Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   mystartsearch.com in Microsoft Edge läßt sich einfach nicht deinstallieren! (https://www.trojaner-board.de/172446-mystartsearch-com-microsoft-edge-laesst-einfach-deinstallieren.html)

Kingsbane 27.10.2015 15:02
mystartsearch.com in Microsoft Edge läßt sich einfach nicht deinstallieren!
 
Hallo,

seit vorgestern hab ich mir leider mystartsearch.com eingefangen. Das Programm öffnet sich in Microsoft Edge immer als Startseite. Wenn ich Google als Startseite auswähle, dann gibt es hinten eine Erweiterung (https://www.google.de/?gws_rd=ssl).

In der Systemsteuerung ist von dem Programm nirgendwo was zu sehen. Leider kann ich auch nicht mit Sicherheit sagen, bei welchem Download ich mir das eingefangen habe. Ich vermute, dass es beim Download von "Adobe Flash Player 19 NPAPI" passiert ist.

Ich habe schon einiges Unternommen, um das Problem zu beseitigen:
1. ADWCleaner findet nichts
2. Revo findet nichts
3. ESET findet nichts
4. JRT findet nichts
5. Malwarebytes hat ein paar Dateien entfernt, in denen auch "Mystartsearch" aufgeführt war. Nachdem diese Dateien entfernt wurden dachte ich, dass ich den Virus entfernt habe. War aber leider nichts. Leider hab ich die Dokumentation von Malwarebytes nicht abgespeichert.
6. Ich wollte das Zielverzeichnis von MS Edge (unter Eigenschaften-Mausklick auf Icon) abändern. Leider kann ich das aber nicht, da die Box grau hinterlegt ist und ich wohl nicht die Rechte habe.

Hab jetzt das Farbar Recovery Scan Tool drüberlaufen lassen und folgende Ergebnisse sind erschienen:

Die FRST-Log-Datei hab ich als ZIP-File beigefügt, da sie mit 126 KB zu groß war.

Vielen Dank schon im voraus für Eure Hilfe.

M-K-D-B 27.10.2015 16:47
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!



FRST.txt gegebenenfalls auf mehrere Posts (2-3) aufteilen bitte.


Logdatei von MBAM noch posten:


Lesestoff
http://filepony.de/icon/malwarebytes_anti_malware.pngMBAM-Funde posten: So gehts...
Manchmal ist es wichtig zu wissen, welche Schadprogramme im Vorfeld ohne Anweisung der Helfer schon gelöscht wurden.
Daher benötige ich den Inhalt der Logdatei, in welcher der Suchlauf protokolliert wurde.
  • Starte MBAM.
  • Klicke auf Verlauf.
  • Klicke auf Anwendungsprotokolle.
  • Klicke auf das letzte Suchlaufprotokoll mit Funden.
  • Klicke auf "In Zwischenablage kopieren".
  • Poste den Inhalt in Code-Tags [CODE] [/CODE] durch Einfügen mit Strg+V als Antwort in Deinen Thread.
http://deeprybka.trojaner-board.de/b...mbamposten.gif

Kingsbane 27.10.2015 21:04
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von masup (2015-10-27 14:56:24)
Gestartet von C:\Users\masup\Downloads
Windows 10 Pro (X64) (2015-10-24 11:21:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-880061057-3052452382-3847390351-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-880061057-3052452382-3847390351-503 - Limited - Disabled)
Gast (S-1-5-21-880061057-3052452382-3847390351-501 - Limited - Disabled)
masup (S-1-5-21-880061057-3052452382-3847390351-1001 - Administrator - Enabled) => C:\Users\masup

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Antivirus (Enabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Antivirus (Enabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.2.443 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Design Standard (HKLM-x32\...\Adobe_1e3ba55b33b1e8227645fb9c82acca3) (Version: 4.0 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Computer Security 14.142.101.0 (release) (x32 Version: 14.142.101.0 - F-Secure Corporation) Hidden
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Diagram Designer (HKLM-x32\...\{BE725DFC-550D-4C4B-BA2D-B1AE3CC0E33F}) (Version: 1.28 - MeeSoft)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
F-Secure (HKLM-x32\...\F-Secure ServiceEnabler 666) (Version: 2.44.135.0 - F-Secure Corporation)
F-Secure (x32 Version: 2.44.135.0 - F-Secure Corporation) Hidden
F-Secure CCF Reputation (x32 Version: 2.0.1337.0 - F-Secure) Hidden
F-Secure CCF Scanning 1.67.117.607 (release) (x32 Version: 1.67.117.607 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.04.100 (x32 Version: 1.04.100 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.05.143.0 (release) (x32 Version: 1.05.143.0 - F-Secure Corporation) Hidden
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.0.29.6 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.0.30.219 - Hewlett-Packard Company)
IBM Notes 9.0.1 Social Edition de (HKLM-x32\...\{A1D8D763-0326-41CE-8367-67EAA0331066}) (Version: 9.01.13347 - IBM)
IrfanView 64 (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.4266.1003 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Online Safety 2.139.3446.2391 (x32 Version: 2.139.3446.2391 - F-Secure Corporation) Hidden
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
TeamDrive (HKLM-x32\...\TeamDrive) (Version: 4.0.11.1283 - TeamDrive Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

24-10-2015 11:48:06 Windows Modules Installer
26-10-2015 11:46:58 Installed IBM Notes 9.0.1 Social Edition de.

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0BF583BD-C02B-410E-ACC7-1D90F9458873} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-24] (Microsoft Corporation)
Task: {295EDC54-EF64-41F9-9A18-4E80FA5C5C2F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-15] (Microsoft Corporation)
Task: {3B3A45B9-0051-4BA0-8CD4-D3FF0258DF65} - System32\Tasks\{7E272F86-0284-41D2-8563-DB9966BB8D7F} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {415A7EEA-BE74-49DB-8652-EB25E274C437} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-07-11] (Hewlett-Packard Company)
Task: {805902E7-7B0C-483F-8156-1436DFC73D7A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-02] (Microsoft Corporation)
Task: {BAA64439-A9F7-4B85-A382-2E03FBBFFC63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-09-24] (Hewlett-Packard)
Task: {BED4AD05-CD50-4AC7-A4A0-B2A947171E31} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-28] (Hewlett-Packard)
Task: {C2D1B8A8-EEBE-4FCF-B4BB-102DDA4621D6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-15] (Microsoft Corporation)
Task: {D78CDCB0-0512-4BEA-AB03-DB57F9DF93C8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-24] (Microsoft Corporation)
Task: {DE6CC851-A934-4A51-932D-A896FE69E512} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-26] (Adobe Systems Incorporated)
Task: {DF888FB8-AC89-4494-992B-670857CEC3B5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-09-24] (Hewlett-Packard)
Task: {EF2E82A3-DCAB-426E-A96C-E6B27C57AC13} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-07-11] (Hewlett-Packard Company)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-24 13:15 - 2015-07-15 03:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-10-24 13:16 - 2015-08-11 10:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-08-21 21:09 - 2015-08-21 21:09 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-10-24 12:42 - 2015-08-15 23:21 - 00162880 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 03447296 _____ () C:\Windows\system32\HPScanTRDrvWn8.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-08-21 21:09 - 2015-08-21 21:09 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-10-24 13:06 - 2015-10-24 13:07 - 08395776 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-10-24 13:06 - 2015-10-24 13:07 - 02311680 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2015-10-24 13:17 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-24 13:15 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-24 13:17 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-24 13:17 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-08-17 12:58 - 2015-08-17 12:58 - 00248872 _____ () C:\Program Files (x86)\F-Secure\Internet Security\daas2.dll
2015-10-24 15:56 - 2015-10-07 13:44 - 00045608 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2015-10-24 16:00 - 2015-10-24 16:00 - 00029224 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2015-10-24 15:56 - 2015-10-24 15:59 - 00175144 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll
2015-10-24 15:56 - 2015-10-24 16:00 - 00212008 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Spam Control\fsas.dll
2015-10-24 15:56 - 2015-10-24 15:59 - 00948264 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2015-10-24 15:56 - 2015-10-07 13:43 - 00056360 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\FSGUI\fsavures.eng

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-880061057-3052452382-3847390351-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\masup\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\desktop-hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{FFC04E08-3860-4563-B388-27524FB4F582}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{93C88C2C-6D2C-4F45-B018-23E9B81B2EC5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{398A602C-3F8D-4A72-B327-DEB7E4AB9AE7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{94DEB2C5-7DD7-46DA-9886-41371CF9905C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{ED51D5A6-2C18-49BA-93CE-5F06076DFCD2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{63473DAC-FA2D-415B-8A1D-6AA43A53BA6E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F7F00983-B8BE-416B-BF41-7BAFD9D16390}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4A922594-BBBF-47BA-BED2-69F6933F07D1}] => (Allow) LPort=5353
FirewallRules: [{45800018-108A-4603-9165-88678782B414}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{00D02C89-3C21-4A5E-B843-26348E545E54}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{BA1B595F-DBC4-4730-BF13-9F8FC90E51D8}] => (Allow) LPort=3703
FirewallRules: [{54F0AD9B-4EDE-4075-B566-51FE60FD4C62}] => (Allow) LPort=3704
FirewallRules: [{090EF3BC-9EB6-442D-A9C4-7387123BA5A2}] => (Allow) LPort=51000
FirewallRules: [{B3934ECB-122B-4019-8C9B-69105E5455E8}] => (Allow) LPort=51001
FirewallRules: [{45AB1138-5717-4FBA-B349-EE1AEB65C41E}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [{F4EFCFEE-C3FB-4270-BE18-E4C9C3FF2779}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [TCP Query User{7966797B-FE62-469B-ABFF-2A856818896A}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{33740B52-9AEB-4E62-B60A-B0AF8C2C5E0E}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{B7E27AC1-3049-4903-B459-F8266B9210C1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{81BE9DEE-0E6C-42B5-B53D-B14B3B31A1FE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F2169FA2-DD51-4C29-9A54-9006B7FDDDB3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{46A23DF5-7E2A-4C8F-A5F5-6012595C7E59}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/27/2015 02:29:28 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (6520) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/27/2015 02:29:28 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (6520) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/27/2015 02:29:17 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (6520) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/27/2015 02:29:17 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (6520) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/27/2015 02:29:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (6520) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/27/2015 02:29:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (6520) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/27/2015 02:28:57 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (6520) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/27/2015 02:28:57 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (6520) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/27/2015 02:28:47 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (6520) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/27/2015 02:28:47 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (6520) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.


Systemfehler:
=============
Error: (10/27/2015 12:18:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (10/27/2015 12:18:02 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\masup\AppData\Local\Temp\ehdrv.sys

Error: (10/27/2015 12:18:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (10/27/2015 12:18:02 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\masup\AppData\Local\Temp\ehdrv.sys

Error: (10/27/2015 12:18:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (10/27/2015 12:18:02 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\masup\AppData\Local\Temp\ehdrv.sys

Error: (10/27/2015 12:18:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (10/27/2015 12:18:02 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\masup\AppData\Local\Temp\ehdrv.sys

Error: (10/27/2015 12:18:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (10/27/2015 12:18:01 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\masup\AppData\Local\Temp\ehdrv.sys


==================== Speicherinformationen ===========================

Prozessor: AMD Phenom(tm) 9650 Quad-Core Processor
Prozentuale Nutzung des RAM: 50%
Installierter physikalischer RAM: 4094.3 MB
Verfügbarer physikalischer RAM: 2009.78 MB
Summe virtueller Speicher: 5502.3 MB
Verfügbarer virtueller Speicher: 2674.31 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:595.68 GB) (Free:551.44 GB) NTFS
Drive d: (TREKSTOR) (Fixed) (Total:465.76 GB) (Free:4.67 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=595.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 050613CC)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
durchgeführt von masup (Administrator) auf DESKTOP-K25MDGE (27-10-2015 14:55:04)
Gestartet von C:\Users\masup\Downloads
Geladene Profile: masup (Verfügbare Profile: masup & Administrator)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe
(IBM Corp) C:\Program Files (x86)\IBM\Notes\SUService.exe
(IBM Corp) C:\Program Files (x86)\IBM\Notes\ntmulti.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(IBM) C:\Program Files (x86)\IBM\Notes\nsd.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [F-Secure Hoster (666)] => C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)
HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE [306216 2015-10-07] (F-Secure Corporation)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-880061057-3052452382-3847390351-1001\...\Run: [safe_url__2] => "C:\Users\masup\AppData\Roaming\Browser-Security\safe_url__2.exe"
ShellIconOverlayIdentifiers: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
Startup: C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-10-26]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{984525dd-a0dd-4a57-abb5-d1c190c01dda}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{abbdb190-857f-471f-b9e3-89924ad46741}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-10-24] (Microsoft Corporation)
BHO: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2015-10-24] (F-Secure Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-10-24] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2015-10-24] (Microsoft Corporation)
BHO-x32: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2015-10-24] (F-Secure Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2015-10-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-24] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-24] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-24] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-24] (Microsoft Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-880061057-3052452382-3847390351-1001 -> hxxp://www.google.de/

