Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Kegen.exe nach Treiber-update (https://www.trojaner-board.de/183824-kegen-exe-treiber-update.html)

pingodoce 06.01.2017 09:55
Kegen.exe nach Treiber-update
 
Hallo. Ich habe einen HP NC 4400 .. .schon ein wenig aelter aber noch fix. .
Nachdem ich den Rechner auf Windows 10 upgedatet habe fehlten noch einige unbekannte Treiber im DateiMAnager. Normal lade ich nix aus unbekannten Quellen auf meinen Rechner , da ich diesen beruflich auch benutze....
Ich hatte mir einige Dateien runtergeladen mit Treibern .. .da fing das Uebel an .

Ich hatte bereits mit Malwarebyt versucht das Problem zu loesen . .. kommt aber immer wieder

die datei kann geloescht werden ist nach dem neustart wieder da. ich hatte den rechner in den abgesichteren zustand gebracht.. da geht er jetzt aber nicht mehr raus weil bei msconfig sich nichts mehr oeffnet .. vielleicht hat ja jemand einen Rat was man noch machen kann

Im taskmanager zeigt sich auch ein aktivierter Prozess assemblies.exe. dieser laesst sich nicht deaktivieren

cosinus 06.01.2017 11:18
Zitat:
Ich hatte bereits mit Malwarebyt versucht das Problem zu loesen . .. kommt aber immer wieder
Und die Logs dazu? :glaskugel:

Bitte nachreichen, ohne Logs kann dir niemand was dazu sagen

pingodoce 06.01.2017 11:29
Liste der Anhänge anzeigen (Anzahl: 2)
welche logs soll ich hochladen... malwarebyte z.b.?

pingodoce 06.01.2017 11:39
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 06.01.17
Scan-Zeit: 00:23
Protokolldatei: mbam2.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.937
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10
CPU: x86
Dateisystem: NTFS
Benutzer: DESKTOP-TGSB6RT\ms

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 307255
Abgelaufene Zeit: 1 Std., 0 Min., 5 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 1
Hijack.ShellA.Gen, HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|SHELL, Keine Aktion durch Benutzer, [14985], [187664],1.0.937

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
RiskWare.HeuristicsReservedWordExploit, C:\USERS\MS\APPDATA\LOCAL\TEMP\SVHOST.EXE, Keine Aktion durch Benutzer, [17439], [245923],1.0.937
Trojan.BitCoinMiner.MSIL, C:\USERS\MS\APPDATA\LOCAL\TEMP\KEYGEN.EXE, Keine Aktion durch Benutzer, [965], [256060],1.0.937

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 06.01.2017 11:40
+++ WICHTIGER HINWEIS +++


Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache.
Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung!
Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben.

Gelesen und verstanden?



Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

pingodoce 06.01.2017 11:50
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 01-01-2017
durchgeführt von ms (Administrator) auf DESKTOP-TGSB6RT (06-01-2017 12:01:18)
Gestartet von E:\
Geladene Profile: ms (Verfügbare Profile: defaultuser0 & ms)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
() C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.3.0.0_x86__8wekyb3d8bbwe\Microsoft.StickyNotes.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\asulaunch.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Oberthur Technologies) C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(VoipConnect) C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe
(sw4you) C:\Program Files\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-15] (Synaptics, Inc.)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Certificate Synchronizer] => C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe [86528 2013-12-11] (Oberthur Technologies)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES/MALWAREBYTES/ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-01-05] (AVAST Software)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [VoipConnect] => C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe [38429792 2016-12-05] (VoipConnect)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Winlogon: [Shell] explorer.exe,"C:\Users\ms\AppData\Roaming\assembliesbckp.exe" <==== ACHTUNG
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-01-05] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK [2016-12-12]
ShortcutTarget: Hardcopy.LNK -> C:\Program Files\Hardcopy\hardcopy.exe (sw4you)
BootExecute: autocheck autochk * aswBoot.exe /M:c0481c9 /dir:"C:\Program Files\AVAST Software\Avast"
GroupPolicy: Beschränkung ? <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41473946-22be-44ae-b33f-b20026900a39}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bbbf93ff-9366-4c55-9a2b-55f0e0be0617}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-18] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 05qspcpa.default
FF ProfilePath: C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default [2017-01-06]
FF NewTab: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Extension: (Firebug) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\firebug@software.joehewitt.com.xpi [2016-10-11]
FF Extension: (FirePHP) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\FirePHPExtension-Build@firephp.org.xpi [2016-04-27]
FF Extension: (Button Snip Dies! für eBay) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2016-12-11]
FF Extension: (Bitdefender QuickScan) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2016-12-11]
FF HKLM\...\Firefox\Extensions: [PKCS11_Firefox@oberthur.com] - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi
FF Extension: (Oberthur Technologies PKCS#11 Module Loader) - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi [2013-11-28] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-05]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2017-01-01] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-01-05] (AVAST Software)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2017-01-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2017-01-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2017-01-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2017-01-05] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2017-01-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2017-01-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2017-01-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2017-01-05] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224752 2017-01-05] (AVAST Software)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59968 2016-12-14] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Datei ist nicht signiert]
R3 GTIPCI21; C:\Windows\system32\DRIVERS\gtipci21.sys [97280 2007-05-09] (Texas Instruments)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [153024 2017-01-04] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-06] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [219072 2017-01-06] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 netwlv32; C:\Windows\System32\drivers\netwlv32.sys [6637056 2016-07-16] (Intel Corporation)
S3 SCR3XX2K; C:\Windows\system32\DRIVERS\SCR3XX2K.sys [63104 2015-02-17] (Identiv)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S0 ElbyVCD; system32\DRIVERS\ElbyVCD.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-06 10:35 - 2017-01-06 10:35 - 00000597 _____ C:\Users\ms\Desktop\JRT.txt
2017-01-06 10:34 - 2017-01-06 12:01 - 00000000 ____D C:\FRST
2017-01-06 10:33 - 2017-01-06 10:34 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-06 09:18 - 2017-01-06 09:19 - 00000000 _____ C:\Recovery.txt
2017-01-06 02:22 - 2017-01-06 02:22 - 00005962 _____ C:\Users\ms\Desktop\tttt.txt
2017-01-06 01:33 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.Vexe
2017-01-06 01:32 - 2017-01-06 01:32 - 00001414 _____ C:\Users\ms\Desktop\eset.txt
2017-01-06 01:26 - 2017-01-06 01:26 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-01-06 01:25 - 2017-01-06 01:25 - 00001552 _____ C:\Users\ms\Desktop\mbam2.txt
2017-01-06 00:42 - 2017-01-06 00:42 - 00003272 _____ C:\Users\ms\Desktop\mbam.txt
2017-01-06 00:30 - 2017-01-06 07:32 - 00000000 ____D C:\ProgramData\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00001074 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\Program Files\RogueKiller
