03-05 12:19 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll

2016-03-05 12:19 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2016-03-05 12:19 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll

2016-03-05 12:19 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-03-05 12:19 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2016-03-05 12:19 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2016-03-05 12:19 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-03-05 12:19 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll

2016-03-05 12:19 - 2015-08-11 11:11 - 02446336 _____ C:\Windows\system32\InputService.dll

2016-03-05 12:19 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll

2016-03-05 12:19 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe

2016-03-05 12:19 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2016-03-05 12:19 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll

2016-03-05 12:19 - 2015-08-11 10:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll

2016-03-05 12:19 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2016-03-05 12:19 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys

2016-03-05 12:19 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2016-03-05 12:19 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll

2016-03-05 12:19 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-03-05 12:19 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll

2016-03-05 12:19 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll

2016-03-05 12:19 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-03-05 12:19 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll

2016-03-05 12:19 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll

2016-03-05 12:19 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys

2016-03-05 12:19 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2016-03-05 12:19 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys

2016-03-05 12:19 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll

2016-03-05 12:19 - 2015-07-24 04:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll

2016-03-05 12:19 - 2015-07-22 07:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2016-03-05 12:19 - 2015-07-22 06:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2016-03-05 12:19 - 2015-07-17 06:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys

2016-03-05 12:19 - 2015-07-17 06:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2016-03-05 12:19 - 2015-07-17 04:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll

2016-03-05 12:19 - 2015-07-17 03:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll

2016-03-05 12:19 - 2015-07-16 07:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

2016-03-05 12:19 - 2015-07-16 05:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll

2016-03-05 12:19 - 2015-07-15 04:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2016-03-05 12:19 - 2015-07-14 04:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys

2016-03-05 12:19 - 2015-07-12 02:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll

2016-03-05 12:19 - 2015-07-11 03:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2016-03-05 12:19 - 2015-07-10 12:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll

2016-03-05 12:18 - 2016-01-31 08:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2016-03-05 12:18 - 2016-01-31 08:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll

2016-03-05 12:18 - 2016-01-31 07:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2016-03-05 12:18 - 2016-01-31 07:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll

2016-03-05 12:18 - 2016-01-31 07:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-03-05 12:18 - 2016-01-31 07:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll

2016-03-05 12:18 - 2016-01-31 07:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll

2016-03-05 12:18 - 2016-01-31 07:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2016-03-05 12:18 - 2016-01-31 07:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2016-03-05 12:18 - 2016-01-31 07:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-03-05 12:18 - 2016-01-31 07:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll

2016-03-05 12:18 - 2016-01-31 07:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-03-05 12:18 - 2016-01-31 07:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll