Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Firefox öffnet automtisch Seiten/eset perrt URL (https://www.trojaner-board.de/179721-firefox-oeffnet-automtisch-seiten-eset-perrt-url.html)

momolol404 20.06.2016 19:27
Firefox öffnet automtisch Seiten/eset perrt URL
 
hallo,

ich habe zwei probleme 1:firefox öffnt unaufgefordert Seiten auf(zurücksetzten hat nichts gebracht)

2:Der computer versucht ständig einer verbindung zu einer schädlichen website aufzunehmen wird aber von set gestoppt

danke

cosinus 20.06.2016 19:47
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

momolol404 24.06.2016 20:20
hallo:9;
danke für die schnelle antwort
frst
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2016 01
durchgeführt von leon (Administrator) auf DESKTOP-T3GB69R (24-06-2016 21:12:42)
Gestartet von C:\Users\leon\Downloads
Geladene Profile: leon (Verfügbare Profile: leon)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
() C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Akamai Technologies, Inc.) C:\Users\leon\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\leon\AppData\Local\Akamai\netsession_win.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\EpmNews.exe
(CHENGDU Yiwo Tech Development Co., Ltd.) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\CleanUpUI.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(VS Revo Group) C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [562544 2016-05-10] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16475392 2016-06-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [421768 2016-04-25] (Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7377936 2016-05-10] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2087264 2014-09-11] (Wondershare)
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\EpmNews.exe [2090176 2016-04-26] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUS Cleanup] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\CleanUpUI.exe [1227456 2016-04-26] (CHENGDU Yiwo Tech Development Co., Ltd.)
HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3948600 2016-06-21] (Tonec Inc.)
HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Run: [Akamai NetSession Interface] => C:\Users\leon\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)
HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Policies\Explorer: []
ShellIconOverlayIdentifiers: [  IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HandyAndy.lnk [2016-06-21]
ShortcutTarget: HandyAndy.lnk -> C:\Program Files\Andy\HandyAndy.exe (Andy OS, inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

AutoConfigURL: [S-1-5-21-2152000260-1466890681-2564920323-1001] => hxxp://unstops.info/wpad.dat?347bfa0475e0e7d0f324cffc30d3baf612073460
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{9880baf1-3f4b-43cd-ad8a-3a88d9033a76}: [DhcpNameServer] 192.168.178.1
ManualProxies: 0hxxp://unstops.info/wpad.dat?347bfa0475e0e7d0f324cffc30d3baf612073460

Internet Explorer:
==================
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-05-27] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-05-17] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-05-27] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-05-17] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\leon\AppData\Roaming\Mozilla\Firefox\Profiles\lx0v794w.default
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\leon\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\leon\AppData\Roaming\IDM\idmmzcc5 [2016-06-24] [ist nicht signiert]
FF HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-06-08]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-06-09]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-06-09]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1195840 2016-05-10] ()
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [4463592 2016-06-22] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2519904 2016-04-13] (ESET)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370064 2015-09-21] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4884064 2015-08-11] (Acronis)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9698296 2016-04-16] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 cpuz139; C:\Users\leon\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [43312 2016-06-24] (CPUID)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-05-12] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2016-05-12] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2016-05-12] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2016-05-12] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [198096 2016-05-12] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [53384 2016-05-12] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84800 2016-05-12] (ESET)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18016 2016-01-20] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2016-01-20] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2016-01-20] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2016-01-20] ()
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [339800 2016-06-22] (Acronis International GmbH)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195152 2016-06-23] (Intel Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2381112 2016-06-24] (Qualcomm Atheros, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [936192 2016-06-23] (Realtek                                            )
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267552 2016-06-22] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [193376 2016-06-22] (Acronis International GmbH)
S3 tnd; C:\Windows\system32\DRIVERS\tnd.sys [601432 2016-06-22] (Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [279392 2016-06-22] (Acronis International GmbH)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-24 21:12 - 2016-06-24 21:14 - 00014292 _____ C:\Users\leon\Downloads\FRST.txt
2016-06-24 21:12 - 2016-06-24 21:12 - 02387456 _____ (Farbar) C:\Users\leon\Downloads\FRST64.exe
2016-06-24 21:12 - 2016-06-24 21:12 - 00000000 ____D C:\FRST
2016-06-24 21:07 - 2016-06-24 21:07 - 00242344 _____ C:\Users\leon\Downloads\Firefox Setup Stub 47.0.exe
2016-06-24 21:07 - 2016-06-24 21:07 - 00001192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-06-24 21:07 - 2016-06-24 21:07 - 00001180 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-06-24 21:07 - 2016-06-24 21:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-24 21:07 - 2016-06-24 21:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-24 19:50 - 2016-06-24 19:51 - 00000028 _____ C:\Windows\OutLog.txt
2016-06-24 19:41 - 2016-06-24 19:42 - 00001023 ____H C:\Windows\EPMBatch.ept
2016-06-24 19:41 - 2016-06-24 19:41 - 00000000 _____ C:\Windows\BcdLog.txt
2016-06-24 19:38 - 2016-06-24 19:38 - 00000000 ____D C:\Users\leon\AppData\Roaming\epm
2016-06-24 19:23 - 2016-06-24 19:25 - 00000448 __RSH C:\ProgramData\ntuser.pol
2016-06-24 19:11 - 2016-06-24 19:11 - 00001425 _____ C:\Users\Public\Desktop\EaseUS Partition Master 11.0.lnk
2016-06-24 19:11 - 2016-06-24 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 11.0
2016-06-24 19:10 - 2016-04-26 01:29 - 03563712 _____ C:\Windows\system32\BootMan.exe
2016-06-24 19:10 - 2016-04-26 01:29 - 02662592 _____ C:\Windows\SysWOW64\BootMan.exe
2016-06-24 19:10 - 2016-01-20 12:07 - 00101984 _____ C:\Windows\system32\setupempdrvx64.exe
2016-06-24 19:10 - 2016-01-20 12:07 - 00088160 _____ C:\Windows\SysWOW64\setupempdrv03.exe
2016-06-24 19:10 - 2016-01-20 12:07 - 00018016 _____ C:\Windows\system32\epmntdrv.sys
2016-06-24 19:10 - 2016-01-20 12:07 - 00014944 _____ C:\Windows\SysWOW64\epmntdrv.sys
2016-06-24 19:10 - 2016-01-20 12:07 - 00010848 _____ C:\Windows\system32\EuGdiDrv.sys
2016-06-24 19:10 - 2016-01-20 12:07 - 00010208 _____ C:\Windows\SysWOW64\EuGdiDrv.sys
2016-06-24 19:10 - 2014-11-18 14:46 - 00021088 _____ C:\Windows\SysWOW64\EuEpmGdi.dll
2016-06-24 19:10 - 2014-11-18 14:46 - 00017504 _____ C:\Windows\system32\EuEpmGdi.dll
2016-06-24 19:09 - 2016-06-24 19:09 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-06-24 19:01 - 2016-06-24 19:01 - 00000000 ____D C:\Users\leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2016-06-24 19:00 - 2016-06-24 19:00 - 00002148 _____ C:\Users\Public\Desktop\Autodesk ReCap 360.lnk
2016-06-24 19:00 - 2016-06-24 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 360
2016-06-24 18:59 - 2016-06-24 18:59 - 00002874 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-06-24 18:59 - 2016-06-24 18:59 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-06-24 18:59 - 2016-06-24 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-06-24 18:59 - 2016-06-24 18:59 - 00000000 ____D C:\Program Files\CCleaner
2016-06-24 18:57 - 2016-06-24 18:57 - 00002173 _____ C:\Users\Public\Desktop\AutoCAD 2017 - Deutsch (German).lnk
2016-06-24 18:57 - 2016-06-24 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Deutsch (German)
2016-06-24 18:57 - 2016-06-24 18:57 - 00000000 ____D C:\Program Files (x86)\Autodesk
2016-06-24 18:55 - 2016-06-24 18:55 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2016-06-24 18:51 - 2016-06-24 19:07 - 00000000 ____D C:\Users\leon\AppData\Roaming\JAM Software
2016-06-24 18:51 - 2016-06-24 19:00 - 00000000 ____D C:\Program Files\Autodesk
2016-06-24 18:42 - 2016-06-24 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2016-06-24 18:38 - 2016-06-24 18:38 - 00000000 ____D C:\Autodesk
2016-06-24 18:24 - 2016-06-24 18:25 - 00000000 ____D C:\AdwCleaner
2016-06-24 16:51 - 2016-06-24 16:51 - 00573536 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys
2016-06-24 16:50 - 2016-06-24 16:50 - 00122938 _____ C:\Windows\system32\Drivers\rtkhdasetting.zip
2016-06-24 16:50 - 2016-06-24 16:50 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-06-24 16:49 - 2016-06-24 16:49 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-06-24 16:49 - 2016-06-24 16:49 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-06-24 16:49 - 2016-06-24 16:49 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-06-24 16:49 - 2016-06-24 16:49 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-06-24 16:49 - 2016-06-24 16:49 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-06-24 16:49 - 2016-06-24 16:49 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-06-24 16:48 - 2016-06-24 16:49 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-06-24 16:48 - 2016-06-24 16:48 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-06-24 16:47 - 2016-06-24 16:48 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-06-24 16:47 - 2016-06-24 16:47 - 01186824 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-06-24 16:44 - 2016-06-24 16:47 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-06-24 16:42 - 2016-06-24 16:42 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-06-24 16:42 - 2016-06-24 16:42 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-06-24 16:40 - 2016-06-24 16:42 - 05339560 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-06-24 16:40 - 2016-06-24 16:40 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-06-24 16:36 - 2016-06-24 16:40 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-06-24 16:35 - 2016-06-24 16:36 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-06-24 16:35 - 2016-06-24 16:35 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-06-24 16:34 - 2016-06-24 16:35 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-06-24 16:34 - 2016-06-24 16:34 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-06-24 16:34 - 2016-06-24 16:34 - 00582016 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-06-24 16:34 - 2016-06-24 16:34 - 00450128 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-06-24 16:32 - 2016-06-24 16:34 - 06402440 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-06-24 16:30 - 2016-06-24 16:32 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-06-24 16:28 - 2016-06-24 16:30 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-06-24 16:28 - 2016-06-24 16:28 - 00362064 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-06-24 16:27 - 2016-06-24 16:28 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-06-24 16:27 - 2016-06-24 16:27 - 00310432 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-06-24 16:26 - 2016-06-24 16:27 - 02726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-06-24 16:26 - 2016-06-24 16:26 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-06-24 16:26 - 2016-06-24 16:26 - 00341160 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-06-24 16:26 - 2016-06-24 16:26 - 00341160 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-06-24 16:25 - 2016-06-24 16:26 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-06-24 16:25 - 2016-06-24 16:25 - 00467160 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-06-24 16:24 - 2016-06-24 16:25 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-06-24 16:24 - 2016-06-24 16:24 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-06-24 16:19 - 2016-06-24 16:24 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-06-24 16:19 - 2016-06-24 16:19 - 01422936 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-06-24 16:18 - 2016-06-24 16:19 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-06-24 16:17 - 2016-06-24 16:18 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-06-24 16:15 - 2016-06-24 16:17 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-06-24 16:14 - 2016-06-24 16:15 - 00327464 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-06-24 16:14 - 2016-06-24 16:14 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-06-24 16:14 - 2016-06-24 16:14 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-06-24 16:14 - 2016-06-24 16:14 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-06-24 16:14 - 2016-06-24 16:14 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-06-24 16:13 - 2016-06-24 16:13 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-06-24 16:13 - 2016-06-24 16:13 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-06-24 16:11 - 2016-06-24 16:13 - 05593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-06-24 16:11 - 2016-06-24 16:11 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-06-24 16:10 - 2016-06-24 16:11 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-06-24 16:10 - 2016-06-24 16:10 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-06-24 16:10 - 2016-06-24 16:10 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-06-24 16:09 - 2016-06-24 16:10 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-06-24 16:09 - 2016-06-24 16:09 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-06-24 16:06 - 2016-06-24 16:07 - 02706864 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-06-24 16:05 - 2016-06-24 16:06 - 02203752 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-06-24 16:05 - 2016-06-24 16:05 - 01041744 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-06-24 16:05 - 2016-06-24 16:05 - 00258864 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-06-24 16:02 - 2016-06-24 16:03 - 00999864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-06-24 16:02 - 2016-06-24 16:02 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-06-24 16:02 - 2016-06-24 16:02 - 01166160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-06-24 16:00 - 2016-06-24 16:02 - 06275164 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-06-24 16:00 - 2016-06-24 16:00 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-06-24 15:59 - 2016-06-24 16:00 - 00873464 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-06-24 15:59 - 2016-06-24 15:59 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-06-24 15:59 - 2016-06-24 15:59 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-06-24 15:59 - 2016-06-24 15:59 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-06-24 15:59 - 2016-06-24 15:59 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-06-24 15:58 - 2016-06-24 15:59 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-06-24 15:58 - 2016-06-24 15:58 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-06-24 15:50 - 2016-06-24 15:50 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-06-24 15:48 - 2016-06-24 15:50 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-06-24 15:48 - 2016-06-24 15:48 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-06-24 15:48 - 2016-06-24 15:48 - 00084624 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-06-24 15:47 - 2016-06-24 15:48 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-06-24 15:47 - 2016-06-24 15:47 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-06-24 15:47 - 2016-06-24 15:47 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-06-24 15:47 - 2016-06-24 15:47 - 00445408 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-06-24 15:47 - 2016-06-24 15:47 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-06-24 15:46 - 2016-06-24 15:47 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-06-24 15:46 - 2016-06-24 15:46 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-06-24 15:46 - 2016-06-24 15:46 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-06-24 15:45 - 2016-06-24 15:46 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-06-24 15:45 - 2016-06-24 15:45 - 00708320 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-06-24 15:45 - 2016-06-24 15:45 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-06-24 15:45 - 2016-06-24 15:45 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-06-24 15:45 - 2016-06-24 15:45 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-06-24 15:45 - 2016-06-24 15:45 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-06-24 15:44 - 2016-06-24 15:45 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00214840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00110992 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00088328 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-06-24 15:44 - 2016-06-24 15:44 - 00083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-06-24 15:39 - 2016-06-24 15:43 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-06-24 15:39 - 2016-06-24 15:39 - 00678192 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-06-24 15:39 - 2016-06-24 15:39 - 00677680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-06-24 15:38 - 2016-06-24 15:39 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-06-24 15:37 - 2016-06-24 15:38 - 02050176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-06-24 15:37 - 2016-06-24 15:37 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-06-24 15:37 - 2016-06-24 15:37 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-06-24 15:35 - 2016-06-24 15:36 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-06-24 15:35 - 2016-06-24 15:35 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-06-24 15:34 - 2016-06-24 15:35 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-06-24 15:34 - 2016-06-24 15:34 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-06-24 15:34 - 2016-06-24 15:34 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-06-24 15:32 - 2016-06-24 15:34 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-06-24 15:32 - 2016-06-24 15:32 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-06-24 15:32 - 2016-06-24 15:32 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-06-24 15:32 - 2016-06-24 15:32 - 00209544 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-06-24 15:32 - 2016-06-24 15:32 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-06-24 15:11 - 2016-06-24 15:32 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-06-24 15:10 - 2016-06-24 15:11 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-06-24 15:09 - 2016-06-24 15:10 - 03199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-06-24 15:02 - 2016-06-24 15:03 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-06-24 14:56 - 2016-06-24 14:56 - 00097209 _____ C:\Windows\system32\Drivers\Data9377_2_0.msc
2016-06-24 14:56 - 2016-06-24 14:56 - 00008124 _____ C:\Windows\system32\Drivers\eeprom_qca9377_1p0_NFA435_olpc_LE_1.bin
2016-06-24 14:55 - 2016-06-24 14:56 - 01133984 _____ C:\Windows\system32\Drivers\qca9377_2_0.bin
2016-06-24 14:54 - 2016-06-24 14:55 - 02381112 _____ (Qualcomm Atheros, Inc.) C:\Windows\system32\Drivers\Qcamain10x64.sys
2016-06-23 19:51 - 2016-06-23 19:52 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-06-23 19:51 - 2016-06-23 19:51 - 00936192 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2016-06-23 19:47 - 2016-06-23 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2016-06-23 19:47 - 2016-06-23 19:47 - 00000000 ____D C:\Program Files (x86)\EPSON Software
2016-06-23 19:46 - 2016-06-23 19:47 - 01730304 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2016-06-23 19:46 - 2016-06-23 19:46 - 00038680 _____ (Intel Corporation) C:\Windows\system32\Drivers\ICCWDT.sys
2016-06-23 19:42 - 2016-06-24 14:09 - 00000442 _____ C:\Windows\Tasks\Driver Easy Scheduled Scan.job
2016-06-23 19:42 - 2016-06-23 19:42 - 00003920 _____ C:\Windows\System32\Tasks\Driver Easy Scheduled Scan
2016-06-23 19:42 - 2016-06-23 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy
2016-06-23 18:02 - 2016-06-23 18:02 - 00000000 ____D C:\Users\leon\Documents\Prezi
2016-06-23 18:02 - 2016-06-23 18:02 - 00000000 ____D C:\Users\leon\AppData\Roaming\Prezi
2016-06-23 18:02 - 2016-06-23 18:02 - 00000000 ____D C:\Users\leon\AppData\Local\Prezi
2016-06-23 14:58 - 2016-06-23 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-06-23 14:57 - 2016-06-23 14:57 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-06-23 14:57 - 2016-06-23 14:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-06-23 14:33 - 2016-06-24 14:09 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-06-23 14:15 - 2016-06-23 14:15 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-06-23 14:15 - 2016-06-23 14:15 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2016-06-23 14:14 - 2016-06-23 14:19 - 00000000 ____D C:\Users\leon\AppData\Roaming\IObit
2016-06-23 14:14 - 2016-06-23 14:18 - 00000000 ____D C:\Program Files (x86)\IObit
2016-06-23 14:14 - 2016-06-23 14:15 - 00000000 ____D C:\ProgramData\ProductData
2016-06-23 14:14 - 2016-06-23 14:15 - 00000000 ____D C:\ProgramData\IObit
2016-06-23 14:14 - 2016-06-23 14:14 - 00000000 ____D C:\Users\leon\AppData\Roaming\ProductData
2016-06-23 14:14 - 2016-06-23 14:14 - 00000000 ____D C:\Users\leon\AppData\Roaming\Apple Computer
2016-06-23 14:14 - 2016-06-23 14:14 - 00000000 ____D C:\Users\leon\AppData\LocalLow\IObit
2016-06-23 12:05 - 2016-06-23 12:05 - 00000000 _____ C:\autoexec.bat
2016-06-23 11:57 - 2016-06-23 11:57 - 00009092 _____ C:\Windows\System32\Tasks\Dujingkerfipy Mapper
2016-06-23 11:51 - 2015-09-26 17:30 - 00571904 _____ C:\Program Files (x86)\wondershare.filmora.v6.6.0-patch.exe
2016-06-23 11:43 - 2016-06-24 19:39 - 00000000 ____D C:\Wondershare
2016-06-23 11:42 - 2016-06-23 11:52 - 00002247 _____ C:\Users\leon\Documents\starburn.txt
2016-06-23 11:42 - 2016-06-23 11:42 - 00000000 ____D C:\ProgramData\Wondershare
2016-06-23 11:41 - 2016-06-23 11:46 - 00000000 ____D C:\Users\leon\Documents\Wondershare Filmora
2016-06-23 11:41 - 2016-06-23 11:41 - 00000000 ____D C:\Users\leon\AppData\Local\Wondershare
2016-06-23 11:40 - 2016-06-23 11:41 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-06-23 11:35 - 2016-06-23 11:35 - 00000000 ____D C:\Users\leon\AppData\Local\VideoEditor
2016-06-23 11:35 - 2016-06-23 11:35 - 00000000 ____D C:\Users\leon\AppData\Local\Movavi
2016-06-23 11:33 - 2016-06-23 11:33 - 00000016 _____ C:\ProgramData\mntemp
2016-06-22 22:21 - 2016-06-22 22:21 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-06-22 22:05 - 2016-06-22 22:05 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-06-22 22:05 - 2016-06-22 22:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-06-22 21:59 - 2016-06-22 22:02 - 00000000 ____D C:\Windows\system32\MRT
2016-06-22 21:59 - 2016-06-22 21:59 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-22 20:32 - 2016-06-22 21:55 - 00005368 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-T3GB69R-leon DESKTOP-T3GB69R
2016-06-22 18:16 - 2015-08-11 12:22 - 03067392 _____ C:\Windows\system32\pwNative.exe
2016-06-22 18:16 - 2013-09-30 15:26 - 00019152 ____N C:\Windows\system32\pwdrvio.sys
2016-06-22 18:16 - 2013-09-30 15:26 - 00012504 ____N C:\Windows\system32\pwdspio.sys
2016-06-22 18:11 - 2016-06-22 18:11 - 00000000 ____D C:\ProgramData\redistpart
2016-06-22 18:11 - 2016-06-22 18:11 - 00000000 ____D C:\ProgramData\launcher
2016-06-22 18:11 - 2016-06-22 18:11 - 00000000 ____D C:\ProgramData\explauncher
2016-06-22 18:10 - 2016-06-22 18:10 - 00000000 ____D C:\Program Files (x86)\Paragon Software
2016-06-22 18:02 - 2016-06-22 18:05 - 00000000 ____D C:\Users\leon\AppData\Roaming\Acronis
2016-06-22 18:01 - 2016-06-22 18:01 - 01267552 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00601432 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tnd.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00340312 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\snapman.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00339800 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\file_tracker.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00279392 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\virtual_file.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00193376 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib_mounter.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00163160 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2016-06-22 18:01 - 2016-06-22 18:01 - 00001286 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image.lnk
2016-06-22 18:01 - 2016-06-22 18:01 - 00001274 _____ C:\Users\Public\Desktop\Acronis True Image.lnk
2016-06-22 18:01 - 2016-06-22 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2016-06-22 18:01 - 2016-06-22 18:01 - 00000000 ____D C:\Program Files (x86)\Acronis
2016-06-22 18:00 - 2016-06-22 20:52 - 00000000 ____D C:\ProgramData\Acronis
2016-06-22 17:44 - 2016-06-22 17:44 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-06-21 20:15 - 2016-06-21 20:15 - 00000000 ____D C:\Users\leon\AppData\Roaming\ESET
2016-06-21 20:01 - 2016-05-28 07:22 - 07474528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-06-21 20:01 - 2016-05-28 07:07 - 00808288 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-06-21 20:01 - 2016-05-28 07:07 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-06-21 20:01 - 2016-05-28 07:06 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-06-21 20:01 - 2016-05-28 06:58 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-21 20:01 - 2016-05-28 06:57 - 00636304 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-06-21 20:01 - 2016-05-28 06:57 - 00546456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-06-21 20:01 - 2016-05-28 06:57 - 00316256 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-21 20:01 - 2016-05-28 06:29 - 22379008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-06-21 20:01 - 2016-05-28 06:29 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-21 20:01 - 2016-05-28 06:28 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-21 20:01 - 2016-05-28 06:25 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-21 20:01 - 2016-05-28 06:19 - 24605696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-21 20:01 - 2016-05-28 06:19 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-06-21 20:01 - 2016-05-28 06:19 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2016-06-21 20:01 - 2016-05-28 06:18 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-21 20:01 - 2016-05-28 06:18 - 07977472 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-06-21 20:01 - 2016-05-28 06:17 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-06-21 20:01 - 2016-05-28 06:16 - 19344384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-21 20:01 - 2016-05-28 06:14 - 18674176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-06-21 20:01 - 2016-05-28 06:14 - 01716736 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-06-21 20:01 - 2016-05-28 06:14 - 00965632 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-06-21 20:01 - 2016-05-28 06:13 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-06-21 20:01 - 2016-05-28 06:13 - 00954368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-06-21 20:01 - 2016-05-28 06:13 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-06-21 20:01 - 2016-05-28 06:13 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-06-21 20:01 - 2016-05-28 06:11 - 01445888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll
2016-06-21 20:01 - 2016-05-28 06:11 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-06-21 20:01 - 2016-05-28 06:08 - 13385728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-21 20:01 - 2016-05-28 06:06 - 12128256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-21 20:01 - 2016-05-28 06:05 - 03994624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-06-21 20:01 - 2016-05-28 06:05 - 03664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-21 20:01 - 2016-05-28 06:05 - 02582016 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-06-21 20:01 - 2016-05-28 06:04 - 06973952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-21 20:01 - 2016-05-28 06:04 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-06-21 20:01 - 2016-05-28 06:04 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2016-06-21 20:01 - 2016-05-28 06:03 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-06-21 20:01 - 2016-05-28 06:02 - 03590144 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-06-21 20:01 - 2016-05-28 06:02 - 02061824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-06-21 20:01 - 2016-05-28 06:01 - 01500160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 02230272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-21 20:01 - 2016-05-28 06:00 - 01707520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2016-06-21 20:01 - 2016-05-28 05:58 - 07832576 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-06-21 20:01 - 2016-05-28 05:58 - 04896256 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-21 20:01 - 2016-05-28 05:58 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-21 20:01 - 2016-05-28 05:58 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-06-21 20:01 - 2016-05-28 05:58 - 01996288 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-06-21 20:01 - 2016-05-28 05:57 - 02281472 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-06-21 20:01 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-06-21 20:01 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-06-21 20:01 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-06-21 20:01 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-06-21 20:01 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-06-21 20:01 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-06-21 20:01 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-06-21 20:01 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-21 20:01 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-06-21 20:01 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-06-21 20:01 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-21 20:01 - 2016-03-29 12:20 - 02656952 _____ C:\Windows\system32\CoreUIComponents.dll
2016-06-21 20:01 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-06-21 20:01 - 2016-03-29 11:37 - 01862008 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-06-21 20:01 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-06-21 20:01 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-21 20:01 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-06-21 20:01 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-06-21 20:01 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-06-21 20:01 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-06-21 20:01 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-21 20:01 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-06-21 20:01 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-06-21 20:01 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-06-21 20:01 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-06-21 20:01 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 01401024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 01184960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 00514752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 00290496 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-21 20:00 - 2016-05-28 08:13 - 00046784 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-21 20:00 - 2016-05-28 07:25 - 04268880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-06-21 20:00 - 2016-05-28 07:23 - 00388384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-21 20:00 - 2016-05-28 07:23 - 00312160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-21 20:00 - 2016-05-28 07:22 - 04387680 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-06-21 20:00 - 2016-05-28 07:22 - 00428896 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-06-21 20:00 - 2016-05-28 07:22 - 00211296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-06-21 20:00 - 2016-05-28 07:22 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-06-21 20:00 - 2016-05-28 07:20 - 00430312 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-21 20:00 - 2016-05-28 07:18 - 00357216 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-21 20:00 - 2016-05-28 07:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-06-21 20:00 - 2016-05-28 07:09 - 00501600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-06-21 20:00 - 2016-05-28 07:09 - 00170848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe
2016-06-21 20:00 - 2016-05-28 07:09 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-06-21 20:00 - 2016-05-28 07:08 - 00693600 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-06-21 20:00 - 2016-05-28 07:08 - 00258912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-06-21 20:00 - 2016-05-28 07:08 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-06-21 20:00 - 2016-05-28 07:07 - 03675512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-21 20:00 - 2016-05-28 07:07 - 02921880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-21 20:00 - 2016-05-28 07:07 - 01322248 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-06-21 20:00 - 2016-05-28 07:07 - 00957608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-06-21 20:00 - 2016-05-28 07:07 - 00331616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-06-21 20:00 - 2016-05-28 07:06 - 04074160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-06-21 20:00 - 2016-05-28 07:06 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-06-21 20:00 - 2016-05-28 07:06 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-06-21 20:00 - 2016-05-28 07:06 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-06-21 20:00 - 2016-05-28 07:05 - 04515264 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-06-21 20:00 - 2016-05-28 07:04 - 00604928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-21 20:00 - 2016-05-28 07:04 - 00431296 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-21 20:00 - 2016-05-28 07:04 - 00360480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-21 20:00 - 2016-05-28 07:04 - 00161632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-21 20:00 - 2016-05-28 07:04 - 00111064 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-06-21 20:00 - 2016-05-28 07:04 - 00097096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-06-21 20:00 - 2016-05-28 07:03 - 00131248 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-21 20:00 - 2016-05-28 06:58 - 01996640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-06-21 20:00 - 2016-05-28 06:57 - 02548944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-06-21 20:00 - 2016-05-28 06:57 - 02195632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-06-21 20:00 - 2016-05-28 06:57 - 01594416 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-21 20:00 - 2016-05-28 06:57 - 01372312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-21 20:00 - 2016-05-28 06:57 - 00649792 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-06-21 20:00 - 2016-05-28 06:57 - 00577376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-06-21 20:00 - 2016-05-28 06:57 - 00521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-06-21 20:00 - 2016-05-28 06:35 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2016-06-21 20:00 - 2016-05-28 06:35 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-06-21 20:00 - 2016-05-28 06:35 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsdport.sys
2016-06-21 20:00 - 2016-05-28 06:31 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdlrecover.exe
2016-06-21 20:00 - 2016-05-28 06:31 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-06-21 20:00 - 2016-05-28 06:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-06-21 20:00 - 2016-05-28 06:29 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2016-06-21 20:00 - 2016-05-28 06:29 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll
2016-06-21 20:00 - 2016-05-28 06:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-06-21 20:00 - 2016-05-28 06:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-21 20:00 - 2016-05-28 06:27 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2016-06-21 20:00 - 2016-05-28 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-06-21 20:00 - 2016-05-28 06:26 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-06-21 20:00 - 2016-05-28 06:26 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-06-21 20:00 - 2016-05-28 06:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2016-06-21 20:00 - 2016-05-28 06:26 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-06-21 20:00 - 2016-05-28 06:26 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-06-21 20:00 - 2016-05-28 06:25 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-06-21 20:00 - 2016-05-28 06:25 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
frst teil2

Code:
2016-06-21 20:00 - 2016-05-28 06:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\GnssAdapter.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2016-06-21 20:00 - 2016-05-28 06:20 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-06-21 20:00 - 2016-05-28 06:19 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-06-21 20:00 - 2016-05-28 06:19 - 00355840 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-06-21 20:00 - 2016-05-28 06:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00610816 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-21 20:00 - 2016-05-28 06:18 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-06-21 20:00 - 2016-05-28 06:18 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00963072 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00415232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-06-21 20:00 - 2016-05-28 06:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-06-21 20:00 - 2016-05-28 06:16 - 00690176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-21 20:00 - 2016-05-28 06:16 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-21 20:00 - 2016-05-28 06:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-06-21 20:00 - 2016-05-28 06:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-06-21 20:00 - 2016-05-28 06:16 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-21 20:00 - 2016-05-28 06:16 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-21 20:00 - 2016-05-28 06:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00579072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2016-06-21 20:00 - 2016-05-28 06:15 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-21 20:00 - 2016-05-28 06:14 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-06-21 20:00 - 2016-05-28 06:14 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-21 20:00 - 2016-05-28 06:14 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-21 20:00 - 2016-05-28 06:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-06-21 20:00 - 2016-05-28 06:14 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-06-21 20:00 - 2016-05-28 06:14 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-06-21 20:00 - 2016-05-28 06:13 - 00990208 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-06-21 20:00 - 2016-05-28 06:13 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-06-21 20:00 - 2016-05-28 06:13 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-06-21 20:00 - 2016-05-28 06:13 - 00467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2016-06-21 20:00 - 2016-05-28 06:12 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-06-21 20:00 - 2016-05-28 06:12 - 00614400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-21 20:00 - 2016-05-28 06:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00890368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-21 20:00 - 2016-05-28 06:11 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2016-06-21 20:00 - 2016-05-28 06:09 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-06-21 20:00 - 2016-05-28 06:08 - 06295552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-06-21 20:00 - 2016-05-28 06:06 - 07200256 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-06-21 20:00 - 2016-05-28 06:06 - 01339904 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-21 20:00 - 2016-05-28 06:05 - 01797120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-06-21 20:00 - 2016-05-28 06:03 - 05323776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-21 20:00 - 2016-05-28 06:03 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-06-21 20:00 - 2016-05-28 06:03 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-06-21 20:00 - 2016-05-28 06:03 - 01185280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationFramework.dll
2016-06-21 20:00 - 2016-05-28 06:03 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2016-06-21 20:00 - 2016-05-28 06:02 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-06-21 20:00 - 2016-05-28 06:02 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-06-21 20:00 - 2016-05-28 06:01 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-06-21 20:00 - 2016-05-28 06:01 - 01582080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-06-21 20:00 - 2016-05-28 06:01 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-06-21 20:00 - 2016-05-28 06:00 - 03585536 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-21 20:00 - 2016-05-28 06:00 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-06-21 20:00 - 2016-05-28 06:00 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-06-21 20:00 - 2016-05-28 06:00 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-06-21 20:00 - 2016-05-28 05:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-06-21 20:00 - 2016-05-28 05:55 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-06-21 20:00 - 2016-05-28 05:53 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2016-06-21 20:00 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdport.sys
2016-06-21 20:00 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-06-21 20:00 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-06-21 20:00 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-06-21 20:00 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2016-06-21 20:00 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-06-21 20:00 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-06-21 20:00 - 2016-05-05 06:50 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-06-21 20:00 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-06-21 20:00 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-06-21 20:00 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-06-21 20:00 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-21 20:00 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-06-21 20:00 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-06-21 20:00 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-06-21 20:00 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-06-21 20:00 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-06-21 20:00 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-21 20:00 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-06-21 20:00 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-06-21 20:00 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-06-21 20:00 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-06-21 20:00 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-06-21 20:00 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-06-21 20:00 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-06-21 20:00 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufxsynopsys.sys
2016-06-21 20:00 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-06-21 20:00 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-06-21 20:00 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-06-21 20:00 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-06-21 20:00 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-06-21 20:00 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-06-21 20:00 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-06-21 20:00 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-06-21 20:00 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-06-21 20:00 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-06-21 20:00 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-06-21 20:00 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-06-21 20:00 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-06-21 20:00 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2016-06-21 20:00 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\Windows\system32\dwminit.dll
2016-06-21 20:00 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-06-21 20:00 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-06-21 20:00 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2016-06-21 20:00 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-06-21 20:00 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-06-21 20:00 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-06-21 20:00 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
2016-06-21 20:00 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe
2016-06-21 20:00 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-06-21 20:00 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-06-21 20:00 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-06-21 20:00 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-06-21 20:00 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filecrypt.sys
2016-06-21 20:00 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-06-21 20:00 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2016-06-21 20:00 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ByteCodeGenerator.exe
2016-06-21 20:00 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-06-21 20:00 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2016-06-21 20:00 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-06-21 20:00 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-06-21 20:00 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2016-06-21 20:00 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-06-21 20:00 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-06-21 20:00 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-06-21 20:00 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-06-21 20:00 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2016-06-21 20:00 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2016-06-21 20:00 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-06-21 20:00 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2016-06-21 20:00 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-06-21 20:00 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-21 20:00 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-06-21 20:00 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-06-21 20:00 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-06-21 20:00 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-06-21 20:00 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-06-21 20:00 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-06-21 20:00 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2016-06-21 20:00 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2016-06-21 20:00 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-21 20:00 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-06-21 20:00 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-06-21 20:00 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-06-21 20:00 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-06-21 20:00 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-06-21 20:00 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-21 20:00 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-06-21 20:00 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-06-21 20:00 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-06-21 20:00 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-06-21 20:00 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-06-21 20:00 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-06-21 20:00 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-06-21 20:00 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-06-21 20:00 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-06-21 20:00 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-21 20:00 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-06-21 20:00 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-06-21 20:00 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-06-21 20:00 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-06-21 20:00 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-06-21 20:00 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-06-21 20:00 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2016-06-21 20:00 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-06-21 20:00 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-06-21 20:00 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-06-21 20:00 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-06-21 20:00 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-06-21 20:00 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-06-21 20:00 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-06-21 20:00 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-06-21 20:00 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-06-21 20:00 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-06-21 20:00 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-06-21 20:00 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-06-21 20:00 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-06-21 20:00 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-06-21 20:00 - 2016-04-23 04:10 - 00002186 _____ C:\Windows\system32\AppxProvisioning.xml
2016-06-21 20:00 - 2016-04-19 00:30 - 00002186 _____ C:\Windows\SysWOW64\AppxProvisioning.xml
2016-06-21 20:00 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-06-21 20:00 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-06-21 20:00 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-06-21 20:00 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2016-06-21 20:00 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2016-06-21 20:00 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-06-21 20:00 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-06-21 20:00 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-06-21 20:00 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-06-21 20:00 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-06-21 20:00 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-06-21 20:00 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2016-06-21 20:00 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-06-21 20:00 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-06-21 20:00 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-06-21 20:00 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-06-21 20:00 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-06-21 20:00 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-06-21 20:00 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-06-21 20:00 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-06-21 20:00 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-06-21 20:00 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-06-21 20:00 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-06-21 20:00 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-06-21 20:00 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-06-21 20:00 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-21 20:00 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2016-06-21 20:00 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-06-21 20:00 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.dll
2016-06-21 20:00 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-06-21 20:00 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-06-21 20:00 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
2016-06-21 20:00 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
2016-06-21 20:00 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-21 20:00 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-06-21 20:00 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-06-21 20:00 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-06-21 20:00 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2016-06-21 20:00 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2016-06-21 20:00 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2016-06-21 20:00 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-06-21 20:00 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2016-06-21 20:00 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-06-21 20:00 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-06-21 20:00 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2016-06-21 20:00 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-06-21 20:00 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-06-21 20:00 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-06-21 20:00 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2016-06-21 20:00 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-06-21 20:00 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-06-21 20:00 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2016-06-21 20:00 - 2016-03-29 09:51 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-06-21 20:00 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-06-21 20:00 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-06-21 20:00 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-06-21 20:00 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2016-06-21 20:00 - 2016-03-29 09:49 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-06-21 20:00 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-06-21 20:00 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-06-21 20:00 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2016-06-21 20:00 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-06-21 20:00 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-06-21 20:00 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-06-21 20:00 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-06-21 20:00 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-06-21 20:00 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-06-21 20:00 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-06-21 20:00 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-06-21 20:00 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-06-21 20:00 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-06-21 20:00 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2016-06-21 20:00 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-06-21 20:00 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-06-21 20:00 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-06-21 20:00 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2016-06-21 20:00 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2016-06-21 20:00 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-06-21 20:00 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacchooks.dll
2016-06-21 20:00 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-06-21 20:00 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2016-06-21 20:00 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-06-21 20:00 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-06-21 20:00 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-06-21 20:00 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-06-21 20:00 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-06-21 20:00 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2016-06-21 20:00 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-06-21 20:00 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-06-21 20:00 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-06-21 20:00 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-06-21 20:00 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-06-21 20:00 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2016-06-21 20:00 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-06-21 20:00 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
2016-06-21 20:00 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2016-06-21 20:00 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-06-21 20:00 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-06-21 20:00 - 2016-03-29 09:00 - 00235008 _____ C:\Windows\system32\MTF.dll
2016-06-21 20:00 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-06-21 20:00 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-06-21 20:00 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-06-21 20:00 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-06-21 20:00 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-06-21 20:00 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-06-21 20:00 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-06-21 20:00 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2016-06-21 20:00 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-06-21 20:00 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-06-21 20:00 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AccountsRt.dll
2016-06-21 20:00 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-06-21 20:00 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-06-21 20:00 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2016-06-21 20:00 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-06-21 20:00 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-06-21 20:00 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-06-21 20:00 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-21 20:00 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-06-21 20:00 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-06-21 20:00 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-06-21 20:00 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-06-21 20:00 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-06-21 20:00 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-06-21 20:00 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2016-06-21 20:00 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-06-21 20:00 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-06-21 20:00 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2016-06-21 20:00 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-06-21 20:00 - 2016-03-29 08:27 - 00162816 _____ C:\Windows\SysWOW64\MTF.dll
2016-06-21 20:00 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-06-21 20:00 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-06-21 20:00 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-06-21 20:00 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-06-21 20:00 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-06-21 20:00 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2016-06-21 20:00 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-06-21 20:00 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-06-21 20:00 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-06-21 20:00 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-06-21 20:00 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-06-21 20:00 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\ncbservice.dll
2016-06-21 20:00 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-06-21 20:00 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-06-21 20:00 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-06-21 20:00 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-06-21 20:00 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-06-21 20:00 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-06-21 20:00 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-06-21 20:00 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-06-21 20:00 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-06-21 20:00 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-06-21 20:00 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-06-21 20:00 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-06-21 18:27 - 2016-06-21 18:27 - 00000000 ____D C:\ProgramData\FLEXnet
2016-06-21 18:24 - 2016-06-24 20:06 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-06-21 18:00 - 2016-06-24 20:05 - 00000000 ____D C:\Users\leon\AppData\Local\Autodesk
2016-06-21 18:00 - 2016-06-24 18:56 - 00000000 ____D C:\Users\Public\Documents\Autodesk
2016-06-21 18:00 - 2016-06-21 18:00 - 00000000 ____D C:\Users\leon\Documents\Inventor Server SDK ACAD 2017
2016-06-21 17:57 - 2016-06-24 18:56 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2016-06-21 17:53 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-06-21 17:53 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-06-21 17:53 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-06-21 17:53 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-06-21 17:53 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-06-21 17:53 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-06-21 17:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-06-21 17:53 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-06-21 17:53 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-06-21 17:53 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-06-21 17:53 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-06-21 17:53 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-06-21 17:53 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-06-21 17:53 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-06-21 17:53 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-06-21 17:51 - 2016-06-24 20:07 - 00000000 ____D C:\Users\leon\AppData\Roaming\Autodesk
2016-06-21 17:51 - 2016-06-24 20:07 - 00000000 ____D C:\ProgramData\Autodesk
2016-06-21 17:50 - 2016-06-21 17:51 - 00000000 ____D C:\Users\leon\AppData\Local\Akamai
2016-06-21 17:47 - 2016-06-21 17:47 - 00000000 ____D C:\Users\leon\AppData\Roaming\Macromedia
2016-06-21 17:37 - 2016-06-24 20:11 - 00000000 ____D C:\Users\leon\AppData\Roaming\DMCache
2016-06-21 17:37 - 2016-06-24 20:05 - 00000000 ____D C:\Users\leon\Downloads\Compressed
2016-06-21 17:37 - 2016-06-24 19:23 - 00000000 ____D C:\Users\leon\AppData\Roaming\IDM
2016-06-21 17:37 - 2016-06-24 14:14 - 00000000 ____D C:\Users\leon\Downloads\Video
2016-06-21 17:37 - 2016-06-21 17:39 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-06-21 17:37 - 2016-06-21 17:37 - 00001082 _____ C:\Users\leon\Desktop\Internet Download Manager.lnk
2016-06-21 17:37 - 2016-06-21 17:37 - 00000000 ____D C:\Users\leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-06-21 17:37 - 2016-06-21 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-06-21 17:37 - 2016-06-21 17:37 - 00000000 ____D C:\ProgramData\IDM
2016-06-21 16:16 - 2016-06-21 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-06-21 16:16 - 2016-06-21 16:16 - 00000000 ____D C:\Program Files\Common Files\EPSON
2016-06-21 16:15 - 2016-06-23 19:47 - 00000000 ____D C:\ProgramData\EPSON
2016-06-21 16:15 - 2014-12-16 01:42 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMIKE.DLL
2016-06-21 16:15 - 2014-12-16 01:42 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BIKE.DLL
2016-06-21 16:15 - 2014-12-16 01:42 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
2016-06-21 15:58 - 2016-06-21 15:58 - 00000000 ____D C:\Users\leon\AppData\Local\Steam
2016-06-21 15:58 - 2016-06-21 15:58 - 00000000 ____D C:\Users\leon\AppData\Local\CEF
2016-06-21 15:56 - 2016-06-24 20:36 - 00000000 ____D C:\Program Files (x86)\Steam
2016-06-21 15:56 - 2016-06-21 15:56 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk
2016-06-21 15:56 - 2016-06-21 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-06-21 15:46 - 2016-06-22 22:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-06-21 15:46 - 2016-06-21 15:46 - 00000000 ____D C:\Users\leon\Intel
2016-06-21 15:46 - 2016-06-21 15:46 - 00000000 ____D C:\ProgramData\Temp
2016-06-21 15:46 - 2016-06-21 15:46 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-06-21 15:45 - 2016-06-21 15:45 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-06-21 15:44 - 2016-06-21 15:45 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-06-21 15:44 - 2016-06-21 15:44 - 00000000 ____D C:\Windows\PCHEALTH
2016-06-21 15:43 - 2016-06-23 18:07 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-21 15:42 - 2016-06-21 15:42 - 00000000 ____D C:\ProgramData\Lenovo
2016-06-21 15:41 - 2016-06-21 15:41 - 00000000 ____D C:\Users\leon\AppData\Local\Microsoft Help
2016-06-21 15:41 - 2016-06-21 15:41 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-06-21 15:41 - 2016-06-21 15:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-06-21 15:41 - 2016-06-21 15:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-06-21 15:40 - 2016-06-21 15:44 - 00000000 ____D C:\Program Files\Microsoft Office
2016-06-21 15:40 - 2016-06-21 15:40 - 00000000 __RHD C:\MSOCache
2016-06-21 15:37 - 2016-06-21 15:37 - 00000000 ____D C:\Users\leon\AppData\Roaming\VMware
2016-06-21 15:36 - 2016-04-14 17:17 - 00066752 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
2016-06-21 15:36 - 2016-04-14 17:17 - 00033472 _____ (VMware, Inc.) C:\Windows\system32\Drivers\VMkbd.sys
2016-06-21 15:36 - 2015-11-05 19:25 - 00075512 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys
2016-06-21 15:36 - 2015-11-05 19:25 - 00068288 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll
2016-06-21 15:36 - 2015-11-05 19:25 - 00064192 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
2016-06-21 15:35 - 2016-06-24 19:47 - 00000000 ____D C:\ProgramData\VMware
2016-06-21 15:35 - 2016-06-21 15:36 - 00000000 ____D C:\Program Files (x86)\VMware
2016-06-21 15:35 - 2016-06-21 15:35 - 01736862 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-06-21 15:35 - 2016-06-21 15:35 - 00001465 _____ C:\Users\Public\Desktop\Start Andy.lnk
2016-06-21 15:35 - 2016-06-21 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2016-06-21 15:35 - 2016-06-21 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy
2016-06-21 15:35 - 2016-06-21 15:35 - 00000000 ____D C:\ProgramData\Apple
2016-06-21 15:35 - 2016-06-21 15:35 - 00000000 ____D C:\Program Files\Common Files\VMware
2016-06-21 15:35 - 2016-04-14 17:17 - 00934080 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll
2016-06-21 15:35 - 2016-04-14 17:17 - 00392896 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
2016-06-21 15:35 - 2016-04-14 17:17 - 00358080 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
2016-06-21 15:35 - 2016-04-14 16:53 - 00026816 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys
2016-06-21 15:35 - 2016-03-10 08:03 - 00057536 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
2016-06-21 15:33 - 2016-06-21 15:41 - 00000000 ____D C:\Users\leon\AppData\Roaming\Andy
2016-06-21 15:33 - 2016-06-21 15:34 - 00000000 ____D C:\Program Files\Andy
2016-06-21 15:33 - 2016-06-21 15:33 - 00000000 ____D C:\Users\leon\Andy
2016-06-21 15:33 - 2016-06-21 15:33 - 00000000 ____D C:\Program Files\AndyOfflineInstaller46.2
2016-06-21 15:32 - 2016-06-21 15:32 - 00000000 ____D C:\Users\leon\AppData\Local\PeerDistRepub
2016-06-21 15:26 - 2016-06-24 21:07 - 00000000 ____D C:\Users\leon\AppData\Roaming\Mozilla
2016-06-21 15:26 - 2016-06-24 21:07 - 00000000 ____D C:\Users\leon\AppData\Local\Mozilla
2016-06-21 15:25 - 2016-06-21 15:25 - 00000000 ____D C:\Users\leon\AppData\Roaming\WinRAR
2016-06-21 15:24 - 2016-06-21 15:24 - 00001122 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\Users\leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\Users\leon\AppData\Local\VS Revo Group
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\Users\leon\AppData\Local\Comms
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\ProgramData\VS Revo Group
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\Program Files\VS Revo Group
2016-06-21 15:24 - 2016-06-21 15:24 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-06-21 15:24 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2016-06-21 15:21 - 2016-06-21 17:49 - 00000000 ____D C:\Users\leon\AppData\Local\MicrosoftEdge
2016-06-21 15:21 - 2016-06-21 15:21 - 00000000 ____D C:\Users\leon\AppData\Local\ESET
2016-06-21 15:20 - 2016-06-21 15:20 - 00002100 _____ C:\Users\Public\Desktop\ESET Sicheres Online-Banking und Bezahlen.lnk
2016-06-21 15:20 - 2016-06-21 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-06-21 15:20 - 2016-06-21 15:20 - 00000000 ____D C:\ProgramData\ESET
2016-06-21 15:20 - 2016-06-21 15:20 - 00000000 ____D C:\Program Files\ESET
2016-06-21 15:18 - 2016-06-21 15:18 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-06-21 15:08 - 2016-06-24 20:36 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-06-21 15:08 - 2016-06-24 20:36 - 00000000 __SHD C:\Users\leon\IntelGraphicsProfiles
2016-06-21 15:08 - 2016-06-21 15:08 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-06-21 15:08 - 2016-06-21 15:08 - 00000000 ____D C:\Program Files (x86)\Intel
2016-06-21 15:08 - 2016-06-21 15:08 - 00000000 ____D C:\Intel
2016-06-21 15:08 - 2015-09-21 03:44 - 00101360 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-06-21 15:07 - 2016-06-21 15:07 - 00000000 ____D C:\Program Files\Intel
2016-06-21 15:06 - 2016-06-24 19:53 - 01716516 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-21 15:06 - 2016-06-21 15:07 - 00002393 _____ C:\Users\leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-06-21 15:06 - 2016-06-21 15:07 - 00000000 ___RD C:\Users\leon\OneDrive
2016-06-21 15:05 - 2016-06-24 16:50 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-06-21 15:05 - 2016-06-24 16:50 - 00000000 ____D C:\Windows\system32\DAX2
2016-06-21 15:05 - 2016-06-21 15:05 - 00003250 _____ C:\Windows\System32\Tasks\RtHDVBg_LENOVO_MICPKEY
2016-06-21 15:05 - 2016-06-21 15:05 - 00003194 _____ C:\Windows\System32\Tasks\RTKCPL
2016-06-21 15:05 - 2016-06-21 15:05 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-06-21 15:05 - 2016-06-21 15:05 - 00000000 ____D C:\Users\leon\AppData\Local\ActiveSync
2016-06-21 15:05 - 2016-06-21 15:05 - 00000000 ____D C:\Program Files\Realtek
2016-06-21 15:04 - 2016-06-21 15:04 - 00000000 ____D C:\Users\leon\AppData\Local\Publishers
2016-06-21 15:04 - 2016-06-21 15:04 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-06-21 15:03 - 2016-06-24 19:30 - 00000000 ____D C:\Users\leon
2016-06-21 15:03 - 2016-06-21 20:42 - 00000000 ____D C:\Users\leon\AppData\Local\Packages
2016-06-21 15:03 - 2016-06-21 15:03 - 00000020 ___SH C:\Users\leon\ntuser.ini
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Vorlagen
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Startmenü
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Netzwerkumgebung
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Lokale Einstellungen
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Eigene Dateien
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Druckumgebung
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Documents\Eigene Videos
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Documents\Eigene Musik
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Documents\Eigene Bilder
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\AppData\Local\Verlauf
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\AppData\Local\Anwendungsdaten
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 _SHDL C:\Users\leon\Anwendungsdaten
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 ____D C:\Users\leon\AppData\Roaming\Adobe
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 ____D C:\Users\leon\AppData\Local\VirtualStore
2016-06-21 15:03 - 2016-06-21 15:03 - 00000000 ____D C:\Users\leon\AppData\Local\TileDataLayer
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Programme
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-06-21 14:59 - 2016-06-21 14:59 - 00000000 ____D C:\Windows\CSC
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-06-21 14:58 - 2016-06-21 14:58 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-06-21 12:32 - 2016-06-24 19:18 - 00000000 ____D C:\Windows\Panther
2016-06-09 18:49 - 2016-05-24 16:29 - 00207928 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-24 19:53 - 2016-04-27 07:13 - 00740556 _____ C:\Windows\system32\perfh007.dat
2016-06-24 19:53 - 2016-04-27 07:13 - 00148768 _____ C:\Windows\system32\perfc007.dat
2016-06-24 19:53 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-06-24 19:47 - 2016-04-27 07:48 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-24 19:45 - 2015-10-30 08:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-06-24 19:37 - 2016-04-26 22:44 - 00416144 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-24 19:23 - 2015-10-30 09:24 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-06-24 19:23 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-06-24 18:53 - 2015-10-30 09:24 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-06-24 15:48 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2016-06-24 15:34 - 2015-09-30 14:07 - 00192992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-06-24 15:12 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-06-24 15:10 - 2015-09-30 13:58 - 00023704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-06-24 15:09 - 2015-09-30 14:06 - 03096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-06-24 15:01 - 2015-09-30 13:58 - 05118208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-06-24 14:19 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-24 14:13 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\appcompat
2016-06-23 19:51 - 2015-09-21 08:18 - 00601960 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btfilter.sys
2016-06-23 19:49 - 2015-09-04 13:29 - 00195152 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys
2016-06-23 13:56 - 2016-04-27 07:55 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-23 13:51 - 2016-04-27 07:34 - 00000000 ____D C:\Program Files\Windows Journal
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\oobe
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\Provisioning
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-06-23 13:51 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\bcastdvr
2016-06-23 13:50 - 2015-10-30 09:24 - 00015703 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-06-22 22:19 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2016-06-22 22:12 - 2015-10-30 09:24 - 00000167 _____ C:\Windows\win.ini
2016-06-21 17:52 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-06-21 15:46 - 2016-04-27 07:34 - 00000000 ____D C:\Windows\ShellNew
2016-06-21 15:45 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-06-21 15:42 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\System
2016-06-21 15:20 - 2015-10-30 09:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-06-21 15:03 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-06-21 14:59 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows NT
2016-06-21 14:57 - 2015-10-30 08:28 - 00000000 ____D C:\Windows\system32\Sysprep
2016-06-21 12:32 - 2015-10-30 09:24 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-06-14 20:33 - 2015-10-30 09:26 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-14 20:33 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-28 07:55 - 2016-04-27 07:48 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-06-23 11:51 - 2015-09-26 17:30 - 0571904 _____ () C:\Program Files (x86)\wondershare.filmora.v6.6.0-patch.exe
2016-06-21 15:05 - 2016-06-21 15:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-06-23 11:33 - 2016-06-23 11:33 - 0000016 _____ () C:\ProgramData\mntemp