FireFox:
========
FF ProfilePath: C:\Users\masup\AppData\Roaming\Mozilla\Firefox\Profiles\oqpg9dm2.default-1445867473043
FF Homepage: hxxps://www.google.de
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-26] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-26] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-10-24] (Microsoft Corporation)
FF Extension: Adblock Plus - C:\Users\masup\AppData\Roaming\Mozilla\Firefox\Profiles\oqpg9dm2.default-1445867473043\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-26]
FF HKLM-x32\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: Kein Name - C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2015-10-24] [ist nicht signiert]
FF HKU\S-1-5-21-880061057-3052452382-3847390351-1001\...\Firefox\Extensions: [safesearch@f-secure.com] - C:\Users\masup\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn
FF Extension: F-Secure Search - C:\Users\masup\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn [2015-10-25] [ist nicht signiert]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/F-Secure/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2015-06-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2776664 2015-08-15] (Microsoft Corporation)
R2 fshoster; C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-10-07] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2015-10-24] (F-Secure Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 IBM Notes Diagnostics; C:\Program Files (x86)\IBM\Notes\nsd.exe [5164136 2013-10-15] (IBM)
R2 LNSUSvc; C:\Program Files (x86)\IBM\Notes\SUService.exe [1654376 2013-10-15] (IBM Corp)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Multi-user Cleanup Service; C:\Program Files (x86)\IBM\Notes\ntmulti.exe [38504 2013-10-15] (IBM Corp)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-10-24] (Advanced Micro Devices)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [217280 2015-10-24] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [73256 2015-10-24] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [66736 2015-10-24] ()
R3 fsni; C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\fsni64.sys [101488 2015-10-24] (F-Secure Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2204304 2015-07-10] (MediaTek Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Kingsbane 27.10.2015 21:15
Code:
==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-27 14:52 - 2015-10-27 14:52 - 00000472 _____ C:\Users\masup\Downloads\defogger_disable.log
2015-10-27 14:52 - 2015-10-27 14:52 - 00000000 _____ C:\Users\masup\defogger_reenable
2015-10-27 14:51 - 2015-10-27 14:51 - 00050477 _____ C:\Users\masup\Downloads\Defogger.exe
2015-10-27 14:46 - 2015-10-27 14:46 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_masup_HistoryPrediction.bin
2015-10-27 14:04 - 2015-10-27 14:04 - 00020247 _____ C:\Users\masup\Downloads\FRST.zip
2015-10-27 12:58 - 2015-10-27 14:55 - 00017605 _____ C:\Users\masup\Downloads\FRST.txt
2015-10-27 12:58 - 2015-10-27 14:55 - 00000000 ____D C:\FRST
2015-10-27 12:57 - 2015-10-27 12:57 - 02197504 _____ (Farbar) C:\Users\masup\Downloads\FRST64.exe
2015-10-27 11:01 - 2015-10-27 11:01 - 02870984 _____ (ESET) C:\Users\masup\Downloads\esetsmartinstaller_deu.exe
2015-10-27 11:01 - 2015-10-27 11:01 - 00000000 ____D C:\Program Files (x86)\ESET
2015-10-27 10:53 - 2015-10-27 10:53 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\masup\Downloads\sc-cleaner.exe
2015-10-27 10:53 - 2015-10-27 10:53 - 00001830 _____ C:\Users\masup\Desktop\sc-cleaner.txt
2015-10-27 10:20 - 2015-10-27 10:20 - 00000924 _____ C:\Users\masup\Desktop\JRT.txt
2015-10-27 10:12 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\masup\Desktop\JRT.exe
2015-10-27 10:11 - 2015-10-27 10:11 - 01798976 _____ (Malwarebytes) C:\Users\masup\Downloads\JRT.exe
2015-10-27 10:06 - 2015-10-27 10:06 - 00000000 ____D C:\Users\masup\.android
2015-10-27 09:03 - 2015-10-27 09:03 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_Administrator_HistoryPrediction.bin
2015-10-27 09:03 - 2015-10-27 09:03 - 00000000 ___HD C:\OneDriveTemp
2015-10-27 08:57 - 2015-10-27 08:57 - 00001609 _____ C:\Users\Administrator\Desktop\Microsoft Edge.lnk
2015-10-27 08:57 - 2015-10-27 08:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\teamdrive-Overlays
2015-10-26 23:34 - 2015-10-27 09:21 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-26 23:34 - 2015-10-26 23:48 - 00001165 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-26 23:34 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-26 23:34 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-26 23:34 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-26 23:33 - 2015-10-26 23:34 - 22908888 _____ (Malwarebytes ) C:\Users\masup\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-26 23:03 - 2015-10-26 23:48 - 00001618 _____ C:\Users\masup\Desktop\Mozilla Firefox.lnk
2015-10-26 22:56 - 2015-10-27 10:01 - 00001609 _____ C:\Users\masup\Desktop\Microsoft Edge.lnk
2015-10-26 22:35 - 2015-10-26 22:35 - 00000000 _____ C:\autoexec.bat
2015-10-26 22:23 - 2015-10-26 22:24 - 00000000 ___HD C:\$SysReset
2015-10-26 22:16 - 2015-10-26 23:48 - 00001337 _____ C:\Users\masup\Desktop\Revo Uninstaller.lnk
2015-10-26 22:16 - 2015-10-26 22:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\masup\Downloads\revosetup95.exe
2015-10-26 22:16 - 2015-10-26 22:16 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-10-26 21:10 - 2015-10-26 21:10 - 00000000 ____D C:\Users\masup\AppData\Local\Macromedia
2015-10-26 15:25 - 2015-10-27 14:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-26 15:25 - 2015-10-26 15:25 - 00003860 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-26 14:59 - 2015-10-27 12:54 - 00000000 ____D C:\AdwCleaner
2015-10-26 14:58 - 2015-10-26 14:58 - 01694208 _____ C:\Users\masup\Downloads\adwcleaner_5.015.exe
2015-10-26 13:25 - 2015-10-26 13:28 - 00000121 ____R C:\Users\masup\OneDrive\Dokumente\Christoph-Privat.url
2015-10-26 12:16 - 2015-10-26 12:16 - 00000000 ____D C:\Windows\system32\SleepStudy
2015-10-26 11:53 - 2015-10-26 23:48 - 00002125 _____ C:\Users\Public\Desktop\IBM Notes.lnk
2015-10-26 11:53 - 2015-10-26 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM Anwendungen
2015-10-26 11:48 - 2015-10-27 10:33 - 00001882 _____ C:\SUService.log
2015-10-26 11:48 - 2015-10-26 11:48 - 00000000 ____D C:\Users\masup\AppData\Local\IBM
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\ProgramData\Lotus
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\ProgramData\IBM
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\Program Files (x86)\IBM
2015-10-26 11:46 - 2015-10-26 11:53 - 00255576 _____ C:\Users\masup\OneDrive\Dokumente\IBMNotesInstall.log
2015-10-26 11:46 - 2015-10-26 11:46 - 00063046 _____ C:\Users\masup\install.xml
2015-10-26 11:37 - 2015-10-26 23:48 - 00002037 _____ C:\Users\masup\Desktop\Akquisegesamtdatei_filmle.lnk
2015-10-26 10:33 - 2015-10-26 10:33 - 00000000 ____D C:\Users\masup\AppData\Local\PeerDistRepub
2015-10-25 14:57 - 2015-10-26 23:48 - 00001654 _____ C:\Users\masup\Desktop\ProgMetalZone_Tipps.lnk
2015-10-25 14:53 - 2015-10-26 23:48 - 00001450 _____ C:\Users\masup\Desktop\AusgabenCS.lnk
2015-10-25 14:52 - 2015-10-26 23:48 - 00001543 _____ C:\Users\masup\Desktop\Zeiterfassung 2015.lnk
2015-10-25 14:41 - 2015-10-25 14:41 - 00000000 ____D C:\Users\masup\AppData\Roaming\F-Secure
2015-10-25 14:30 - 2015-10-26 13:25 - 00000121 ____R C:\Users\masup\OneDrive\Dokumente\Notizbuch von Christoph.url
2015-10-25 14:29 - 2015-10-25 14:29 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\OneNote-Notizbücher
2015-10-24 22:17 - 2015-10-24 22:17 - 00000034 _____ C:\Windows\cdplayer.ini
2015-10-24 22:17 - 2015-10-24 22:17 - 00000000 ____D C:\Users\masup\AppData\Roaming\dlg
2015-10-24 22:14 - 2015-10-26 23:48 - 00001186 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2015-10-24 22:14 - 2015-10-24 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-10-24 22:14 - 2015-10-24 22:14 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2015-10-24 22:13 - 2015-10-24 22:13 - 00000000 ____D C:\Users\masup\AppData\Roaming\AVG
2015-10-24 22:13 - 2015-10-24 22:13 - 00000000 ____D C:\Users\masup\AppData\Local\Avg
2015-10-24 22:12 - 2015-10-24 22:14 - 00000000 ____D C:\ProgramData\AVG
2015-10-24 22:08 - 2015-10-24 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diagram Designer
2015-10-24 22:08 - 2015-10-24 22:08 - 00000000 ____D C:\Program Files (x86)\MeeSoft
2015-10-24 22:06 - 2015-10-26 23:48 - 00001144 _____ C:\Users\Public\Desktop\TeamDrive.lnk
2015-10-24 22:06 - 2015-10-24 22:06 - 00000000 ____D C:\Users\masup\AppData\Roaming\teamdrive-Overlays
2015-10-24 22:06 - 2015-10-24 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamDrive
2015-10-24 22:05 - 2015-10-24 22:06 - 00000000 ____D C:\Program Files (x86)\TeamDrive
2015-10-24 22:00 - 2015-10-24 22:00 - 00000000 ____D C:\Users\masup\.freemind
2015-10-24 21:59 - 2015-10-27 09:07 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2E1EF3F1-B686-4AA0-B7B1-91238F7DA809}
2015-10-24 21:58 - 2015-10-24 21:58 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\AppData\Roaming\Sun
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\AppData\LocalLow\Sun
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\.oracle_jre_usage
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\ProgramData\Oracle
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-24 21:57 - 2015-10-24 21:57 - 00000000 ____D C:\Users\masup\AppData\LocalLow\Oracle
2015-10-24 21:56 - 2015-10-26 23:48 - 00001138 _____ C:\Users\Public\Desktop\FastStone Capture.lnk
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\Users\masup\AppData\Roaming\FastStone
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\Program Files (x86)\FastStone Capture
2015-10-24 21:54 - 2015-10-24 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-10-24 21:54 - 2015-10-24 21:54 - 00000000 ____D C:\Program Files\7-Zip
2015-10-24 21:52 - 2015-10-26 23:48 - 00001160 _____ C:\Users\masup\Desktop\FreeMind.lnk
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\Program Files (x86)\FreeMind
2015-10-24 21:50 - 2015-10-26 23:48 - 00001047 _____ C:\Users\masup\Desktop\IrfanView 64.lnk
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Users\masup\AppData\Roaming\IrfanView
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Program Files\IrfanView
2015-10-24 21:36 - 2015-10-26 23:49 - 00001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-10-24 21:36 - 2015-10-26 23:48 - 00001094 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-10-24 21:36 - 2015-10-26 17:38 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-10-24 21:36 - 2015-10-25 14:58 - 00000000 ____D C:\Users\masup\AppData\Roaming\TeamViewer
2015-10-24 21:22 - 2015-10-24 21:22 - 00002378 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-24 21:22 - 2015-10-24 21:22 - 00000000 ___RD C:\Users\Administrator\OneDrive
2015-10-24 21:22 - 2015-10-24 21:22 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Hewlett-Packard
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\AMD
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2015-10-24 21:19 - 2015-10-24 21:19 - 00000000 ____D C:\Users\Administrator\AppData\Local\Publishers
2015-10-24 21:18 - 2015-10-24 21:41 - 00000000 ____D C:\Users\Administrator\AppData\Local\Packages
2015-10-24 21:18 - 2015-10-24 21:22 - 00000000 ____D C:\Users\Administrator
2015-10-24 21:18 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2015-10-24 21:18 - 2015-10-24 21:18 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Vorlagen
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 ____D C:\Users\Administrator\AppData\Local\TileDataLayer
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 21:14 - 2015-10-24 21:14 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\Benutzerdefinierte Office-Vorlagen
2015-10-24 21:12 - 2015-10-26 15:53 - 00000000 ____D C:\Users\masup\AppData\Roaming\MyPhoneExplorer
2015-10-24 21:11 - 2015-10-26 23:48 - 00002120 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-10-24 21:11 - 2015-10-24 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-10-24 21:11 - 2015-10-24 21:11 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2015-10-24 21:07 - 2015-10-26 17:25 - 00000000 ____D C:\Users\Privat\Musik
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Verschlüsselte Mails
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Urlaub
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Sport
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Spaß
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Sonstiges
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Nebenkosten
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Klavier
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Jonah
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Hochzeit
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Handykosten
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Gitarre
2015-10-24 21:06 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Finanzen
2015-10-24 21:06 - 2015-10-24 21:06 - 00000000 ____D C:\Users\Privat\Eva
2015-10-24 21:06 - 2015-10-24 21:06 - 00000000 ____D C:\Users\Privat\CD Files
2015-10-24 21:05 - 2015-10-27 14:18 - 00245248 _____ C:\Users\Privat\AusgabenCS.xls
2015-10-24 21:05 - 2015-10-27 14:18 - 00000000 ____D C:\Users\Privat
2015-10-24 21:05 - 2015-10-24 21:05 - 00000000 ____D C:\Users\Privat\Bihlmaier
2015-10-24 21:05 - 2013-07-03 19:34 - 00032768 ___SH C:\Users\Privat\Thumbs.db
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Videomail
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Studien
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Steuer
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Sonstiges
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Social Media
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Rechnungen
2015-10-24 21:00 - 2015-10-25 14:57 - 00000000 ____D C:\Users\Geschäft
2015-10-24 21:00 - 2015-10-24 21:29 - 00075073 _____ C:\Users\Geschäft\Zeiterfassung 2015.xlsx
2015-10-24 21:00 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Projekte
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Mindmaps
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Logos
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Graphik
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Fragebogen Website
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Finanzen
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Bilder Website
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Auto
2015-10-24 21:00 - 2015-10-15 15:29 - 00140800 _____ C:\Users\Geschäft\Zeiterfassung 2014.xls
2015-10-24 21:00 - 2015-07-06 15:37 - 00020480 _____ C:\Users\Geschäft\Fahrtenbuch.xls
2015-10-24 21:00 - 2013-12-20 16:29 - 00136704 _____ C:\Users\Geschäft\Zeiterfassung 2013.xls
2015-10-24 21:00 - 2013-01-09 09:38 - 00188416 _____ C:\Users\Geschäft\Zeiterfassung 2012.xls
2015-10-24 21:00 - 2011-12-27 09:19 - 00190976 _____ C:\Users\Geschäft\Zeiterfassung 2011.xls
2015-10-24 20:52 - 2015-10-24 20:52 - 00000000 ____D C:\ProgramData\FLEXnet
2015-10-24 20:38 - 2015-10-24 20:38 - 00000000 ____D C:\Program Files\Adobe
2015-10-24 20:34 - 2015-10-24 20:34 - 00000000 ____D C:\Users\masup\AppData\Local\Hewlett-Packard
2015-10-24 20:25 - 2015-10-24 20:25 - 00000000 ____D C:\ProgramData\ALM
2015-10-24 20:24 - 2015-10-26 23:48 - 00002092 _____ C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
2015-10-24 20:24 - 2008-04-07 04:38 - 00051032 ____R (Adobe Systems Inc) C:\Windows\system32\AdobePDF.dll
2015-10-24 20:24 - 2008-04-07 04:38 - 00024416 ____R (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2015-10-24 20:20 - 2015-10-24 20:20 - 00000110 _____ C:\Windows\wininit.ini
2015-10-24 20:19 - 2015-10-26 23:49 - 00001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\Windows\SysWOW64\spool
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\Program Files (x86)\Adobe Media Player
2015-10-24 20:15 - 2015-10-24 20:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Design Standard CS4
2015-10-24 20:15 - 2015-10-24 20:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-24 20:15 - 2015-10-24 20:24 - 00000000 ____D C:\ProgramData\Adobe
2015-10-24 20:14 - 2015-10-26 15:26 - 00000000 ____D C:\Users\masup\AppData\Local\Adobe
2015-10-24 20:14 - 2015-10-24 20:39 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-10-24 20:14 - 2015-10-24 20:14 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2015-10-24 20:03 - 2015-10-24 20:03 - 00000000 ____D C:\Users\masup\AppData\Roaming\Hewlett-Packard
2015-10-24 19:57 - 2015-10-26 23:48 - 00002290 _____ C:\Users\masup\Desktop\HP Support Assistant.lnk
2015-10-24 19:57 - 2015-10-24 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-10-24 19:56 - 2015-10-26 10:17 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-10-24 19:56 - 2015-10-24 19:57 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2015-10-24 19:56 - 2015-10-24 19:56 - 00000000 ____D C:\Users\masup\AppData\Roaming\hpqLog
2015-10-24 19:56 - 2015-10-24 19:56 - 00000000 ____D C:\System.sav
2015-10-24 19:55 - 2015-10-26 10:17 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2015-10-24 19:55 - 2015-10-24 19:55 - 00000000 ____D C:\ProgramData\{ECA9D0D4-7782-4B7F-96E2-FDB0CF0A57D5}
2015-10-24 19:49 - 2015-10-24 19:56 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-10-24 19:47 - 2015-10-24 19:47 - 00003198 _____ C:\Windows\System32\Tasks\{7E272F86-0284-41D2-8563-DB9966BB8D7F}
2015-10-24 19:46 - 2015-10-24 19:53 - 00000680 _____ C:\ProgramData\hpzinstall.log
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files\MSBuild
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-10-24 19:43 - 2015-06-17 17:10 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2015-10-24 19:43 - 2015-06-17 17:10 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 19:43 - 2015-06-17 17:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-10-24 19:43 - 2015-05-29 20:07 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2015-10-24 19:43 - 2015-05-29 20:07 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 19:43 - 2015-05-29 20:07 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-10-24 19:37 - 2015-10-24 19:37 - 00000000 ____D C:\ProgramData\HP
2015-10-24 19:22 - 2015-10-26 23:49 - 00001216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-24 19:22 - 2015-10-24 19:33 - 00000000 ____D C:\Users\masup\AppData\Local\Mozilla
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Users\masup\AppData\Roaming\Mozilla
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-24 18:28 - 2015-10-24 18:28 - 00000000 ____D C:\Users\masup\AppData\Local\NetworkTiles
2015-10-24 15:57 - 2015-10-24 16:00 - 00066736 _____ C:\Windows\system32\Drivers\fsbts.sys
2015-10-24 15:57 - 2015-10-24 15:57 - 00020896 _____ C:\Windows\prodsett_copy.ini
2015-10-24 15:57 - 2015-10-24 15:57 - 00000693 _____ C:\Windows\fsav_db_setup.log
2015-10-24 15:56 - 2015-10-24 15:57 - 04580652 _____ C:\Windows\FSISU.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00986473 _____ C:\Windows\FSSFM.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00874291 _____ C:\Windows\FSSETUP.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00140799 _____ C:\Windows\FSDEPH.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00136095 _____ C:\Windows\FSPROD.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00088494 _____ C:\Windows\RunSetup.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00073876 _____ C:\Windows\FSAVINST.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00010479 _____ C:\Windows\FSAVCSIN.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00004453 _____ C:\Windows\FSGKIAIN.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00004410 _____ C:\Windows\fstnbins.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00003489 _____ C:\Windows\fsavunin.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00001907 _____ C:\Windows\FSLDIN.LOG
2015-10-24 15:56 - 2015-10-24 15:56 - 00019322 _____ C:\Windows\fspplugin.log
2015-10-24 15:54 - 2015-10-24 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure
2015-10-24 15:54 - 2015-10-24 15:54 - 00000000 ____D C:\Program Files (x86)\F-Secure
2015-10-24 15:53 - 2015-10-26 20:14 - 00000000 ____D C:\Users\masup\AppData\Local\F-Secure
2015-10-24 15:53 - 2015-10-24 15:57 - 00000000 ____D C:\ProgramData\F-Secure
2015-10-24 15:43 - 2015-10-27 12:52 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\Outlook-Dateien
2015-10-24 15:31 - 2015-10-24 15:32 - 00000000 ____D C:\Users\masup\AppData\Local\MicrosoftEdge
2015-10-24 15:31 - 2015-10-24 15:31 - 00000000 ____D C:\Users\masup\AppData\Roaming\Macromedia
2015-10-24 13:23 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-10-24 13:18 - 2015-10-24 13:21 - 00000000 ____D C:\Windows\system32\MRT
2015-10-24 13:18 - 2015-10-02 11:09 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-24 13:17 - 2015-10-10 07:40 - 21875712 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-10-24 13:17 - 2015-10-10 07:07 - 18806272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-10-24 13:17 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-24 13:17 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-10-24 13:17 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-24 13:17 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-10-24 13:17 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-24 13:17 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-24 13:17 - 2015-09-25 04:17 - 24595456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-24 13:17 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-24 13:17 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-10-24 13:17 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-24 13:17 - 2015-09-25 03:48 - 19325952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-24 13:17 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-24 13:17 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-10-24 13:17 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-10-24 13:17 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll
2015-10-24 13:17 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2015-10-24 13:17 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-10-24 13:17 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2015-10-24 13:17 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-10-24 13:17 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-10-24 13:17 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2015-10-24 13:17 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2015-10-24 13:17 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2015-10-24 13:17 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2015-10-24 13:17 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2015-10-24 13:17 - 2015-08-11 11:04 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-10-24 13:17 - 2015-08-11 10:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-10-24 13:17 - 2015-08-11 10:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-10-24 13:17 - 2015-08-03 03:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2015-10-24 13:17 - 2015-08-03 02:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-10-24 13:17 - 2015-07-30 04:49 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-10-24 13:17 - 2015-07-30 04:15 - 09889792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-10-24 13:17 - 2015-07-22 04:54 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-10-24 13:17 - 2015-07-22 04:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-10-24 13:17 - 2015-07-15 03:41 - 01135312 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2015-10-24 13:17 - 2015-07-15 02:47 - 04611584 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-10-24 13:17 - 2015-07-11 02:17 - 06305792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-10-24 13:17 - 2015-07-11 01:51 - 04398080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-10-24 13:16 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-24 13:16 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-24 13:16 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-24 13:16 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-24 13:16 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-24 13:16 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-24 13:16 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-10-24 13:16 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-10-24 13:16 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-10-24 13:16 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-10-24 13:16 - 2015-09-25 04:04 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-10-24 13:16 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-24 13:16 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2015-10-24 13:16 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-10-24 13:16 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-10-24 13:16 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-10-24 13:16 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-10-24 13:16 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-10-24 13:16 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2015-10-24 13:16 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-10-24 13:16 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2015-10-24 13:16 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2015-10-24 13:16 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-10-24 13:16 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-10-24 13:16 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2015-10-24 13:16 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2015-10-24 13:16 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-10-24 13:16 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2015-10-24 13:16 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2015-10-24 13:16 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-10-24 13:16 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2015-10-24 13:16 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-10-24 13:16 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-10-24 13:16 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-10-24 13:16 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2015-10-24 13:16 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-10-24 13:16 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2015-10-24 13:16 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-10-24 13:16 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2015-10-24 13:16 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2015-10-24 13:16 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-10-24 13:16 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2015-10-24 13:16 - 2015-09-17 07:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2015-10-24 13:16 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2015-10-24 13:16 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-10-24 13:16 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2015-10-24 13:16 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2015-10-24 13:16 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2015-10-24 13:16 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2015-10-24 13:16 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2015-10-24 13:16 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2015-10-24 13:16 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2015-10-24 13:16 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-10-24 13:16 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2015-10-24 13:16 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2015-10-24 13:16 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-24 13:16 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2015-10-24 13:16 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
2015-10-24 13:16 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-10-24 13:16 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys
2015-10-24 13:16 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2015-10-24 13:16 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2015-10-24 13:16 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-10-24 13:16 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2015-10-24 13:16 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-10-24 13:16 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2015-10-24 13:16 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-24 13:16 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2015-10-24 13:16 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-24 13:16 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2015-10-24 13:16 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2015-10-24 13:16 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2015-10-24 13:16 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2015-10-24 13:16 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2015-10-24 13:16 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-10-24 13:16 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-10-24 13:16 - 2015-08-27 07:36 - 03620736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-24 13:16 - 2015-08-27 07:32 - 00608936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2015-10-24 13:16 - 2015-08-27 06:59 - 02880032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-24 13:16 - 2015-08-27 06:54 - 00541248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2015-10-24 13:16 - 2015-08-27 06:54 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-10-24 13:16 - 2015-08-27 06:51 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-10-24 13:16 - 2015-08-27 06:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-10-24 13:16 - 2015-08-27 06:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-10-24 13:16 - 2015-08-27 06:23 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-10-24 13:16 - 2015-08-27 06:16 - 02153472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-10-24 13:16 - 2015-08-27 06:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-10-24 13:16 - 2015-08-27 06:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-10-24 13:16 - 2015-08-27 06:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-10-24 13:16 - 2015-08-20 07:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-10-24 13:16 - 2015-08-20 06:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2015-10-24 13:16 - 2015-08-20 06:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2015-10-24 13:16 - 2015-08-18 08:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-10-24 13:16 - 2015-08-18 08:13 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2015-10-24 13:16 - 2015-08-18 08:13 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2015-10-24 13:16 - 2015-08-18 07:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2015-10-24 13:16 - 2015-08-18 07:58 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2015-10-24 13:16 - 2015-08-18 07:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2015-10-24 13:16 - 2015-08-18 07:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll
2015-10-24 13:16 - 2015-08-18 07:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-10-24 13:16 - 2015-08-18 07:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2015-10-24 13:16 - 2015-08-18 07:49 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2015-10-24 13:16 - 2015-08-18 07:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-10-24 13:16 - 2015-08-18 05:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList
2015-10-24 13:16 - 2015-08-11 11:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-10-24 13:16 - 2015-08-11 11:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2015-10-24 13:16 - 2015-08-11 11:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2015-10-24 13:16 - 2015-08-11 10:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2015-10-24 13:16 - 2015-08-11 10:50 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-10-24 13:16 - 2015-08-11 10:40 - 04048808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-10-24 13:16 - 2015-08-11 10:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-10-24 13:16 - 2015-08-11 10:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2015-10-24 13:16 - 2015-08-11 10:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2015-10-24 13:16 - 2015-08-11 10:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2015-10-24 13:16 - 2015-08-11 10:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2015-10-24 13:16 - 2015-08-11 10:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll
2015-10-24 13:16 - 2015-08-11 10:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll
2015-10-24 13:16 - 2015-08-11 10:11 - 02446336 _____ C:\Windows\system32\InputService.dll
2015-10-24 13:16 - 2015-08-11 10:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2015-10-24 13:16 - 2015-08-11 10:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll
2015-10-24 13:16 - 2015-08-11 10:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2015-10-24 13:16 - 2015-08-11 10:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2015-10-24 13:16 - 2015-08-11 10:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll
2015-10-24 13:16 - 2015-08-11 10:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2015-10-24 13:16 - 2015-08-11 10:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-10-24 13:16 - 2015-08-11 09:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-10-24 13:16 - 2015-08-11 09:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2015-10-24 13:16 - 2015-08-11 09:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2015-10-24 13:16 - 2015-08-11 09:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll
2015-10-24 13:16 - 2015-08-11 09:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll
2015-10-24 13:16 - 2015-08-11 09:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2015-10-24 13:16 - 2015-08-11 09:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-10-24 13:16 - 2015-08-11 09:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-10-24 13:16 - 2015-08-11 09:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-10-24 13:16 - 2015-08-08 08:29 - 01822280 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-24 13:16 - 2015-08-08 08:01 - 01533496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-24 13:16 - 2015-08-08 07:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-10-24 13:16 - 2015-08-08 07:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-10-24 13:16 - 2015-08-08 07:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-10-24 13:16 - 2015-08-06 04:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2015-10-24 13:16 - 2015-08-06 04:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2015-10-24 13:16 - 2015-08-06 03:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2015-10-24 13:16 - 2015-08-05 05:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-10-24 13:16 - 2015-08-05 04:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-10-24 13:16 - 2015-08-04 05:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-10-24 13:16 - 2015-08-04 04:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2015-10-24 13:16 - 2015-08-03 03:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2015-10-24 13:16 - 2015-08-03 03:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2015-10-24 13:16 - 2015-08-03 03:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2015-10-24 13:16 - 2015-08-03 03:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-10-24 13:16 - 2015-08-03 03:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2015-10-24 13:16 - 2015-08-03 02:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2015-10-24 13:16 - 2015-08-03 02:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll
2015-10-24 13:16 - 2015-08-03 02:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll
2015-10-24 13:16 - 2015-08-03 02:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2015-10-24 13:16 - 2015-08-03 02:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll
2015-10-24 13:16 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2015-10-24 13:16 - 2015-08-03 02:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2015-10-24 13:16 - 2015-08-03 02:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2015-10-24 13:16 - 2015-08-03 02:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2015-10-24 13:16 - 2015-08-03 01:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2015-10-24 13:16 - 2015-07-30 07:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-10-24 13:16 - 2015-07-30 07:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-24 13:16 - 2015-07-30 07:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2015-10-24 13:16 - 2015-07-30 07:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-10-24 13:16 - 2015-07-30 07:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2015-10-24 13:16 - 2015-07-30 07:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:03 - 02116448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-10-24 13:16 - 2015-07-30 06:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-10-24 13:16 - 2015-07-30 05:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-24 13:16 - 2015-07-30 05:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2015-10-24 13:16 - 2015-07-30 05:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-10-24 13:16 - 2015-07-30 05:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2015-10-24 13:16 - 2015-07-30 05:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2015-10-24 13:16 - 2015-07-30 05:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2015-10-24 13:16 - 2015-07-30 04:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2015-10-24 13:16 - 2015-07-30 04:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-10-24 13:16 - 2015-07-30 04:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 04:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2015-10-24 13:16 - 2015-07-30 04:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-10-24 13:16 - 2015-07-30 04:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2015-10-24 13:16 - 2015-07-30 04:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2015-10-24 13:16 - 2015-07-30 04:38 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-10-24 13:16 - 2015-07-30 04:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2015-10-24 13:16 - 2015-07-30 04:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2015-10-24 13:16 - 2015-07-30 04:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 04:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-10-24 13:16 - 2015-07-30 03:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2015-10-24 13:16 - 2015-07-26 04:49 - 04760576 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-24 13:16 - 2015-07-26 04:49 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-10-24 13:16 - 2015-07-26 04:47 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-10-24 13:16 - 2015-07-26 04:40 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-10-24 13:16 - 2015-07-26 04:40 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-10-24 13:16 - 2015-07-26 04:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2015-10-24 13:16 - 2015-07-26 04:38 - 04350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-24 13:16 - 2015-07-26 04:35 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-10-24 13:16 - 2015-07-26 04:34 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-10-24 13:16 - 2015-07-26 04:30 - 00750592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-10-24 13:16 - 2015-07-26 04:30 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-10-24 13:16 - 2015-07-26 04:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2015-10-24 13:16 - 2015-07-24 04:17 - 00695136 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2015-10-24 13:16 - 2015-07-24 04:12 - 00584544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2015-10-24 13:16 - 2015-07-24 03:55 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2015-10-24 13:16 - 2015-07-24 03:52 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2015-10-24 13:16 - 2015-07-24 03:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2015-10-24 13:16 - 2015-07-24 03:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2015-10-24 13:16 - 2015-07-24 03:24 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2015-10-24 13:16 - 2015-07-24 03:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2015-10-24 13:16 - 2015-07-22 05:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-10-24 13:16 - 2015-07-22 05:02 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-10-24 13:16 - 2015-07-22 05:00 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-24 13:16 - 2015-07-22 05:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-10-24 13:16 - 2015-07-22 04:21 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-10-24 13:16 - 2015-07-22 04:13 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-24 13:16 - 2015-07-22 04:07 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-10-24 13:16 - 2015-07-19 05:04 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2015-10-24 13:16 - 2015-07-19 04:23 - 00505344 _____ C:\Windows\system32\EditionUpgradeManagerObj.dll
2015-10-24 13:16 - 2015-07-19 04:18 - 00430592 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2015-10-24 13:16 - 2015-07-18 09:47 - 00082616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2015-10-24 13:16 - 2015-07-18 08:43 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2015-10-24 13:16 - 2015-07-18 08:37 - 01043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2015-10-24 13:16 - 2015-07-18 08:29 - 03443200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2015-10-24 13:16 - 2015-07-18 06:17 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2015-10-24 13:16 - 2015-07-18 06:02 - 00290312 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2015-10-24 13:16 - 2015-07-18 05:06 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2015-10-24 13:16 - 2015-07-18 04:59 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2015-10-24 13:16 - 2015-07-18 04:59 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2015-10-24 13:16 - 2015-07-18 04:52 - 04169728 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2015-10-24 13:16 - 2015-07-18 04:50 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2015-10-24 13:16 - 2015-07-18 04:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2015-10-24 13:16 - 2015-07-17 05:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2015-10-24 13:16 - 2015-07-17 05:13 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-10-24 13:16 - 2015-07-17 05:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-10-24 13:16 - 2015-07-17 03:39 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-10-24 13:16 - 2015-07-17 03:32 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-10-24 13:16 - 2015-07-17 03:31 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-24 13:16 - 2015-07-17 03:26 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2015-10-24 13:16 - 2015-07-17 03:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2015-10-24 13:16 - 2015-07-17 03:18 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-10-24 13:16 - 2015-07-17 03:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-10-24 13:16 - 2015-07-17 02:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2015-10-24 13:16 - 2015-07-17 02:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
2015-10-24 13:16 - 2015-07-17 02:44 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-10-24 13:16 - 2015-07-16 06:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-10-24 13:16 - 2015-07-16 05:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2015-10-24 13:16 - 2015-07-16 05:04 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2015-10-24 13:16 - 2015-07-16 05:03 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2015-10-24 13:16 - 2015-07-16 04:47 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2015-10-24 13:16 - 2015-07-16 04:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2015-10-24 13:16 - 2015-07-16 04:43 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-24 13:16 - 2015-07-16 04:41 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2015-10-24 13:16 - 2015-07-16 04:40 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2015-10-24 13:16 - 2015-07-16 04:36 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2015-10-24 13:16 - 2015-07-16 04:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2015-10-24 13:16 - 2015-07-16 04:33 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll
2015-10-24 13:16 - 2015-07-16 04:32 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2015-10-24 13:16 - 2015-07-16 04:29 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-24 13:16 - 2015-07-16 04:19 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll
2015-10-24 13:16 - 2015-07-15 04:21 - 01365072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-10-24 13:16 - 2015-07-15 03:49 - 01591856 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-10-24 13:16 - 2015-07-15 03:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-10-24 13:16 - 2015-07-15 03:22 - 02112512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-10-24 13:16 - 2015-07-15 02:57 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\OmaDmAgent.dll
2015-10-24 13:16 - 2015-07-15 02:37 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.ProxyStub.dll
2015-10-24 13:16 - 2015-07-15 02:35 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\unenrollhook.dll
2015-10-24 13:16 - 2015-07-14 04:00 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-10-24 13:16 - 2015-07-14 03:37 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-10-24 13:16 - 2015-07-14 03:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys
2015-10-24 13:16 - 2015-07-14 02:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2015-10-24 13:16 - 2015-07-14 02:38 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2015-10-24 13:16 - 2015-07-14 02:20 - 00279552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-10-24 13:16 - 2015-07-13 01:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2015-10-24 13:16 - 2015-07-13 00:30 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2015-10-24 13:16 - 2015-07-12 01:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2015-10-24 13:16 - 2015-07-12 01:25 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2015-10-24 13:16 - 2015-07-12 01:18 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2015-10-24 13:16 - 2015-07-12 00:46 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2015-10-24 13:16 - 2015-07-11 02:28 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2015-10-24 13:16 - 2015-07-11 02:07 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2015-10-24 13:16 - 2015-07-11 02:05 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2015-10-24 13:16 - 2015-07-11 02:04 - 03362816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-10-24 13:16 - 2015-07-11 02:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-10-24 13:16 - 2015-07-11 02:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-10-24 13:16 - 2015-07-11 02:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2015-10-24 13:16 - 2015-07-11 01:57 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2015-10-24 13:16 - 2015-07-11 01:43 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-10-24 13:16 - 2015-07-11 01:42 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2015-10-24 13:16 - 2015-07-11 01:41 - 03687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-10-24 13:16 - 2015-07-11 01:40 - 02606080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-10-24 13:16 - 2015-07-11 01:34 - 00294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2015-10-24 13:16 - 2015-07-10 16:51 - 00823336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-10-24 13:16 - 2015-07-10 16:47 - 00265480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-10-24 13:16 - 2015-07-10 16:00 - 01101792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-10-24 13:16 - 2015-07-10 15:52 - 00335248 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-10-24 13:16 - 2015-07-10 11:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2015-10-24 13:16 - 2015-07-10 11:05 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2015-10-24 13:16 - 2015-07-10 10:53 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2015-10-24 13:16 - 2015-07-10 10:29 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2015-10-24 13:15 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2015-10-24 13:15 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-24 13:15 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2015-10-24 13:15 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2015-10-24 13:15 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2015-10-24 13:15 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2015-10-24 13:15 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-10-24 13:15 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-10-24 13:15 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2015-10-24 13:15 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2015-10-24 13:15 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2015-10-24 13:15 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2015-10-24 13:15 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2015-10-24 13:15 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2015-10-24 13:15 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2015-10-24 13:15 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-24 13:15 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2015-10-24 13:15 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2015-10-24 13:15 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-10-24 13:15 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2015-10-24 13:15 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll
2015-10-24 13:15 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll
2015-10-24 13:15 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2015-10-24 13:15 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll
2015-10-24 13:15 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2015-10-24 13:15 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2015-10-24 13:15 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 13:15 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
2015-10-24 13:15 - 2015-08-27 06:39 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-10-24 13:15 - 2015-08-27 06:08 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-10-24 13:15 - 2015-08-18 08:04 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-10-24 13:15 - 2015-08-18 07:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2015-10-24 13:15 - 2015-08-18 07:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2015-10-24 13:15 - 2015-08-18 07:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2015-10-24 13:15 - 2015-08-18 07:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2015-10-24 13:15 - 2015-08-18 07:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
2015-10-24 13:15 - 2015-08-18 07:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2015-10-24 13:15 - 2015-08-18 07:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2015-10-24 13:15 - 2015-08-18 07:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2015-10-24 13:15 - 2015-08-18 07:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2015-10-24 13:15 - 2015-08-11 11:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-10-24 13:15 - 2015-08-11 10:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2015-10-24 13:15 - 2015-08-11 10:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2015-10-24 13:15 - 2015-08-11 09:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2015-10-24 13:15 - 2015-08-11 09:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll
2015-10-24 13:15 - 2015-08-11 09:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2015-10-24 13:15 - 2015-08-11 09:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2015-10-24 13:15 - 2015-08-11 09:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2015-10-24 13:15 - 2015-08-03 03:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys
2015-10-24 13:15 - 2015-07-30 05:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-10-24 13:15 - 2015-07-30 04:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2015-10-24 13:15 - 2015-07-30 04:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2015-10-24 13:15 - 2015-07-30 04:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-10-24 13:15 - 2015-07-30 04:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll
2015-10-24 13:15 - 2015-07-30 04:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2015-10-24 13:15 - 2015-07-30 04:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2015-10-24 13:15 - 2015-07-30 04:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll
2015-10-24 13:15 - 2015-07-24 04:17 - 00521568 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2015-10-24 13:15 - 2015-07-24 03:30 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-10-24 13:15 - 2015-07-24 03:29 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2015-10-24 13:15 - 2015-07-22 06:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2015-10-24 13:15 - 2015-07-22 04:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2015-10-24 13:15 - 2015-07-18 08:28 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2015-10-24 13:15 - 2015-07-18 08:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2015-10-24 13:15 - 2015-07-18 04:49 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2015-10-24 13:15 - 2015-07-18 04:49 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2015-10-24 13:15 - 2015-07-18 04:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2015-10-24 13:15 - 2015-07-18 04:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-24 13:15 - 2015-07-17 05:12 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-10-24 13:15 - 2015-07-17 03:33 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\omadmprc.exe
2015-10-24 13:15 - 2015-07-15 03:04 - 00032768 _____ C:\Windows\system32\LicenseManagerApi.dll
2015-10-24 13:15 - 2015-07-15 02:27 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll
2015-10-24 13:15 - 2015-07-11 01:40 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-10-24 13:15 - 2015-07-10 11:42 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2015-10-24 13:15 - 2015-07-10 11:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2015-10-24 12:46 - 2015-10-26 23:49 - 00002574 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002571 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002567 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002524 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2015-10-24 12:46 - 2015-10-24 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2015-10-24 12:42 - 2015-10-24 21:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-10-24 12:42 - 2015-10-24 12:42 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-24 12:38 - 2015-10-24 12:20 - 00000000 ____D C:\Windows\Panther
2015-10-24 12:32 - 2015-10-27 10:36 - 00000000 ___RD C:\Users\masup\OneDrive
2015-10-24 12:32 - 2015-10-26 23:48 - 00002354 _____ C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-24 12:32 - 2015-10-24 20:52 - 00000000 ____D C:\Users\masup\AppData\Local\AMD
2015-10-24 12:32 - 2015-07-09 12:50 - 00001094 _____ C:\Users\masup\OneDrive\Dokumente\Kalender von Masup cs.ics
2015-10-24 12:31 - 2015-10-24 12:31 - 00062133 _____ C:\Windows\SysWOW64\CCCInstall_201510241331293895.log
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Users\masup\AppData\Roaming\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Users\masup\AppData\Local\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\AMD
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Program Files\ATI Technologies
2015-10-24 12:30 - 2015-10-24 12:32 - 00000000 ____D C:\Users\masup\AppData\Local\Comms
2015-10-24 12:30 - 2015-10-24 12:31 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-10-24 12:30 - 2015-10-24 12:30 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-24 12:30 - 2015-07-09 19:39 - 04847104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NlsData0009.dll
2015-10-24 12:30 - 2015-07-09 19:36 - 02629632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NlsLexicons0009.dll
2015-10-24 12:30 - 2015-07-09 19:28 - 06358016 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0009.dll
2015-10-24 12:30 - 2015-07-09 19:25 - 05739520 _____ (Microsoft Corporation) C:\Windows\system32\prm0009.dll
2015-10-24 12:30 - 2015-07-09 19:25 - 02629632 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2015-10-24 12:29 - 2015-10-26 23:48 - 00001047 _____ C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2015-10-24 12:29 - 2015-10-24 12:30 - 00000000 ____D C:\Users\masup\AppData\Local\PackageStaging
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Users\masup\AppData\Local\Publishers
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Program Files\AMD
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\AMD
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 _____ C:\Windows\ativpsrm.bin
2015-10-24 12:28 - 2015-10-26 17:39 - 00000000 ____D C:\Users\masup\AppData\Local\Packages
2015-10-24 12:28 - 2015-10-25 14:28 - 00000000 ____D C:\Users\masup\AppData\Roaming\Adobe
2015-10-24 12:28 - 2015-10-24 12:28 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 30776304 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-10-24 12:28 - 2015-10-24 12:28 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 10211008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08982440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 07482552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-10-24 12:28 - 2015-10-24 12:28 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-10-24 12:28 - 2015-10-24 12:28 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00833800 _____ C:\Windows\system32\amdicdxx.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00737410 _____ C:\Windows\system32\atiicdxx.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-10-24 12:28 - 2015-10-24 12:28 - 00662392 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-10-24 12:28 - 2015-10-24 12:28 - 00662392 _____ C:\Windows\system32\atiapfxx.blb
2015-10-24 12:28 - 2015-10-24 12:28 - 00631280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00471312 _____ C:\Windows\system32\amdmiracast.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00322868 _____ C:\Windows\system32\ativvaxy_vi.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00321200 _____ C:\Windows\system32\ativvaxy_vi_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00255808 _____ C:\Windows\system32\ativvaxy_cz_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00250884 _____ C:\Windows\system32\ativvaxy_FJ.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00249088 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00243696 _____ C:\Windows\system32\clinfo.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00234420 _____ C:\Windows\system32\ativvaxy_cik.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00232752 _____ C:\Windows\system32\ativvaxy_cik_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00177344 _____ C:\Windows\system32\ativce03.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00175648 _____ C:\Windows\system32\amde31a.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00168944 _____ C:\Windows\system32\atieah64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00143344 _____ C:\Windows\system32\amdhdl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00143048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00130072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00100816 _____ C:\Windows\system32\ativce02.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00087992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_defaultuser0_HistoryPrediction.bin
2015-10-24 12:28 - 2015-10-24 12:28 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00000000 ____D C:\Users\masup\AppData\Local\VirtualStore
2015-10-24 12:28 - 2015-10-24 12:28 - 00000000 ____D C:\Users\masup\AppData\Local\TileDataLayer
2015-10-24 12:25 - 2015-10-27 14:52 - 00000000 ____D C:\Users\masup
2015-10-24 12:25 - 2015-10-24 12:28 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 12:25 - 2015-10-24 12:25 - 00000020 ___SH C:\Users\masup\ntuser.ini
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Vorlagen
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Startmenü
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Netzwerkumgebung
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Lokale Einstellungen
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Eigene Dateien
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Druckumgebung
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Local\Verlauf
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Local\Anwendungsdaten
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Anwendungsdaten
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ____D C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 12:24 - 2015-10-24 12:24 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2015-10-24 12:24 - 2015-10-24 12:24 - 00102912 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdWT6.sys
2015-10-24 11:50 - 2015-10-27 10:38 - 01790124 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 __SHD C:\Recovery
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 ____D C:\Windows\CSC
2015-10-24 11:41 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2015-10-24 11:40 - 2015-10-24 11:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-10-24 11:39 - 2015-10-27 08:59 - 00003092 _____ C:\Windows\PFRO.log
2015-10-22 14:23 - 2014-10-29 10:49 - 681167233 _____ (IBM ) C:\Users\masup\Downloads\ibm_notes_cl9_win.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-27 14:39 - 2015-07-10 13:22 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-10-27 14:36 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\sru
2015-10-27 13:42 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-10-27 13:07 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-10-27 10:38 - 2015-07-10 17:34 - 00771100 _____ C:\Windows\system32\perfh007.dat
2015-10-27 10:38 - 2015-07-10 17:34 - 00153964 _____ C:\Windows\system32\perfc007.dat
2015-10-27 10:33 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-27 10:32 - 2015-07-10 10:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-10-26 15:03 - 2015-07-10 13:20 - 02939336 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-26 10:34 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-10-25 14:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\appcompat
2015-10-24 19:45 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\MUI
2015-10-24 19:45 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\MUI
2015-10-24 19:38 - 2015-07-10 13:20 - 00009531 _____ C:\Windows\setupact.log
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\oobe
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-24 13:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-10-24 13:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Dism
2015-10-24 13:29 - 2015-07-10 17:44 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-10-24 12:42 - 2015-07-10 12:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-24 12:38 - 2015-07-10 12:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-10-24 12:30 - 2015-07-10 17:35 - 00000000 ____D C:\Windows\OCR
2015-10-24 12:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PrintDialog
2015-10-24 12:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\MiracastView
2015-10-24 11:48 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\restore
2015-10-24 11:46 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\spool
2015-10-24 11:45 - 2015-07-10 12:04 - 00000000 ____D C:\Program Files\Windows NT
2015-10-24 11:45 - 2015-07-10 10:05 - 00000000 __RHD C:\Users\Default
2015-10-24 11:43 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-10-24 11:42 - 2015-07-10 12:05 - 00002133 _____ C:\Windows\DtcInstall.log
2015-10-24 11:42 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\Recovery
2015-10-24 11:41 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Sysprep
2015-10-16 04:10 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 04:10 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-10-24 19:46 - 2015-10-24 19:53 - 0000680 _____ () C:\ProgramData\hpzinstall.log

Einige Dateien in TEMP:
====================
C:\Users\masup\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\masup\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\masup\AppData\Local\Temp\FP_PL_MSI_INSTALLER.exe
C:\Users\masup\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\masup\AppData\Local\Temp\SDShelEx-x64.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-10-24 11:39

==================== Ende von FRST.txt ============================
HTML-Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:52 on 27/10/2015 (masup)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
Malewarebytes (ich hoffe Du kannst damit was anfangen. Hab ja leider leider die Dateien in der Quarantäne schon gelöscht).
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 27.10.2015 09:00, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 09:00, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 09:00, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,
Update, 27.10.2015 09:21, SYSTEM, DESKTOP-K25MDGE, Manual, IP Database, 2015.10.24.1, 2015.10.27.1,
Update, 27.10.2015 09:21, SYSTEM, DESKTOP-K25MDGE, Manual, Domain Database, 2015.10.26.7, 2015.10.27.4,
Update, 27.10.2015 09:21, SYSTEM, DESKTOP-K25MDGE, Manual, Malware Database, 2015.10.26.7, 2015.10.27.1,
Scan, 27.10.2015 09:32, SYSTEM, DESKTOP-K25MDGE, Manual, Start: 27.10.2015 09:21, Dauer: 11 Min. 36 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen,
Error, 27.10.2015 10:34, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 10:34, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 10:34, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,
Error, 27.10.2015 20:30, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 20:30, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 20:30, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,
Error, 27.10.2015 20:35, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 20:35, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 20:35, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,
Error, 27.10.2015 20:40, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 20:40, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 20:40, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,
Error, 27.10.2015 20:53, SYSTEM, DESKTOP-K25MDGE, Protection, IsLicensed, 13,
Protection, 27.10.2015 20:53, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopping,
Protection, 27.10.2015 20:53, SYSTEM, DESKTOP-K25MDGE, Protection, Malware Protection, Stopped,

(end)
Den Scan mit GMER konnte ich nicht durchführen. (trotz deaktiviertem Virenschutz und Trennung vom Internet)
Bei mir bricht der Rechner mitten im Scan ab und startet neu. Ich hab´s auch im abgesicherten Modus versucht. Ging leider nicht.

M-K-D-B 28.10.2015 16:24
Servus,



Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    :filefind
    *mysart*

    :folderfind
    *mystart*

    :regfind
    mystart
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.


Kingsbane 28.10.2015 16:50
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 16:45 on 28/10/2015 by masup
Administrator - Elevation successful

========== filefind ==========

Searching for "*mysart*"
No files found.

========== folderfind ==========

Searching for "*mystart*"
C:\AdwCleaner\Quarantine\C\Users\masup\AppData\Roaming\mystartsearch        d------        [14:02 26/10/2015]

========== regfind ==========

Searching for "mystart"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231]
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com]
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com]
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com]
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com]
[HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com]

Searching for "        "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="            <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Enabled="true" >                <InitializationParameters>                    <Param Name="PSVersion" Value="5.0"/>                </InitializationParameters>                <Resources>                    <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                        <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;IU)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                        <Capability Type="Shell"/>             
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell.Workflow]
"ConfigXML"="            <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell.workflow" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" UseSharedProcess="true" ProcessIdleTimeoutSec="1209600" RunAsUser="" RunAsPassword="" AutoRestart="false"    Enabled="true" >                <InitializationParameters>                    <Param Name="PSVersion" Value="5.0"/>                    <Param Name="AssemblyName" Value="Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL"/>                    <Param Name="PSSessionConfigurationTypeName" Value="Microsoft.PowerShell.Workflow.PSWorkflowSessionConfiguration"/>                    <Param Name="SessionConfigurationData"                          Value="                     
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Architecture="32" Enabled="true" >                        <InitializationParameters>                            <Param Name="PSVersion" Value="5.0"/>                        </InitializationParameters>                        <Resources>                            <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;IU)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>   

-= EOF =-

M-K-D-B 28.10.2015 17:38
Servus,


na da haben wir ja was gefunden... :D





Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
HKU\S-1-5-21-880061057-3052452382-3847390351-1001\...\Run: [safe_url__2] => "C:\Users\masup\AppData\Roaming\Browser-Security\safe_url__2.exe"
C:\Users\masup\AppData\Roaming\Browser-Security
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2
Öffne Microsoft Edge erneut. Hast du immer noch Probleme mit mystartsearch?





Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Beantwortung der gestellten Frage,
  • die beiden neuen Logdateien von FRST.

Kingsbane 28.10.2015 18:26
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von masup (2015-10-28 18:02:25) Run:1
Gestartet von C:\Users\masup\Downloads
Geladene Profile: masup (Verfügbare Profile: masup & Administrator)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
HKU\S-1-5-21-880061057-3052452382-3847390351-1001\...\Run: [safe_url__2] => "C:\Users\masup\AppData\Roaming\Browser-Security\safe_url__2.exe"
C:\Users\masup\AppData\Roaming\Browser-Security
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com
DeleteKey: HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com
EmptyTemp:
end
*****************

HKU\S-1-5-21-880061057-3052452382-3847390351-1001\Software\Microsoft\Windows\CurrentVersion\Run\\safe_url__2 => Wert erfolgreich entfernt
"C:\Users\masup\AppData\Roaming\Browser-Security" => nicht gefunden.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231 => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com => Schlüssel erfolgreich entfernt
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=mystartsearch&form=WNSGPH&qs=SW&cvid=a5c9cde21fbe48d2bc8eaa8f3c3dde70&pq=mystartsearch&nclid=78905B713CED8CD0458AAE1A1C616D41&ts=1445899820231&nclidts=1445899820&tsms=231 => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mystartsearch.com => Schlüssel nicht gefunden.
HKEY_USERS\S-1-5-21-880061057-3052452382-3847390351-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.mystartsearch.com => Schlüssel nicht gefunden.
EmptyTemp: => 659.4 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 18:04:48 ====
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von masup (2015-10-28 18:22:54)
Gestartet von C:\Users\masup\Downloads
Windows 10 Pro (X64) (2015-10-24 11:21:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-880061057-3052452382-3847390351-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-880061057-3052452382-3847390351-503 - Limited - Disabled)
Gast (S-1-5-21-880061057-3052452382-3847390351-501 - Limited - Disabled)
masup (S-1-5-21-880061057-3052452382-3847390351-1001 - Administrator - Enabled) => C:\Users\masup

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Antivirus (Enabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Antivirus (Enabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.2.443 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Design Standard (HKLM-x32\...\Adobe_1e3ba55b33b1e8227645fb9c82acca3) (Version: 4.0 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Computer Security 14.142.101.0 (release) (x32 Version: 14.142.101.0 - F-Secure Corporation) Hidden
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Diagram Designer (HKLM-x32\...\{BE725DFC-550D-4C4B-BA2D-B1AE3CC0E33F}) (Version: 1.28 - MeeSoft)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
F-Secure (HKLM-x32\...\F-Secure ServiceEnabler 666) (Version: 2.44.135.0 - F-Secure Corporation)
F-Secure (x32 Version: 2.44.135.0 - F-Secure Corporation) Hidden
F-Secure CCF Reputation (x32 Version: 2.0.1337.0 - F-Secure) Hidden
F-Secure CCF Scanning 1.67.117.607 (release) (x32 Version: 1.67.117.607 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.04.100 (x32 Version: 1.04.100 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.05.143.0 (release) (x32 Version: 1.05.143.0 - F-Secure Corporation) Hidden
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.0.29.6 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.0.30.219 - Hewlett-Packard Company)
IBM Notes 9.0.1 Social Edition de (HKLM-x32\...\{A1D8D763-0326-41CE-8367-67EAA0331066}) (Version: 9.01.13347 - IBM)
IrfanView 64 (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.6001.1034 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6001.1034 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden
Online Safety 2.139.3446.2391 (x32 Version: 2.139.3446.2391 - F-Secure Corporation) Hidden
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
TeamDrive (HKLM-x32\...\TeamDrive) (Version: 4.0.11.1283 - TeamDrive Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

24-10-2015 11:48:06 Windows Modules Installer
26-10-2015 11:46:58 Installed IBM Notes 9.0.1 Social Edition de.

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3B3A45B9-0051-4BA0-8CD4-D3FF0258DF65} - System32\Tasks\{7E272F86-0284-41D2-8563-DB9966BB8D7F} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {415A7EEA-BE74-49DB-8652-EB25E274C437} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-07-11] (Hewlett-Packard Company)
Task: {568D576D-3FC5-4EE7-9E7F-30558AD7D9BE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation)
Task: {85895942-DF23-48CC-B1E9-9C1F4D44113F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-02] (Microsoft Corporation)
Task: {A46A9B62-B8C7-48AF-AD5D-AD90F378A8FF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {BAA64439-A9F7-4B85-A382-2E03FBBFFC63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-09-24] (Hewlett-Packard)
Task: {BED4AD05-CD50-4AC7-A4A0-B2A947171E31} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-28] (Hewlett-Packard)
Task: {C6E7DC6F-4D80-4ADE-84B0-6D7F2A9C0341} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {DE6CC851-A934-4A51-932D-A896FE69E512} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-26] (Adobe Systems Incorporated)
Task: {DF888FB8-AC89-4494-992B-670857CEC3B5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-09-24] (Hewlett-Packard)
Task: {E0224868-08E5-4B15-95E6-16EAD06B30CC} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation)
Task: {EF2E82A3-DCAB-426E-A96C-E6B27C57AC13} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-07-11] (Hewlett-Packard Company)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-24 13:15 - 2015-07-15 03:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-10-24 13:16 - 2015-08-11 10:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-08-21 21:09 - 2015-08-21 21:09 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-10-24 12:42 - 2015-10-15 20:45 - 00161448 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-24 13:17 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-24 13:15 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-24 13:17 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-24 13:17 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-08-21 21:09 - 2015-08-21 21:09 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-10-24 15:56 - 2015-10-07 13:44 - 00045608 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2015-08-17 12:58 - 2015-08-17 12:58 - 00248872 _____ () C:\Program Files (x86)\F-Secure\Internet Security\daas2.dll
2015-10-24 16:00 - 2015-10-24 16:00 - 00029224 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2015-10-24 15:56 - 2015-10-24 15:59 - 00175144 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll
2015-10-24 15:56 - 2015-10-24 16:00 - 00212008 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Spam Control\fsas.dll
2015-10-24 15:56 - 2015-10-24 15:59 - 00948264 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2015-10-24 15:56 - 2015-10-07 13:43 - 00056360 _____ () C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\FSGUI\fsavures.eng

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-880061057-3052452382-3847390351-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\masup\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\desktop-hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{93C88C2C-6D2C-4F45-B018-23E9B81B2EC5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{94DEB2C5-7DD7-46DA-9886-41371CF9905C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{63473DAC-FA2D-415B-8A1D-6AA43A53BA6E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F7F00983-B8BE-416B-BF41-7BAFD9D16390}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4A922594-BBBF-47BA-BED2-69F6933F07D1}] => (Allow) LPort=5353
FirewallRules: [{45800018-108A-4603-9165-88678782B414}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{00D02C89-3C21-4A5E-B843-26348E545E54}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{BA1B595F-DBC4-4730-BF13-9F8FC90E51D8}] => (Allow) LPort=3703
FirewallRules: [{54F0AD9B-4EDE-4075-B566-51FE60FD4C62}] => (Allow) LPort=3704
FirewallRules: [{090EF3BC-9EB6-442D-A9C4-7387123BA5A2}] => (Allow) LPort=51000
FirewallRules: [{B3934ECB-122B-4019-8C9B-69105E5455E8}] => (Allow) LPort=51001
FirewallRules: [{45AB1138-5717-4FBA-B349-EE1AEB65C41E}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [{F4EFCFEE-C3FB-4270-BE18-E4C9C3FF2779}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [TCP Query User{7966797B-FE62-469B-ABFF-2A856818896A}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{33740B52-9AEB-4E62-B60A-B0AF8C2C5E0E}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{B7E27AC1-3049-4903-B459-F8266B9210C1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{81BE9DEE-0E6C-42B5-B53D-B14B3B31A1FE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F2169FA2-DD51-4C29-9A54-9006B7FDDDB3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{46A23DF5-7E2A-4C8F-A5F5-6012595C7E59}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0454BB27-A8A6-4913-88F9-988ECF809DF9}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{2D4B1D31-3A1E-4FFD-9E4E-7D8F134FF32B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{983C610D-64A7-457A-8258-108EBEF9E930}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/28/2015 01:14:01 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4160) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/28/2015 01:14:01 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4160) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/28/2015 01:13:51 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4160) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/28/2015 01:13:51 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4160) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/28/2015 01:13:40 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4160) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/28/2015 01:13:40 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4160) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/28/2015 01:13:30 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4160) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/28/2015 01:13:30 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4160) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (10/28/2015 01:13:20 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4160) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (10/28/2015 01:13:20 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4160) Der Versuch, die Datei "C:\Windows\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.


Systemfehler:
=============
Error: (10/28/2015 06:07:59 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-K25MDGE)
Description: {14286318-B6CF-49A1-81FC-D74AD94902F9}

Error: (10/28/2015 06:05:13 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-K25MDGE)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}

Error: (10/28/2015 06:05:13 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-K25MDGE)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (10/28/2015 06:05:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/28/2015 06:05:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/28/2015 06:05:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/28/2015 06:05:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/27/2015 11:19:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_Session1 erreicht.

Error: (10/27/2015 11:19:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdatenspeicher _Session1 erreicht.

Error: (10/27/2015 11:19:39 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Benutzerdatenspeicher _Session1" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056


==================== Speicherinformationen ===========================

Prozessor: AMD Phenom(tm) 9650 Quad-Core Processor
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 4094.3 MB
Verfügbarer physikalischer RAM: 2256.64 MB
Summe virtueller Speicher: 5502.3 MB
Verfügbarer virtueller Speicher: 3193.54 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:595.68 GB) (Free:551.28 GB) NTFS
Drive d: (TREKSTOR) (Fixed) (Total:465.76 GB) (Free:176.91 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=595.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 050613CC)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
durchgeführt von masup (Administrator) auf DESKTOP-K25MDGE (28-10-2015 18:21:16)
Gestartet von C:\Users\masup\Downloads
Geladene Profile: masup (Verfügbare Profile: masup & Administrator)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe
(IBM) C:\Program Files (x86)\IBM\Notes\nsd.exe
(IBM Corp) C:\Program Files (x86)\IBM\Notes\SUService.exe
(IBM Corp) C:\Program Files (x86)\IBM\Notes\ntmulti.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [F-Secure Hoster (666)] => C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)
HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE [306216 2015-10-07] (F-Secure Corporation)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
ShellIconOverlayIdentifiers: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-08-04] (TeamDrive Systems GmbH)
Startup: C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-10-26]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{984525dd-a0dd-4a57-abb5-d1c190c01dda}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{abbdb190-857f-471f-b9e3-89924ad46741}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-10-27] (Microsoft Corporation)
BHO: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2015-10-24] (F-Secure Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-10-27] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2015-10-27] (Microsoft Corporation)
BHO-x32: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2015-10-24] (F-Secure Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2015-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-880061057-3052452382-3847390351-1001 -> hxxp://www.google.de/