Einige Dateien in TEMP:
====================
C:\Users\leon\AppData\Local\Temp\AcDeltree.exe
C:\Users\leon\AppData\Local\Temp\Font__19312_il51644.exe
C:\Users\leon\AppData\Local\Temp\libeay32.dll
C:\Users\leon\AppData\Local\Temp\msvcr120.dll
C:\Users\leon\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-06-21 14:55

==================== Ende von FRST.txt ============================

momolol404 24.06.2016 20:21
additional
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-06-2016 01
durchgeführt von leon (2016-06-24 21:15:14)
Gestartet von C:\Users\leon\Downloads
Windows 10 Pro Version 1511 (X64) (2016-06-21 13:02:16)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2152000260-1466890681-2564920323-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2152000260-1466890681-2564920323-503 - Limited - Disabled)
Gast (S-1-5-21-2152000260-1466890681-2564920323-501 - Limited - Disabled)
leon (S-1-5-21-2152000260-1466890681-2564920323-1001 - Administrator - Enabled) => C:\Users\leon

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: ESET Smart Security 9.0.381.1 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.381.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ACA & MEP 2017 Object Enabler (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (Version: 21.0.52.0 - Autodesk) Hidden
Acronis True Image (HKLM-x32\...\{43B5FB0A-9900-43B0-BD46-9E7F89C88A98}Visible) (Version: 19.0.6571 - Acronis)
Acronis True Image (x32 Version: 19.0.6571 - Acronis) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Andy OS (HKLM\...\Andy OS) (Version: 46.2 - Andy OS, Inc)
AutoCAD 2017 - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 Language Pack - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - Deutsch (German) (HKLM\...\AutoCAD 2017 - Deutsch (German)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
Autodesk ReCap 360 (Version: 3.0.0.52 - Autodesk) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
EaseUS Partition Master 11.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
Epson Software Updater (HKLM-x32\...\{C7AA3D65-1F84-4590-AFAA-0777A04B6687}) (Version: 4.4.1 - SEIKO EPSON CORPORATION)
EPSON XP-302 303 305 306 Series Printer Uninstall (HKLM\...\EPSON XP-302 303 305 306 Series) (Version:  - SEIKO EPSON Corporation)
ESET Smart Security (HKLM\...\{64D5DBAE-3C56-4FBE-9A2F-44C63FA13BAF}) (Version: 9.0.381.1 - ESET, spol. s r.o.)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4278 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version:  - Tonec Inc.)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0 - Mozilla)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7841 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
SketchUp-Import 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3115033) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3115033) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3115033) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1}) (Version:  - Microsoft)
Verfügbare Autodesk-Apps 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
VMware Player (HKLM\...\{537B7F85-2B95-44ED-8D90-765F6F36D666}) (Version: 12.1.1 - VMware, Inc.)
VMware VIX (HKLM-x32\...\{F99FC179-EA67-4BBC-8955-BDDA0CB94B88}) (Version: 1.15.3.00000 - VMware, Inc.)
WinRAR 5.31 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2152000260-1466890681-2564920323-1001_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2152000260-1466890681-2564920323-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\leon\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2152000260-1466890681-2564920323-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2152000260-1466890681-2564920323-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\de-DE\acadficn.dll (Autodesk, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {42E99E64-8481-4A00-B37C-A0190C316EA7} - System32\Tasks\Dujingkerfipy Mapper => C:\Program Files (x86)\Atiregh\djnMpppijerghreuwy.exe
Task: {5E1869B2-BFFB-4C44-B1DE-6F9034CABD05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {6AB3210F-5E71-4ECB-9D8D-5D7DA3E5BF08} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {719162A7-ED2A-4CFD-A6EA-F15B18D31268} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-06-24] (Realtek Semiconductor)
Task: {AE85AD65-0BDC-4F0A-AF69-12306AA796DF} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {CE0805D2-6A4E-4447-BD47-4D8826047188} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)
Task: {D0510C35-AB7C-4A30-9B36-AC5A6291F56F} - System32\Tasks\RtHDVBg_LENOVO_MICPKEY => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-06-24] (Realtek Semiconductor)
Task: {E0F99031-5D38-48BD-9DE6-96090A976819} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {F129F339-0BDB-419E-88B5-8BC8B00CD226} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-T3GB69R-leon DESKTOP-T3GB69R => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2016-02-09] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-05-10 15:51 - 2016-05-10 15:51 - 01195840 _____ () C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
2016-06-22 18:01 - 2016-06-22 18:01 - 04463592 _____ () C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
2016-04-16 12:56 - 2016-04-16 12:56 - 09698296 _____ () C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-06-21 20:01 - 2016-03-29 12:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-06-21 20:01 - 2016-03-29 12:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-06-21 15:07 - 2016-06-21 15:07 - 00959168 _____ () C:\Users\leon\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-04-27 07:17 - 2016-04-27 07:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-06-21 20:01 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-21 20:00 - 2016-05-28 05:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-21 20:00 - 2016-05-28 05:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-21 20:00 - 2016-05-28 05:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-21 20:00 - 2016-05-28 05:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-05-10 15:39 - 2016-05-10 15:39 - 00562544 _____ () C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
2016-05-10 16:23 - 2016-05-10 16:23 - 07377936 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-06-21 20:02 - 2016-06-21 20:02 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-06-23 14:14 - 2014-10-16 10:26 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2016-04-14 17:17 - 2016-04-14 17:17 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2016-05-10 15:35 - 2016-05-10 15:35 - 00037808 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2016-05-10 15:36 - 2016-05-10 15:36 - 00445872 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2016-05-10 15:31 - 2016-05-10 15:31 - 00115632 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2016-06-21 15:06 - 2016-06-21 15:06 - 00679624 _____ () C:\Users\leon\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-06-21 15:56 - 2016-04-29 22:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-06-21 15:56 - 2016-06-15 02:47 - 02387024 _____ () C:\Program Files (x86)\Steam\video.dll
2016-06-21 15:56 - 2016-02-09 01:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-06-21 15:56 - 2016-02-09 01:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-06-21 15:56 - 2016-02-09 01:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-06-21 15:56 - 2016-02-09 01:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-06-21 15:56 - 2016-02-09 01:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-06-21 15:56 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-06-21 15:56 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-06-21 15:56 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-06-21 15:56 - 2016-06-15 02:47 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-06-21 15:56 - 2016-02-18 00:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2015-11-16 18:05 - 2015-11-16 18:05 - 00126928 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\afcdpapi.dll
2016-05-10 15:37 - 2016-05-10 15:37 - 00333744 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\resource.dll
2016-05-10 16:21 - 2016-05-10 16:21 - 20582752 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll
2016-05-10 15:35 - 2016-05-10 15:35 - 00050096 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\rpc_client.dll
2016-04-16 12:45 - 2016-04-16 12:45 - 00248240 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\sync_agent_api.dll
2016-06-23 11:41 - 2014-09-11 18:09 - 01498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2016-06-23 11:41 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2016-06-24 19:10 - 2016-03-16 09:24 - 00877056 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\platforms\qwindows.dll
2016-06-24 19:10 - 2016-04-26 01:28 - 00308928 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\GarbageGather.dll
2016-06-24 19:10 - 2016-04-26 01:28 - 00110272 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\FHProcess.dll
2016-06-24 19:10 - 2016-03-16 09:24 - 00013824 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\fsclog.dll
2016-06-24 19:10 - 2016-04-26 01:27 - 00174784 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\BigFileGather.dll
2016-06-24 19:10 - 2016-04-26 01:28 - 00088256 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\EnumVolumes.dll
2016-06-24 19:10 - 2016-04-26 01:28 - 00168128 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\FragAnalysis.dll
2016-06-24 19:10 - 2016-03-25 01:00 - 00024064 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\imageformats\qico.dll
2016-06-24 19:10 - 2016-03-25 01:00 - 00023552 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\imageformats\qgif.dll
2016-06-21 15:56 - 2016-06-14 21:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-06-21 20:02 - 2016-06-21 20:02 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-06-21 20:02 - 2016-06-21 20:02 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 09:24 - 2016-06-23 11:40 - 00000906 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activation.acronis.com
127.0.0.1                  skioooopppp.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2152000260-1466890681-2564920323-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "HandyAndy.lnk"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{6531E2CF-3726-4A23-B2EA-B17481CC225E}] => (Allow) C:\Users\leon\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{287F8236-5499-48A9-AC21-8939ECCA5FD9}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{B3CD108C-F6F1-428F-9E5F-43A20E6B75FD}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{2F8236D8-355F-4B25-B810-A06D4584B826}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{2BB645F7-5680-4C97-B714-141C4AB05657}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{146D567C-A8AD-4E46-A442-2FBB54AC8830}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{5F66FC49-BCF3-4F5A-977C-E6A8E3E33244}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{96C0FEFD-838B-4D89-B0F9-8AA9FCD8AF30}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{DC58D8B2-5FEF-4838-885E-AF9DDDCC8202}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{FD68A246-850B-4AD7-94D6-2C7737BFD419}] => (Allow) C:\Users\leon\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{839682F5-91F7-4437-A062-D824E6F0FCEC}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{E64EC625-E3F4-4221-B501-7448075CFA7B}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{9F33DB5E-7B57-4351-9FEB-406A76A72DAE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{E981E958-E3F8-4623-A50C-1CC2A197140C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{26E540C2-2E4F-4195-8077-5849E54D83CB}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F61A3CA7-D407-4A11-86CB-4888AFCF0064}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F7845F65-4C49-4276-B762-2E74BF6BC490}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{684D3BDF-A855-4EE2-BE7F-B49115124C19}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{EC42F16B-F563-4105-A54E-E98D5F74DB7A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{134B73C8-8FE3-4004-8ABE-3E8594C87E0C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C50F7F43-BCDF-48E0-A0E8-049C1964354E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8C6F63CF-3F36-4FBF-AC30-CBC1EF0605EF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{B4D9C6E6-5083-41CA-B701-ADC733B99362}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{C4879D37-7AE0-48D2-B914-3CF76F8A8848}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
FirewallRules: [{10E5BEB8-BA60-45A7-BE9C-348795C9A8AD}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{00373D00-FB2E-4DDB-84D7-0AF9800D82F2}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{EA8B16FA-68EB-4E6D-BE48-CE02AA7F7A38}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{FF5CF57F-3C9D-40A4-918F-4B107D3E4207}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{20148D45-0052-4270-B0DD-B1C7341AF4F9}] => (Block) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
FirewallRules: [TCP Query User{F9570A5A-9066-4BA2-BF95-7EAC4465FFCA}C:\users\leon\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leon\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{C147BABC-B308-42AB-94E1-8709ED8E401C}C:\users\leon\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leon\appdata\local\akamai\netsession_win.exe
FirewallRules: [{BA275A72-4E37-449C-BD37-7B5BBD111E8E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{887EB799-B3DE-4740-B346-05FDA790B38A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Wiederherstellungspunkte =========================