FireFox:
========
FF ProfilePath: C:\Users\masup\AppData\Roaming\Mozilla\Firefox\Profiles\oqpg9dm2.default-1445867473043
FF Homepage: hxxps://www.google.de
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-26] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-26] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-10-27] (Microsoft Corporation)
FF Extension: Adblock Plus - C:\Users\masup\AppData\Roaming\Mozilla\Firefox\Profiles\oqpg9dm2.default-1445867473043\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-26]
FF HKLM-x32\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: Kein Name - C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2015-10-24] [ist nicht signiert]
FF HKU\S-1-5-21-880061057-3052452382-3847390351-1001\...\Firefox\Extensions: [safesearch@f-secure.com] - C:\Users\masup\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn
FF Extension: F-Secure Search - C:\Users\masup\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn [2015-10-25] [ist nicht signiert]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/F-Secure/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2015-06-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2856632 2015-10-15] (Microsoft Corporation)
R2 fshoster; C:\Program Files (x86)\F-Secure\Internet Security\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-10-07] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2015-10-24] (F-Secure Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 IBM Notes Diagnostics; C:\Program Files (x86)\IBM\Notes\nsd.exe [5164136 2013-10-15] (IBM)
R2 LNSUSvc; C:\Program Files (x86)\IBM\Notes\SUService.exe [1654376 2013-10-15] (IBM Corp)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Multi-user Cleanup Service; C:\Program Files (x86)\IBM\Notes\ntmulti.exe [38504 2013-10-15] (IBM Corp)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-10-24] (Advanced Micro Devices)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [217280 2015-10-24] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [73256 2015-10-24] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [66736 2015-10-24] ()
R3 fsni; C:\Program Files (x86)\F-Secure\Internet Security\apps\CCF_Scanning\bin\fsni64.sys [101488 2015-10-24] (F-Secure Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2204304 2015-07-10] (MediaTek Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Kingsbane 28.10.2015 18:28
Code:
==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-28 18:07 - 2015-10-28 18:07 - 00000000 ___HD C:\OneDriveTemp
2015-10-28 18:06 - 2015-10-28 18:06 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_masup_HistoryPrediction.bin
2015-10-28 16:45 - 2015-10-28 16:49 - 00013992 _____ C:\Users\masup\Downloads\SystemLook.txt
2015-10-28 16:44 - 2015-10-28 16:44 - 00165376 _____ C:\Users\masup\Downloads\SystemLook_x64.exe
2015-10-28 16:44 - 2015-10-28 16:44 - 00000623 _____ C:\Users\masup\Desktop\SystemLook_x64 - Shortcut.lnk
2015-10-27 20:53 - 2015-10-27 20:53 - 00280072 _____ C:\Windows\Minidump\102715-16859-01.dmp
2015-10-27 20:50 - 2015-10-27 20:50 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2015-10-27 20:39 - 2015-10-27 20:40 - 00279944 _____ C:\Windows\Minidump\102715-18593-01.dmp
2015-10-27 20:35 - 2015-10-27 20:53 - 330609423 _____ C:\Windows\MEMORY.DMP
2015-10-27 20:35 - 2015-10-27 20:53 - 00000000 ____D C:\Windows\Minidump
2015-10-27 20:35 - 2015-10-27 20:35 - 00279944 _____ C:\Windows\Minidump\102715-16906-01.dmp
2015-10-27 20:32 - 2015-10-27 20:32 - 00001010 _____ C:\Users\masup\Desktop\Gmer-19357 - Shortcut.lnk
2015-10-27 20:11 - 2015-10-27 20:15 - 00380416 _____ C:\Users\masup\Downloads\Gmer-19357.exe
2015-10-27 15:00 - 2015-10-27 15:00 - 00017676 _____ C:\Users\masup\Downloads\FRST.7z
2015-10-27 14:56 - 2015-10-27 14:57 - 00024730 _____ C:\Users\masup\Downloads\Addition.txt
2015-10-27 14:52 - 2015-10-27 14:52 - 00000472 _____ C:\Users\masup\Downloads\defogger_disable.log
2015-10-27 14:52 - 2015-10-27 14:52 - 00000000 _____ C:\Users\masup\defogger_reenable
2015-10-27 14:51 - 2015-10-27 14:51 - 00050477 _____ C:\Users\masup\Downloads\Defogger.exe
2015-10-27 14:04 - 2015-10-27 14:04 - 00020247 _____ C:\Users\masup\Downloads\FRST.zip
2015-10-27 12:58 - 2015-10-28 18:21 - 00017476 _____ C:\Users\masup\Downloads\FRST.txt
2015-10-27 12:58 - 2015-10-28 18:21 - 00000000 ____D C:\FRST
2015-10-27 12:57 - 2015-10-27 12:57 - 02197504 _____ (Farbar) C:\Users\masup\Downloads\FRST64.exe
2015-10-27 11:01 - 2015-10-27 11:01 - 02870984 _____ (ESET) C:\Users\masup\Downloads\esetsmartinstaller_deu.exe
2015-10-27 10:53 - 2015-10-27 10:53 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\masup\Downloads\sc-cleaner.exe
2015-10-27 10:53 - 2015-10-27 10:53 - 00001830 _____ C:\Users\masup\Desktop\sc-cleaner.txt
2015-10-27 10:20 - 2015-10-27 10:20 - 00000924 _____ C:\Users\masup\Desktop\JRT.txt
2015-10-27 10:12 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\masup\Desktop\JRT.exe
2015-10-27 10:11 - 2015-10-27 10:11 - 01798976 _____ (Malwarebytes) C:\Users\masup\Downloads\JRT.exe
2015-10-27 10:06 - 2015-10-27 10:06 - 00000000 ____D C:\Users\masup\.android
2015-10-27 09:03 - 2015-10-27 09:03 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_Administrator_HistoryPrediction.bin
2015-10-27 08:57 - 2015-10-27 08:57 - 00001609 _____ C:\Users\Administrator\Desktop\Microsoft Edge.lnk
2015-10-27 08:57 - 2015-10-27 08:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\teamdrive-Overlays
2015-10-26 23:34 - 2015-10-27 21:08 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-26 23:34 - 2015-10-26 23:48 - 00001165 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-26 23:34 - 2015-10-26 23:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-26 23:34 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-26 23:34 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-26 23:34 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-26 23:33 - 2015-10-26 23:34 - 22908888 _____ (Malwarebytes ) C:\Users\masup\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-26 23:03 - 2015-10-26 23:48 - 00001618 _____ C:\Users\masup\Desktop\Mozilla Firefox.lnk
2015-10-26 22:56 - 2015-10-27 10:01 - 00001609 _____ C:\Users\masup\Desktop\Microsoft Edge.lnk
2015-10-26 22:35 - 2015-10-26 22:35 - 00000000 _____ C:\autoexec.bat
2015-10-26 22:23 - 2015-10-26 22:24 - 00000000 ___HD C:\$SysReset
2015-10-26 22:16 - 2015-10-26 23:48 - 00001337 _____ C:\Users\masup\Desktop\Revo Uninstaller.lnk
2015-10-26 22:16 - 2015-10-26 22:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\masup\Downloads\revosetup95.exe
2015-10-26 22:16 - 2015-10-26 22:16 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-10-26 21:10 - 2015-10-26 21:10 - 00000000 ____D C:\Users\masup\AppData\Local\Macromedia
2015-10-26 15:25 - 2015-10-28 17:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-26 15:25 - 2015-10-26 15:25 - 00003860 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-26 14:59 - 2015-10-27 12:54 - 00000000 ____D C:\AdwCleaner
2015-10-26 14:58 - 2015-10-26 14:58 - 01694208 _____ C:\Users\masup\Downloads\adwcleaner_5.015.exe
2015-10-26 13:25 - 2015-10-26 13:28 - 00000121 ____R C:\Users\masup\OneDrive\Dokumente\Christoph-Privat.url
2015-10-26 12:16 - 2015-10-26 12:16 - 00000000 ____D C:\Windows\system32\SleepStudy
2015-10-26 11:53 - 2015-10-26 23:48 - 00002125 _____ C:\Users\Public\Desktop\IBM Notes.lnk
2015-10-26 11:53 - 2015-10-26 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM Anwendungen
2015-10-26 11:48 - 2015-10-28 18:06 - 00003870 _____ C:\SUService.log
2015-10-26 11:48 - 2015-10-26 11:48 - 00000000 ____D C:\Users\masup\AppData\Local\IBM
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\ProgramData\Lotus
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\ProgramData\IBM
2015-10-26 11:47 - 2015-10-26 11:47 - 00000000 ____D C:\Program Files (x86)\IBM
2015-10-26 11:46 - 2015-10-26 11:53 - 00255576 _____ C:\Users\masup\OneDrive\Dokumente\IBMNotesInstall.log
2015-10-26 11:46 - 2015-10-26 11:46 - 00063046 _____ C:\Users\masup\install.xml
2015-10-26 11:37 - 2015-10-26 23:48 - 00002037 _____ C:\Users\masup\Desktop\Akquisegesamtdatei_filmle.lnk
2015-10-26 10:33 - 2015-10-26 10:33 - 00000000 ____D C:\Users\masup\AppData\Local\PeerDistRepub
2015-10-25 14:57 - 2015-10-26 23:48 - 00001654 _____ C:\Users\masup\Desktop\ProgMetalZone_Tipps.lnk
2015-10-25 14:53 - 2015-10-26 23:48 - 00001450 _____ C:\Users\masup\Desktop\AusgabenCS.lnk
2015-10-25 14:52 - 2015-10-26 23:48 - 00001543 _____ C:\Users\masup\Desktop\Zeiterfassung 2015.lnk
2015-10-25 14:41 - 2015-10-25 14:41 - 00000000 ____D C:\Users\masup\AppData\Roaming\F-Secure
2015-10-25 14:30 - 2015-10-26 13:25 - 00000121 ____R C:\Users\masup\OneDrive\Dokumente\Notizbuch von Christoph.url
2015-10-25 14:29 - 2015-10-25 14:29 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\OneNote-Notizbücher
2015-10-24 22:17 - 2015-10-24 22:17 - 00000034 _____ C:\Windows\cdplayer.ini
2015-10-24 22:17 - 2015-10-24 22:17 - 00000000 ____D C:\Users\masup\AppData\Roaming\dlg
2015-10-24 22:14 - 2015-10-26 23:48 - 00001186 _____ C:\Users\Public\Desktop\Audiograbber.lnk
2015-10-24 22:14 - 2015-10-24 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-10-24 22:14 - 2015-10-24 22:14 - 00000000 ____D C:\Program Files (x86)\Audiograbber
2015-10-24 22:13 - 2015-10-24 22:13 - 00000000 ____D C:\Users\masup\AppData\Roaming\AVG
2015-10-24 22:13 - 2015-10-24 22:13 - 00000000 ____D C:\Users\masup\AppData\Local\Avg
2015-10-24 22:12 - 2015-10-24 22:14 - 00000000 ____D C:\ProgramData\AVG
2015-10-24 22:08 - 2015-10-24 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diagram Designer
2015-10-24 22:08 - 2015-10-24 22:08 - 00000000 ____D C:\Program Files (x86)\MeeSoft
2015-10-24 22:06 - 2015-10-26 23:48 - 00001144 _____ C:\Users\Public\Desktop\TeamDrive.lnk
2015-10-24 22:06 - 2015-10-24 22:06 - 00000000 ____D C:\Users\masup\AppData\Roaming\teamdrive-Overlays
2015-10-24 22:06 - 2015-10-24 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamDrive
2015-10-24 22:05 - 2015-10-24 22:06 - 00000000 ____D C:\Program Files (x86)\TeamDrive
2015-10-24 22:00 - 2015-10-24 22:00 - 00000000 ____D C:\Users\masup\.freemind
2015-10-24 21:59 - 2015-10-28 18:09 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2E1EF3F1-B686-4AA0-B7B1-91238F7DA809}
2015-10-24 21:58 - 2015-10-24 21:58 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\AppData\Roaming\Sun
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\AppData\LocalLow\Sun
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Users\masup\.oracle_jre_usage
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\ProgramData\Oracle
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-24 21:58 - 2015-10-24 21:58 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-24 21:57 - 2015-10-24 21:57 - 00000000 ____D C:\Users\masup\AppData\LocalLow\Oracle
2015-10-24 21:56 - 2015-10-26 23:48 - 00001138 _____ C:\Users\Public\Desktop\FastStone Capture.lnk
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\Users\masup\AppData\Roaming\FastStone
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2015-10-24 21:56 - 2015-10-24 21:56 - 00000000 ____D C:\Program Files (x86)\FastStone Capture
2015-10-24 21:54 - 2015-10-24 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-10-24 21:54 - 2015-10-24 21:54 - 00000000 ____D C:\Program Files\7-Zip
2015-10-24 21:52 - 2015-10-26 23:48 - 00001160 _____ C:\Users\masup\Desktop\FreeMind.lnk
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\Program Files (x86)\FreeMind
2015-10-24 21:50 - 2015-10-26 23:48 - 00001047 _____ C:\Users\masup\Desktop\IrfanView 64.lnk
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Users\masup\AppData\Roaming\IrfanView
2015-10-24 21:50 - 2015-10-24 21:50 - 00000000 ____D C:\Program Files\IrfanView
2015-10-24 21:36 - 2015-10-26 23:49 - 00001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-10-24 21:36 - 2015-10-26 23:48 - 00001094 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-10-24 21:36 - 2015-10-26 17:38 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-10-24 21:36 - 2015-10-25 14:58 - 00000000 ____D C:\Users\masup\AppData\Roaming\TeamViewer
2015-10-24 21:22 - 2015-10-24 21:22 - 00002378 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-24 21:22 - 2015-10-24 21:22 - 00000000 ___RD C:\Users\Administrator\OneDrive
2015-10-24 21:22 - 2015-10-24 21:22 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Hewlett-Packard
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\AMD
2015-10-24 21:20 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2015-10-24 21:19 - 2015-10-24 21:19 - 00000000 ____D C:\Users\Administrator\AppData\Local\Publishers
2015-10-24 21:18 - 2015-10-24 21:41 - 00000000 ____D C:\Users\Administrator\AppData\Local\Packages
2015-10-24 21:18 - 2015-10-24 21:22 - 00000000 ____D C:\Users\Administrator
2015-10-24 21:18 - 2015-10-24 21:20 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2015-10-24 21:18 - 2015-10-24 21:18 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Vorlagen
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 21:18 - 2015-10-24 21:18 - 00000000 ____D C:\Users\Administrator\AppData\Local\TileDataLayer
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 21:18 - 2015-07-10 12:04 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 21:14 - 2015-10-24 21:14 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\Benutzerdefinierte Office-Vorlagen
2015-10-24 21:12 - 2015-10-26 15:53 - 00000000 ____D C:\Users\masup\AppData\Roaming\MyPhoneExplorer
2015-10-24 21:11 - 2015-10-26 23:48 - 00002120 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-10-24 21:11 - 2015-10-24 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-10-24 21:11 - 2015-10-24 21:11 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2015-10-24 21:07 - 2015-10-27 16:35 - 00000000 ____D C:\Users\Privat\Musik
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Verschlüsselte Mails
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Urlaub
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Sport
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Spaß
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Sonstiges
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Nebenkosten
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Klavier
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Jonah
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Hochzeit
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Handykosten
2015-10-24 21:07 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Gitarre
2015-10-24 21:06 - 2015-10-24 21:07 - 00000000 ____D C:\Users\Privat\Finanzen
2015-10-24 21:06 - 2015-10-24 21:06 - 00000000 ____D C:\Users\Privat\Eva
2015-10-24 21:06 - 2015-10-24 21:06 - 00000000 ____D C:\Users\Privat\CD Files
2015-10-24 21:05 - 2015-10-28 10:18 - 00245248 _____ C:\Users\Privat\AusgabenCS.xls
2015-10-24 21:05 - 2015-10-28 10:18 - 00000000 ____D C:\Users\Privat
2015-10-24 21:05 - 2015-10-24 21:05 - 00000000 ____D C:\Users\Privat\Bihlmaier
2015-10-24 21:05 - 2013-07-03 19:34 - 00032768 ___SH C:\Users\Privat\Thumbs.db
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Videomail
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Studien
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Steuer
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Sonstiges
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Social Media
2015-10-24 21:04 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Rechnungen
2015-10-24 21:00 - 2015-10-25 14:57 - 00000000 ____D C:\Users\Geschäft
2015-10-24 21:00 - 2015-10-24 21:29 - 00075073 _____ C:\Users\Geschäft\Zeiterfassung 2015.xlsx
2015-10-24 21:00 - 2015-10-24 21:04 - 00000000 ____D C:\Users\Geschäft\Projekte
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Mindmaps
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Logos
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Graphik
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Fragebogen Website
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Finanzen
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Bilder Website
2015-10-24 21:00 - 2015-10-24 21:00 - 00000000 ____D C:\Users\Geschäft\Auto
2015-10-24 21:00 - 2015-10-15 15:29 - 00140800 _____ C:\Users\Geschäft\Zeiterfassung 2014.xls
2015-10-24 21:00 - 2015-07-06 15:37 - 00020480 _____ C:\Users\Geschäft\Fahrtenbuch.xls
2015-10-24 21:00 - 2013-12-20 16:29 - 00136704 _____ C:\Users\Geschäft\Zeiterfassung 2013.xls
2015-10-24 21:00 - 2013-01-09 09:38 - 00188416 _____ C:\Users\Geschäft\Zeiterfassung 2012.xls
2015-10-24 21:00 - 2011-12-27 09:19 - 00190976 _____ C:\Users\Geschäft\Zeiterfassung 2011.xls
2015-10-24 20:52 - 2015-10-24 20:52 - 00000000 ____D C:\ProgramData\FLEXnet
2015-10-24 20:38 - 2015-10-24 20:38 - 00000000 ____D C:\Program Files\Adobe
2015-10-24 20:34 - 2015-10-24 20:34 - 00000000 ____D C:\Users\masup\AppData\Local\Hewlett-Packard
2015-10-24 20:25 - 2015-10-24 20:25 - 00000000 ____D C:\ProgramData\ALM
2015-10-24 20:24 - 2015-10-26 23:48 - 00002092 _____ C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
2015-10-24 20:24 - 2008-04-07 04:38 - 00051032 ____R (Adobe Systems Inc) C:\Windows\system32\AdobePDF.dll
2015-10-24 20:24 - 2008-04-07 04:38 - 00024416 ____R (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2015-10-24 20:20 - 2015-10-24 20:20 - 00000110 _____ C:\Windows\wininit.ini
2015-10-24 20:19 - 2015-10-26 23:49 - 00001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\Windows\SysWOW64\spool
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-10-24 20:16 - 2015-10-24 20:16 - 00000000 ____D C:\Program Files (x86)\Adobe Media Player
2015-10-24 20:15 - 2015-10-24 20:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Design Standard CS4
2015-10-24 20:15 - 2015-10-24 20:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-24 20:15 - 2015-10-24 20:24 - 00000000 ____D C:\ProgramData\Adobe
2015-10-24 20:14 - 2015-10-26 15:26 - 00000000 ____D C:\Users\masup\AppData\Local\Adobe
2015-10-24 20:14 - 2015-10-24 20:39 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-10-24 20:14 - 2015-10-24 20:14 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2015-10-24 20:03 - 2015-10-24 20:03 - 00000000 ____D C:\Users\masup\AppData\Roaming\Hewlett-Packard
2015-10-24 19:57 - 2015-10-26 23:48 - 00002290 _____ C:\Users\masup\Desktop\HP Support Assistant.lnk
2015-10-24 19:57 - 2015-10-24 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-10-24 19:56 - 2015-10-26 10:17 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-10-24 19:56 - 2015-10-24 19:57 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2015-10-24 19:56 - 2015-10-24 19:56 - 00000000 ____D C:\Users\masup\AppData\Roaming\hpqLog
2015-10-24 19:56 - 2015-10-24 19:56 - 00000000 ____D C:\System.sav
2015-10-24 19:55 - 2015-10-26 10:17 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2015-10-24 19:55 - 2015-10-24 19:55 - 00000000 ____D C:\ProgramData\{ECA9D0D4-7782-4B7F-96E2-FDB0CF0A57D5}
2015-10-24 19:49 - 2015-10-24 19:56 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-10-24 19:47 - 2015-10-24 19:47 - 00003198 _____ C:\Windows\System32\Tasks\{7E272F86-0284-41D2-8563-DB9966BB8D7F}
2015-10-24 19:46 - 2015-10-24 19:53 - 00000680 _____ C:\ProgramData\hpzinstall.log
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files\MSBuild
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-10-24 19:45 - 2015-10-24 19:45 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-10-24 19:43 - 2015-06-17 17:10 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2015-10-24 19:43 - 2015-06-17 17:10 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 19:43 - 2015-06-17 17:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-10-24 19:43 - 2015-05-29 20:07 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2015-10-24 19:43 - 2015-05-29 20:07 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 19:43 - 2015-05-29 20:07 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-10-24 19:37 - 2015-10-24 19:37 - 00000000 ____D C:\ProgramData\HP
2015-10-24 19:22 - 2015-10-26 23:49 - 00001216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-24 19:22 - 2015-10-24 19:33 - 00000000 ____D C:\Users\masup\AppData\Local\Mozilla
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Users\masup\AppData\Roaming\Mozilla
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-24 19:22 - 2015-10-24 19:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-24 18:28 - 2015-10-24 18:28 - 00000000 ____D C:\Users\masup\AppData\Local\NetworkTiles
2015-10-24 15:57 - 2015-10-24 16:00 - 00066736 _____ C:\Windows\system32\Drivers\fsbts.sys
2015-10-24 15:57 - 2015-10-24 15:57 - 00020896 _____ C:\Windows\prodsett_copy.ini
2015-10-24 15:57 - 2015-10-24 15:57 - 00000693 _____ C:\Windows\fsav_db_setup.log
2015-10-24 15:56 - 2015-10-24 15:57 - 04580652 _____ C:\Windows\FSISU.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00986473 _____ C:\Windows\FSSFM.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00874291 _____ C:\Windows\FSSETUP.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00140799 _____ C:\Windows\FSDEPH.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00136095 _____ C:\Windows\FSPROD.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00088494 _____ C:\Windows\RunSetup.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00073876 _____ C:\Windows\FSAVINST.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00010479 _____ C:\Windows\FSAVCSIN.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00004453 _____ C:\Windows\FSGKIAIN.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00004410 _____ C:\Windows\fstnbins.LOG
2015-10-24 15:56 - 2015-10-24 15:57 - 00003489 _____ C:\Windows\fsavunin.log
2015-10-24 15:56 - 2015-10-24 15:57 - 00001907 _____ C:\Windows\FSLDIN.LOG
2015-10-24 15:56 - 2015-10-24 15:56 - 00019322 _____ C:\Windows\fspplugin.log
2015-10-24 15:54 - 2015-10-24 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure
2015-10-24 15:54 - 2015-10-24 15:54 - 00000000 ____D C:\Program Files (x86)\F-Secure
2015-10-24 15:53 - 2015-10-26 20:14 - 00000000 ____D C:\Users\masup\AppData\Local\F-Secure
2015-10-24 15:53 - 2015-10-24 15:57 - 00000000 ____D C:\ProgramData\F-Secure
2015-10-24 15:43 - 2015-10-28 18:04 - 00000000 ____D C:\Users\masup\OneDrive\Dokumente\Outlook-Dateien
2015-10-24 15:31 - 2015-10-24 15:32 - 00000000 ____D C:\Users\masup\AppData\Local\MicrosoftEdge
2015-10-24 15:31 - 2015-10-24 15:31 - 00000000 ____D C:\Users\masup\AppData\Roaming\Macromedia
2015-10-24 13:23 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-10-24 13:18 - 2015-10-24 13:21 - 00000000 ____D C:\Windows\system32\MRT
2015-10-24 13:18 - 2015-10-02 11:09 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-24 13:17 - 2015-10-10 07:40 - 21875712 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-10-24 13:17 - 2015-10-10 07:07 - 18806272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-10-24 13:17 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-24 13:17 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-10-24 13:17 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-24 13:17 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-10-24 13:17 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-24 13:17 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-24 13:17 - 2015-09-25 04:17 - 24595456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-24 13:17 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-24 13:17 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-10-24 13:17 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-24 13:17 - 2015-09-25 03:48 - 19325952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-24 13:17 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-24 13:17 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-10-24 13:17 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-10-24 13:17 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-10-24 13:17 - 2015-09-17 07:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll
2015-10-24 13:17 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2015-10-24 13:17 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-10-24 13:17 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2015-10-24 13:17 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-10-24 13:17 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-10-24 13:17 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2015-10-24 13:17 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2015-10-24 13:17 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2015-10-24 13:17 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2015-10-24 13:17 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2015-10-24 13:17 - 2015-08-11 11:04 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-10-24 13:17 - 2015-08-11 10:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-10-24 13:17 - 2015-08-11 10:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-10-24 13:17 - 2015-08-03 03:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2015-10-24 13:17 - 2015-08-03 02:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-10-24 13:17 - 2015-07-30 04:49 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-10-24 13:17 - 2015-07-30 04:15 - 09889792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-10-24 13:17 - 2015-07-22 04:54 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-10-24 13:17 - 2015-07-22 04:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-10-24 13:17 - 2015-07-15 03:41 - 01135312 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2015-10-24 13:17 - 2015-07-15 02:47 - 04611584 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-10-24 13:17 - 2015-07-11 02:17 - 06305792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-10-24 13:17 - 2015-07-11 01:51 - 04398080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-10-24 13:16 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-24 13:16 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-24 13:16 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-24 13:16 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-24 13:16 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-24 13:16 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-24 13:16 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-10-24 13:16 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-10-24 13:16 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-10-24 13:16 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-10-24 13:16 - 2015-09-25 04:04 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-10-24 13:16 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-24 13:16 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2015-10-24 13:16 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-24 13:16 - 2015-09-25 04:02 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-10-24 13:16 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-10-24 13:16 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-10-24 13:16 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-10-24 13:16 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-10-24 13:16 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-10-24 13:16 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2015-10-24 13:16 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-10-24 13:16 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2015-10-24 13:16 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-24 13:16 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2015-10-24 13:16 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2015-10-24 13:16 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2015-10-24 13:16 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-10-24 13:16 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-10-24 13:16 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2015-10-24 13:16 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2015-10-24 13:16 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-10-24 13:16 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2015-10-24 13:16 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2015-10-24 13:16 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-10-24 13:16 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2015-10-24 13:16 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-10-24 13:16 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2015-10-24 13:16 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2015-10-24 13:16 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-10-24 13:16 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-10-24 13:16 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2015-10-24 13:16 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-10-24 13:16 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2015-10-24 13:16 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-10-24 13:16 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2015-10-24 13:16 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2015-10-24 13:16 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-10-24 13:16 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2015-10-24 13:16 - 2015-09-17 07:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2015-10-24 13:16 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2015-10-24 13:16 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2015-10-24 13:16 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-10-24 13:16 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2015-10-24 13:16 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2015-10-24 13:16 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll
2015-10-24 13:16 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2015-10-24 13:16 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2015-10-24 13:16 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2015-10-24 13:16 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2015-10-24 13:16 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2015-10-24 13:16 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-10-24 13:16 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2015-10-24 13:16 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2015-10-24 13:16 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2015-10-24 13:16 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-24 13:16 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2015-10-24 13:16 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2015-10-24 13:16 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2015-10-24 13:16 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2015-10-24 13:16 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
2015-10-24 13:16 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-10-24 13:16 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-10-24 13:16 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-10-24 13:16 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2015-10-24 13:16 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys
2015-10-24 13:16 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll
2015-10-24 13:16 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2015-10-24 13:16 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-24 13:16 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2015-10-24 13:16 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2015-10-24 13:16 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2015-10-24 13:16 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-10-24 13:16 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-10-24 13:16 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2015-10-24 13:16 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-10-24 13:16 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2015-10-24 13:16 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-10-24 13:16 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2015-10-24 13:16 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-24 13:16 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2015-10-24 13:16 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2015-10-24 13:16 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-24 13:16 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2015-10-24 13:16 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-24 13:16 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2015-10-24 13:16 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2015-10-24 13:16 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2015-10-24 13:16 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2015-10-24 13:16 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2015-10-24 13:16 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2015-10-24 13:16 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-10-24 13:16 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-10-24 13:16 - 2015-08-27 07:36 - 03620736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-24 13:16 - 2015-08-27 07:32 - 00608936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2015-10-24 13:16 - 2015-08-27 06:59 - 02880032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-24 13:16 - 2015-08-27 06:54 - 00541248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2015-10-24 13:16 - 2015-08-27 06:54 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-10-24 13:16 - 2015-08-27 06:51 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-10-24 13:16 - 2015-08-27 06:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-10-24 13:16 - 2015-08-27 06:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll
2015-10-24 13:16 - 2015-08-27 06:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-10-24 13:16 - 2015-08-27 06:23 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-10-24 13:16 - 2015-08-27 06:16 - 02153472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-10-24 13:16 - 2015-08-27 06:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-10-24 13:16 - 2015-08-27 06:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-10-24 13:16 - 2015-08-27 06:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-10-24 13:16 - 2015-08-20 07:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-10-24 13:16 - 2015-08-20 06:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2015-10-24 13:16 - 2015-08-20 06:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2015-10-24 13:16 - 2015-08-18 08:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-10-24 13:16 - 2015-08-18 08:13 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2015-10-24 13:16 - 2015-08-18 08:13 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2015-10-24 13:16 - 2015-08-18 07:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2015-10-24 13:16 - 2015-08-18 07:58 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2015-10-24 13:16 - 2015-08-18 07:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2015-10-24 13:16 - 2015-08-18 07:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll
2015-10-24 13:16 - 2015-08-18 07:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-10-24 13:16 - 2015-08-18 07:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2015-10-24 13:16 - 2015-08-18 07:49 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2015-10-24 13:16 - 2015-08-18 07:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-10-24 13:16 - 2015-08-18 05:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList
2015-10-24 13:16 - 2015-08-11 11:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-10-24 13:16 - 2015-08-11 11:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2015-10-24 13:16 - 2015-08-11 11:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2015-10-24 13:16 - 2015-08-11 10:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2015-10-24 13:16 - 2015-08-11 10:50 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-10-24 13:16 - 2015-08-11 10:40 - 04048808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-10-24 13:16 - 2015-08-11 10:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-10-24 13:16 - 2015-08-11 10:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2015-10-24 13:16 - 2015-08-11 10:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2015-10-24 13:16 - 2015-08-11 10:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2015-10-24 13:16 - 2015-08-11 10:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2015-10-24 13:16 - 2015-08-11 10:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll
2015-10-24 13:16 - 2015-08-11 10:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll
2015-10-24 13:16 - 2015-08-11 10:11 - 02446336 _____ C:\Windows\system32\InputService.dll
2015-10-24 13:16 - 2015-08-11 10:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2015-10-24 13:16 - 2015-08-11 10:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll
2015-10-24 13:16 - 2015-08-11 10:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2015-10-24 13:16 - 2015-08-11 10:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2015-10-24 13:16 - 2015-08-11 10:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll
2015-10-24 13:16 - 2015-08-11 10:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2015-10-24 13:16 - 2015-08-11 10:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-10-24 13:16 - 2015-08-11 09:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-10-24 13:16 - 2015-08-11 09:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2015-10-24 13:16 - 2015-08-11 09:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2015-10-24 13:16 - 2015-08-11 09:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll
2015-10-24 13:16 - 2015-08-11 09:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll
2015-10-24 13:16 - 2015-08-11 09:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2015-10-24 13:16 - 2015-08-11 09:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-10-24 13:16 - 2015-08-11 09:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-10-24 13:16 - 2015-08-11 09:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-10-24 13:16 - 2015-08-08 08:29 - 01822280 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-24 13:16 - 2015-08-08 08:01 - 01533496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-24 13:16 - 2015-08-08 07:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-10-24 13:16 - 2015-08-08 07:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-10-24 13:16 - 2015-08-08 07:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-10-24 13:16 - 2015-08-06 04:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2015-10-24 13:16 - 2015-08-06 04:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2015-10-24 13:16 - 2015-08-06 03:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2015-10-24 13:16 - 2015-08-05 05:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-10-24 13:16 - 2015-08-05 04:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-10-24 13:16 - 2015-08-04 05:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-10-24 13:16 - 2015-08-04 04:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2015-10-24 13:16 - 2015-08-03 03:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2015-10-24 13:16 - 2015-08-03 03:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2015-10-24 13:16 - 2015-08-03 03:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2015-10-24 13:16 - 2015-08-03 03:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-10-24 13:16 - 2015-08-03 03:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2015-10-24 13:16 - 2015-08-03 02:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2015-10-24 13:16 - 2015-08-03 02:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll
2015-10-24 13:16 - 2015-08-03 02:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll
2015-10-24 13:16 - 2015-08-03 02:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2015-10-24 13:16 - 2015-08-03 02:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll
2015-10-24 13:16 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2015-10-24 13:16 - 2015-08-03 02:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2015-10-24 13:16 - 2015-08-03 02:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2015-10-24 13:16 - 2015-08-03 02:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2015-10-24 13:16 - 2015-08-03 02:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-10-24 13:16 - 2015-08-03 02:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2015-10-24 13:16 - 2015-08-03 01:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2015-10-24 13:16 - 2015-07-30 07:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-10-24 13:16 - 2015-07-30 07:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-24 13:16 - 2015-07-30 07:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2015-10-24 13:16 - 2015-07-30 07:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-10-24 13:16 - 2015-07-30 07:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2015-10-24 13:16 - 2015-07-30 07:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-10-24 13:16 - 2015-07-30 07:03 - 02116448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-10-24 13:16 - 2015-07-30 06:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-10-24 13:16 - 2015-07-30 05:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-24 13:16 - 2015-07-30 05:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2015-10-24 13:16 - 2015-07-30 05:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-10-24 13:16 - 2015-07-30 05:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2015-10-24 13:16 - 2015-07-30 05:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 05:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2015-10-24 13:16 - 2015-07-30 05:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2015-10-24 13:16 - 2015-07-30 04:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2015-10-24 13:16 - 2015-07-30 04:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-10-24 13:16 - 2015-07-30 04:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 04:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2015-10-24 13:16 - 2015-07-30 04:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-10-24 13:16 - 2015-07-30 04:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2015-10-24 13:16 - 2015-07-30 04:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2015-10-24 13:16 - 2015-07-30 04:38 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-10-24 13:16 - 2015-07-30 04:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2015-10-24 13:16 - 2015-07-30 04:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2015-10-24 13:16 - 2015-07-30 04:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2015-10-24 13:16 - 2015-07-30 04:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-10-24 13:16 - 2015-07-30 03:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2015-10-24 13:16 - 2015-07-26 04:49 - 04760576 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-24 13:16 - 2015-07-26 04:49 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-10-24 13:16 - 2015-07-26 04:47 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-10-24 13:16 - 2015-07-26 04:40 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-10-24 13:16 - 2015-07-26 04:40 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-10-24 13:16 - 2015-07-26 04:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2015-10-24 13:16 - 2015-07-26 04:38 - 04350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-24 13:16 - 2015-07-26 04:35 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-10-24 13:16 - 2015-07-26 04:34 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-10-24 13:16 - 2015-07-26 04:30 - 00750592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-10-24 13:16 - 2015-07-26 04:30 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-10-24 13:16 - 2015-07-26 04:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2015-10-24 13:16 - 2015-07-24 04:17 - 00695136 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2015-10-24 13:16 - 2015-07-24 04:12 - 00584544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2015-10-24 13:16 - 2015-07-24 03:55 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2015-10-24 13:16 - 2015-07-24 03:52 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2015-10-24 13:16 - 2015-07-24 03:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2015-10-24 13:16 - 2015-07-24 03:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2015-10-24 13:16 - 2015-07-24 03:24 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2015-10-24 13:16 - 2015-07-24 03:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2015-10-24 13:16 - 2015-07-22 05:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-10-24 13:16 - 2015-07-22 05:02 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-10-24 13:16 - 2015-07-22 05:00 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-24 13:16 - 2015-07-22 05:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-10-24 13:16 - 2015-07-22 04:21 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-10-24 13:16 - 2015-07-22 04:13 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-24 13:16 - 2015-07-22 04:07 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-10-24 13:16 - 2015-07-19 05:04 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2015-10-24 13:16 - 2015-07-19 04:23 - 00505344 _____ C:\Windows\system32\EditionUpgradeManagerObj.dll
2015-10-24 13:16 - 2015-07-19 04:18 - 00430592 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2015-10-24 13:16 - 2015-07-18 09:47 - 00082616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2015-10-24 13:16 - 2015-07-18 08:43 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2015-10-24 13:16 - 2015-07-18 08:37 - 01043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2015-10-24 13:16 - 2015-07-18 08:29 - 03443200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2015-10-24 13:16 - 2015-07-18 06:17 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2015-10-24 13:16 - 2015-07-18 06:02 - 00290312 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2015-10-24 13:16 - 2015-07-18 05:06 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2015-10-24 13:16 - 2015-07-18 04:59 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2015-10-24 13:16 - 2015-07-18 04:59 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2015-10-24 13:16 - 2015-07-18 04:52 - 04169728 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2015-10-24 13:16 - 2015-07-18 04:50 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2015-10-24 13:16 - 2015-07-18 04:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2015-10-24 13:16 - 2015-07-17 05:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2015-10-24 13:16 - 2015-07-17 05:13 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-10-24 13:16 - 2015-07-17 05:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-10-24 13:16 - 2015-07-17 03:39 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-10-24 13:16 - 2015-07-17 03:32 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-10-24 13:16 - 2015-07-17 03:31 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-24 13:16 - 2015-07-17 03:26 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2015-10-24 13:16 - 2015-07-17 03:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2015-10-24 13:16 - 2015-07-17 03:18 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-10-24 13:16 - 2015-07-17 03:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-10-24 13:16 - 2015-07-17 02:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2015-10-24 13:16 - 2015-07-17 02:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
2015-10-24 13:16 - 2015-07-17 02:44 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-10-24 13:16 - 2015-07-16 06:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-10-24 13:16 - 2015-07-16 05:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2015-10-24 13:16 - 2015-07-16 05:04 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2015-10-24 13:16 - 2015-07-16 05:03 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2015-10-24 13:16 - 2015-07-16 04:47 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2015-10-24 13:16 - 2015-07-16 04:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2015-10-24 13:16 - 2015-07-16 04:43 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-24 13:16 - 2015-07-16 04:41 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2015-10-24 13:16 - 2015-07-16 04:40 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2015-10-24 13:16 - 2015-07-16 04:36 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2015-10-24 13:16 - 2015-07-16 04:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2015-10-24 13:16 - 2015-07-16 04:33 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll
2015-10-24 13:16 - 2015-07-16 04:32 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2015-10-24 13:16 - 2015-07-16 04:29 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-24 13:16 - 2015-07-16 04:19 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll
2015-10-24 13:16 - 2015-07-15 04:21 - 01365072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-10-24 13:16 - 2015-07-15 03:49 - 01591856 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-10-24 13:16 - 2015-07-15 03:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-10-24 13:16 - 2015-07-15 03:22 - 02112512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-10-24 13:16 - 2015-07-15 02:57 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\OmaDmAgent.dll
2015-10-24 13:16 - 2015-07-15 02:37 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.ProxyStub.dll
2015-10-24 13:16 - 2015-07-15 02:35 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\unenrollhook.dll
2015-10-24 13:16 - 2015-07-14 04:00 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-10-24 13:16 - 2015-07-14 03:37 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-10-24 13:16 - 2015-07-14 03:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys
2015-10-24 13:16 - 2015-07-14 02:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2015-10-24 13:16 - 2015-07-14 02:38 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2015-10-24 13:16 - 2015-07-14 02:20 - 00279552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-10-24 13:16 - 2015-07-13 01:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2015-10-24 13:16 - 2015-07-13 00:30 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2015-10-24 13:16 - 2015-07-12 01:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2015-10-24 13:16 - 2015-07-12 01:25 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2015-10-24 13:16 - 2015-07-12 01:18 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2015-10-24 13:16 - 2015-07-12 00:46 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2015-10-24 13:16 - 2015-07-11 02:28 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2015-10-24 13:16 - 2015-07-11 02:07 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2015-10-24 13:16 - 2015-07-11 02:05 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2015-10-24 13:16 - 2015-07-11 02:04 - 03362816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-10-24 13:16 - 2015-07-11 02:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-10-24 13:16 - 2015-07-11 02:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-10-24 13:16 - 2015-07-11 02:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2015-10-24 13:16 - 2015-07-11 01:57 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2015-10-24 13:16 - 2015-07-11 01:43 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-10-24 13:16 - 2015-07-11 01:42 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2015-10-24 13:16 - 2015-07-11 01:41 - 03687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-10-24 13:16 - 2015-07-11 01:40 - 02606080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-10-24 13:16 - 2015-07-11 01:34 - 00294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2015-10-24 13:16 - 2015-07-10 16:51 - 00823336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-10-24 13:16 - 2015-07-10 16:47 - 00265480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-10-24 13:16 - 2015-07-10 16:00 - 01101792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-10-24 13:16 - 2015-07-10 15:52 - 00335248 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-10-24 13:16 - 2015-07-10 11:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2015-10-24 13:16 - 2015-07-10 11:05 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2015-10-24 13:16 - 2015-07-10 10:53 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2015-10-24 13:16 - 2015-07-10 10:29 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2015-10-24 13:15 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2015-10-24 13:15 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-24 13:15 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2015-10-24 13:15 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2015-10-24 13:15 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2015-10-24 13:15 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2015-10-24 13:15 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-10-24 13:15 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-10-24 13:15 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2015-10-24 13:15 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2015-10-24 13:15 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2015-10-24 13:15 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2015-10-24 13:15 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2015-10-24 13:15 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2015-10-24 13:15 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2015-10-24 13:15 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-24 13:15 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2015-10-24 13:15 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2015-10-24 13:15 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2015-10-24 13:15 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-10-24 13:15 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2015-10-24 13:15 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll
2015-10-24 13:15 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll
2015-10-24 13:15 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll
2015-10-24 13:15 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2015-10-24 13:15 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll
2015-10-24 13:15 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2015-10-24 13:15 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2015-10-24 13:15 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 13:15 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
2015-10-24 13:15 - 2015-08-27 06:39 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-10-24 13:15 - 2015-08-27 06:08 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-10-24 13:15 - 2015-08-18 08:04 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-10-24 13:15 - 2015-08-18 07:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2015-10-24 13:15 - 2015-08-18 07:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2015-10-24 13:15 - 2015-08-18 07:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2015-10-24 13:15 - 2015-08-18 07:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2015-10-24 13:15 - 2015-08-18 07:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2015-10-24 13:15 - 2015-08-18 07:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
2015-10-24 13:15 - 2015-08-18 07:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2015-10-24 13:15 - 2015-08-18 07:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2015-10-24 13:15 - 2015-08-18 07:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2015-10-24 13:15 - 2015-08-18 07:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2015-10-24 13:15 - 2015-08-11 11:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-10-24 13:15 - 2015-08-11 10:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2015-10-24 13:15 - 2015-08-11 10:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2015-10-24 13:15 - 2015-08-11 09:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2015-10-24 13:15 - 2015-08-11 09:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll
2015-10-24 13:15 - 2015-08-11 09:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2015-10-24 13:15 - 2015-08-11 09:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2015-10-24 13:15 - 2015-08-11 09:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2015-10-24 13:15 - 2015-08-03 03:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys
2015-10-24 13:15 - 2015-07-30 05:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-10-24 13:15 - 2015-07-30 04:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2015-10-24 13:15 - 2015-07-30 04:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2015-10-24 13:15 - 2015-07-30 04:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-10-24 13:15 - 2015-07-30 04:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll
2015-10-24 13:15 - 2015-07-30 04:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2015-10-24 13:15 - 2015-07-30 04:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2015-10-24 13:15 - 2015-07-30 04:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll
2015-10-24 13:15 - 2015-07-24 04:17 - 00521568 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2015-10-24 13:15 - 2015-07-24 03:30 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-10-24 13:15 - 2015-07-24 03:29 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2015-10-24 13:15 - 2015-07-22 06:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2015-10-24 13:15 - 2015-07-22 04:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2015-10-24 13:15 - 2015-07-18 08:28 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2015-10-24 13:15 - 2015-07-18 08:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2015-10-24 13:15 - 2015-07-18 04:49 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2015-10-24 13:15 - 2015-07-18 04:49 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2015-10-24 13:15 - 2015-07-18 04:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2015-10-24 13:15 - 2015-07-18 04:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-24 13:15 - 2015-07-17 05:12 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-10-24 13:15 - 2015-07-17 03:33 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\omadmprc.exe
2015-10-24 13:15 - 2015-07-15 03:04 - 00032768 _____ C:\Windows\system32\LicenseManagerApi.dll
2015-10-24 13:15 - 2015-07-15 02:27 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll
2015-10-24 13:15 - 2015-07-11 01:40 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-10-24 13:15 - 2015-07-10 11:42 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2015-10-24 13:15 - 2015-07-10 11:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2015-10-24 12:46 - 2015-10-26 23:49 - 00002574 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002571 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002567 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002524 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2015-10-24 12:46 - 2015-10-26 23:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2015-10-24 12:46 - 2015-10-24 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2015-10-24 12:42 - 2015-10-27 22:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-10-24 12:42 - 2015-10-24 12:42 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-24 12:38 - 2015-10-24 12:20 - 00000000 ____D C:\Windows\Panther
2015-10-24 12:32 - 2015-10-28 18:07 - 00000000 ___RD C:\Users\masup\OneDrive
2015-10-24 12:32 - 2015-10-26 23:48 - 00002354 _____ C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-24 12:32 - 2015-10-24 20:52 - 00000000 ____D C:\Users\masup\AppData\Local\AMD
2015-10-24 12:32 - 2015-07-09 12:50 - 00001094 _____ C:\Users\masup\OneDrive\Dokumente\Kalender von Masup cs.ics
2015-10-24 12:31 - 2015-10-24 12:31 - 00062133 _____ C:\Windows\SysWOW64\CCCInstall_201510241331293895.log
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Users\masup\AppData\Roaming\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Users\masup\AppData\Local\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\ATI
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\ProgramData\AMD
2015-10-24 12:31 - 2015-10-24 12:31 - 00000000 ____D C:\Program Files\ATI Technologies
2015-10-24 12:30 - 2015-10-24 12:32 - 00000000 ____D C:\Users\masup\AppData\Local\Comms
2015-10-24 12:30 - 2015-10-24 12:31 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-10-24 12:30 - 2015-10-24 12:30 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-24 12:30 - 2015-07-09 19:39 - 04847104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NlsData0009.dll
2015-10-24 12:30 - 2015-07-09 19:36 - 02629632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NlsLexicons0009.dll
2015-10-24 12:30 - 2015-07-09 19:28 - 06358016 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0009.dll
2015-10-24 12:30 - 2015-07-09 19:25 - 05739520 _____ (Microsoft Corporation) C:\Windows\system32\prm0009.dll
2015-10-24 12:30 - 2015-07-09 19:25 - 02629632 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2015-10-24 12:29 - 2015-10-26 23:48 - 00001047 _____ C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2015-10-24 12:29 - 2015-10-24 12:30 - 00000000 ____D C:\Users\masup\AppData\Local\PackageStaging
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Users\masup\AppData\Local\Publishers
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\Program Files\AMD
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 ____D C:\AMD
2015-10-24 12:29 - 2015-10-24 12:29 - 00000000 _____ C:\Windows\ativpsrm.bin
2015-10-24 12:28 - 2015-10-28 15:11 - 00000000 ____D C:\Users\masup\AppData\Local\Packages
2015-10-24 12:28 - 2015-10-25 14:28 - 00000000 ____D C:\Users\masup\AppData\Roaming\Adobe
2015-10-24 12:28 - 2015-10-24 12:28 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 30776304 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-10-24 12:28 - 2015-10-24 12:28 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 10211008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08982440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 07482552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-10-24 12:28 - 2015-10-24 12:28 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-10-24 12:28 - 2015-10-24 12:28 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00833800 _____ C:\Windows\system32\amdicdxx.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00737410 _____ C:\Windows\system32\atiicdxx.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-10-24 12:28 - 2015-10-24 12:28 - 00662392 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-10-24 12:28 - 2015-10-24 12:28 - 00662392 _____ C:\Windows\system32\atiapfxx.blb
2015-10-24 12:28 - 2015-10-24 12:28 - 00631280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00471312 _____ C:\Windows\system32\amdmiracast.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00322868 _____ C:\Windows\system32\ativvaxy_vi.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00321200 _____ C:\Windows\system32\ativvaxy_vi_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00255808 _____ C:\Windows\system32\ativvaxy_cz_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00250884 _____ C:\Windows\system32\ativvaxy_FJ.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00249088 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00243696 _____ C:\Windows\system32\clinfo.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00234420 _____ C:\Windows\system32\ativvaxy_cik.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00232752 _____ C:\Windows\system32\ativvaxy_cik_nd.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00177344 _____ C:\Windows\system32\ativce03.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00175648 _____ C:\Windows\system32\amde31a.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00168944 _____ C:\Windows\system32\atieah64.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00143344 _____ C:\Windows\system32\amdhdl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00143048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00130072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00100816 _____ C:\Windows\system32\ativce02.dat
2015-10-24 12:28 - 2015-10-24 12:28 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00087992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe
2015-10-24 12:28 - 2015-10-24 12:28 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00016148 _____ C:\Windows\system32\DESKTOP-K25MDGE_defaultuser0_HistoryPrediction.bin
2015-10-24 12:28 - 2015-10-24 12:28 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2015-10-24 12:28 - 2015-10-24 12:28 - 00000000 ____D C:\Users\masup\AppData\Local\VirtualStore
2015-10-24 12:28 - 2015-10-24 12:28 - 00000000 ____D C:\Users\masup\AppData\Local\TileDataLayer
2015-10-24 12:25 - 2015-10-27 20:53 - 00000000 ____D C:\Users\masup
2015-10-24 12:25 - 2015-10-24 12:28 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 12:25 - 2015-10-24 12:25 - 00000020 ___SH C:\Users\masup\ntuser.ini
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Vorlagen
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Startmenü
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Netzwerkumgebung
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Lokale Einstellungen
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Eigene Dateien
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Druckumgebung
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Local\Verlauf
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\AppData\Local\Anwendungsdaten
2015-10-24 12:25 - 2015-10-24 12:25 - 00000000 _SHDL C:\Users\masup\Anwendungsdaten
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 12:25 - 2015-07-10 12:04 - 00000000 ____D C:\Users\masup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 12:24 - 2015-10-24 12:24 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2015-10-24 12:24 - 2015-10-24 12:24 - 00102912 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdWT6.sys
2015-10-24 11:50 - 2015-10-28 18:11 - 01790124 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 __SHD C:\Recovery
2015-10-24 11:45 - 2015-10-24 11:45 - 00000000 ____D C:\Windows\CSC
2015-10-24 11:41 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2015-10-24 11:40 - 2015-10-24 11:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-10-24 11:39 - 2015-10-28 18:06 - 00005796 _____ C:\Windows\PFRO.log
2015-10-22 14:23 - 2014-10-29 10:49 - 681167233 _____ (IBM ) C:\Users\masup\Downloads\ibm_notes_cl9_win.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-28 18:11 - 2015-07-10 17:34 - 00771100 _____ C:\Windows\system32\perfh007.dat
2015-10-28 18:11 - 2015-07-10 17:34 - 00153964 _____ C:\Windows\system32\perfc007.dat
2015-10-28 18:09 - 2015-07-10 13:22 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-10-28 18:06 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-28 18:05 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\sru
2015-10-28 18:05 - 2015-07-10 10:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-10-28 14:26 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-10-27 13:07 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-10-26 15:03 - 2015-07-10 13:20 - 02939336 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-26 10:34 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-10-25 14:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\appcompat
2015-10-24 19:45 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\MUI
2015-10-24 19:45 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\MUI
2015-10-24 19:38 - 2015-07-10 13:20 - 00009531 _____ C:\Windows\setupact.log
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\oobe
2015-10-24 13:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-24 13:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-10-24 13:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Dism
2015-10-24 13:29 - 2015-07-10 17:44 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-10-24 13:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-10-24 12:42 - 2015-07-10 12:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-24 12:38 - 2015-07-10 12:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-10-24 12:30 - 2015-07-10 17:35 - 00000000 ____D C:\Windows\OCR
2015-10-24 12:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PrintDialog
2015-10-24 12:29 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\MiracastView
2015-10-24 11:48 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\restore
2015-10-24 11:46 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\spool
2015-10-24 11:45 - 2015-07-10 12:04 - 00000000 ____D C:\Program Files\Windows NT
2015-10-24 11:45 - 2015-07-10 10:05 - 00000000 __RHD C:\Users\Default
2015-10-24 11:43 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-10-24 11:42 - 2015-07-10 12:05 - 00002133 _____ C:\Windows\DtcInstall.log
2015-10-24 11:42 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\Recovery
2015-10-24 11:41 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Sysprep
2015-10-16 04:10 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 04:10 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-10-24 19:46 - 2015-10-24 19:53 - 0000680 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-10-24 11:39

==================== Ende von FRST.txt ============================
Der Startbildschirm in Edge ist jetzt wieder Google. Das ist super.
Die Adresse heißt aber: https://www.google.de/?gws_rd=ssl
Ist das okay, oder steckt da immer noch was Fremdes drin?

M-K-D-B 28.10.2015 19:14
Zitat:
Zitat von Kingsbane (Beitrag 1529700)
Die Adresse heißt aber: https://www.google.de/?gws_rd=ssl
Ist das okay, oder steckt da immer noch was Fremdes drin?
Das ist okay, denn "gws-rd" steht für "Google Web Server - Redirect (Weiterleitung)"

Google verwendet diesen Parameter für eine landesspezifische Weiterleitung. :)

Dann wären wir durch.





Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.



http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:




http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.


Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
   



Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.



Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .



Abschließend noch ein paar grundsätzliche Bemerkungen:
  • Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
  • Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
  • Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.



Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

M-K-D-B 30.10.2015 21:53
Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27