24-06-2016 20:44:33 Revo Uninstaller Pro's restore point - Mozilla Firefox 47.0 (x86 de)

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/24/2016 08:44:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (06/24/2016 08:44:33 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {87a9b956-1573-414b-9762-cc342bb8c34a}

Error: (06/24/2016 08:36:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-T3GB69R)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/24/2016 07:01:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AdApplicationManager-WebInstaller.exe, Version: 6.0.45.5, Zeitstempel: 0x569dc20e
Name des fehlerhaften Moduls: AdApplicationManager-WebInstaller.exe, Version: 6.0.45.5, Zeitstempel: 0x569dc20e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000bb4b
ID des fehlerhaften Prozesses: 0x1d8c
Startzeit der fehlerhaften Anwendung: 0xAdApplicationManager-WebInstaller.exe0
Pfad der fehlerhaften Anwendung: AdApplicationManager-WebInstaller.exe1
Pfad des fehlerhaften Moduls: AdApplicationManager-WebInstaller.exe2
Berichtskennung: AdApplicationManager-WebInstaller.exe3
Vollständiger Name des fehlerhaften Pakets: AdApplicationManager-WebInstaller.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AdApplicationManager-WebInstaller.exe5

Error: (06/24/2016 06:56:48 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-T3GB69R)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/24/2016 06:41:37 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (06/24/2016 06:41:11 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (06/23/2016 01:20:48 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-T3GB69R)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/23/2016 01:05:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-T3GB69R)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/23/2016 11:49:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: URET NFO v2.2.exe, Version: 0.0.0.0, Zeitstempel: 0x53ac2fd2
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.122, Zeitstempel: 0x56cc16f5
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00045da8
ID des fehlerhaften Prozesses: 0x20
Startzeit der fehlerhaften Anwendung: 0xURET NFO v2.2.exe0
Pfad der fehlerhaften Anwendung: URET NFO v2.2.exe1
Pfad des fehlerhaften Moduls: URET NFO v2.2.exe2
Berichtskennung: URET NFO v2.2.exe3
Vollständiger Name des fehlerhaften Pakets: URET NFO v2.2.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: URET NFO v2.2.exe5


Systemfehler:
=============
Error: (06/24/2016 09:05:53 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-T3GB69R)
Description: AnwendungsspezifischLokalAktivierung{9E175B6D-F52A-11D8-B9A5-505054503030}{9E175B9C-F52A-11D8-B9A5-505054503030}DESKTOP-T3GB69RleonS-1-5-21-2152000260-1466890681-2564920323-1001LocalHost (unter Verwendung von LRPC)Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbweS-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194

Error: (06/24/2016 09:01:45 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/24/2016 08:11:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_3b2b7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/24/2016 08:11:53 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/24/2016 07:53:22 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/24/2016 07:44:55 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/24/2016 07:43:02 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (06/24/2016 07:41:30 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3GB69R)
Description: {1EF75F33-893B-4E8F-9655-C3D602BA4897}

Error: (06/24/2016 07:41:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_32b1e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/24/2016 07:41:29 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


CodeIntegrity:
===================================
  Date: 2016-06-24 18:08:45.977
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-23 13:55:14.108
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-22 22:19:31.534
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-22 22:19:30.475
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-21 18:27:01.338
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-21 15:52:31.023
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-21 15:47:42.673
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-21 15:44:17.186
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-21 15:04:52.485
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Celeron(R) CPU G1840 @ 2.80GHz
Prozentuale Nutzung des RAM: 48%
Installierter physikalischer RAM: 4005.25 MB
Verfügbarer physikalischer RAM: 2067.9 MB
Summe virtueller Speicher: 8357.25 MB
Verfügbarer virtueller Speicher: 6323.44 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:198.24 GB) (Free:134.29 GB) NTFS
Drive e: (Daten) (Fixed) (Total:45.36 GB) (Free:45.26 GB) NTFS
Drive f: (Software) (Fixed) (Total:50.49 GB) (Free:49.02 GB) NTFS
Drive g: (Backup) (Fixed) (Total:146.48 GB) (Free:116.94 GB) NTFS
Drive z: () (Network) (Total:29.54 GB) (Free:23.03 GB)

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E9C0885C)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=198.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=242.3 GB) - (Type=OF Extended)

==================== Ende von Addition.txt ============================

cosinus 24.06.2016 21:36
Zitat:
127.0.0.1 activation.acronis.com
Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

momolol404 25.06.2016 14:41
hallio,

hab den crack entfernt

cosinus 25.06.2016 23:32
Du solltest auch die gecrackte Software entfernen, nicht nur den Crack. Und auch nicht nur Acronis, sondern alle gecrackte Software, falls noch mehr drauf ist.

momolol404 26.06.2016 19:33
hab den computer neu aufgesetzt .

aber danke für die hilfe


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:07 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131