2017-01-06 00:28 - 2017-01-06 00:30 - 34631352 _____ (Adlice Software ) C:\Users\ms\Downloads\setup.exe
2017-01-06 00:16 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.exe
2017-01-06 00:13 - 2017-01-06 00:13 - 00000000 ____D C:\Users\ms\AppData\Local\ESET
2017-01-06 00:12 - 2017-01-06 00:13 - 06771840 _____ (ESET spol. s r.o.) C:\Users\ms\Downloads\esetonlinescanner_enu.exe
2017-01-06 00:09 - 2017-01-06 00:10 - 00005534 _____ C:\Users\ms\Desktop\Rkill.txt
2017-01-06 00:08 - 2017-01-06 00:09 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\ms\Downloads\rkill.com
2017-01-05 19:41 - 2017-01-05 19:41 - 00001197 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-01-05 19:41 - 2017-01-05 19:41 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-01-05 19:38 - 2017-01-05 19:38 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-01-05 19:34 - 2017-01-05 19:34 - 00000000 ____D C:\Users\ms\AppData\Roaming\AVAST Software
2017-01-05 19:31 - 2017-01-05 19:31 - 00002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-01-05 19:31 - 2017-01-05 19:31 - 00002152 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-01-05 19:29 - 2017-01-05 19:30 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00224752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-01-05 19:29 - 2017-01-05 19:28 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-01-05 19:29 - 2017-01-05 19:28 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-01-05 19:28 - 2017-01-05 19:28 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2017-01-05 19:25 - 2017-01-05 19:38 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-05 19:22 - 2017-01-05 19:38 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-05 19:19 - 2017-01-05 19:22 - 06253640 _____ (AVAST Software) C:\Users\ms\Downloads\avast_free_antivirus_setup_online.exe
2017-01-05 19:08 - 2017-01-06 11:30 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-05 19:08 - 2017-01-06 08:43 - 00000000 _RSHD C:\Program Files\Assemblies
2017-01-05 19:07 - 2017-01-06 11:58 - 00000000 ____D C:\Windows\pss
2017-01-04 22:58 - 2017-01-04 22:58 - 00150238 _____ C:\Users\ms\Documents\RNSDG170104072487 1 (2).pdf
2017-01-04 22:38 - 2017-01-04 22:38 - 00153024 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-04 22:37 - 2017-01-06 11:59 - 00219072 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-04 22:37 - 2017-01-06 09:20 - 00087496 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-04 22:37 - 2017-01-06 09:19 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-04 22:37 - 2017-01-06 08:15 - 00073152 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-04 22:37 - 2017-01-04 22:37 - 00002097 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-04 22:37 - 2016-12-14 12:55 - 00059968 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-04 22:34 - 2017-01-04 22:36 - 54199488 _____ (Malwarebytes ) C:\Users\ms\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-04 18:44 - 2017-01-04 18:45 - 00116612 _____ C:\Users\ms\Downloads\boarding-pass.pdf
2017-01-04 18:37 - 2017-01-04 18:37 - 00000000 ____D C:\Users\ms\AppData\Local\ElevatedDiagnostics
2017-01-02 16:27 - 2017-01-02 16:27 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2017-01-02 16:26 - 2017-01-02 16:26 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canneverbe Limited
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Users\ms\AppData\Local\AvgSetupLog
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\ProgramData\Avg
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Program Files\AVG
2017-01-02 16:10 - 2017-01-02 16:13 - 00000000 ____D C:\Users\ms\AppData\Local\Avg
2017-01-02 16:08 - 2017-01-02 16:08 - 00345360 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService.dll
2017-01-02 16:08 - 2017-01-02 16:08 - 00002920 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2017-01-02 15:53 - 2017-01-02 15:53 - 00000000 ____D C:\Users\ms\Downloads\amok27
2017-01-02 14:46 - 2017-01-02 14:46 - 00000000 ____D C:\Users\ms\Documents\AnyDVDHD
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\RedFox
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-01-02 14:36 - 2017-01-02 14:36 - 00000000 ____D C:\Program Files\RedFox
2017-01-02 14:35 - 2017-01-02 14:35 - 00000000 ____D C:\Users\ms\Downloads\A996
2017-01-02 13:32 - 2017-01-02 16:33 - 00000043 ___SH C:\ProgramData\.zreglib
2017-01-02 13:32 - 2017-01-02 13:33 - 00000000 ____D C:\ProgramData\Elaborate Bytes
2017-01-02 13:31 - 2017-01-06 01:33 - 00000000 _RSHD C:\ProgramData\Assemblies
2017-01-02 13:31 - 2017-01-02 13:31 - 00000000 _RSHD C:\Users\ms\AppData\Roaming\Assemblies
2017-01-02 13:29 - 2017-01-02 13:29 - 01110564 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604.exe
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\Program Files\7-Zip
2017-01-02 13:28 - 2017-01-02 13:28 - 01381582 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604-x64.exe
2017-01-02 13:06 - 2017-01-02 13:06 - 00001180 _____ C:\Users\ms\Desktop\Die Installation von Java fortsetzen.lnk
2017-01-02 12:48 - 2017-01-02 17:59 - 00000000 ____D C:\Program Files\Elaborate Bytes
2016-12-31 16:36 - 2016-12-31 16:36 - 00085590 _____ C:\Users\ms\Desktop\s-l1601.jpg
2016-12-31 16:35 - 2016-12-31 16:35 - 00264105 _____ C:\Users\ms\Desktop\s-l1600.jpg
2016-12-30 16:21 - 2016-12-30 16:21 - 00394682 _____ C:\Users\ms\Documents\Rudolf stoehr rp tavanic 2016.oxps
2016-12-29 18:47 - 2016-12-29 18:47 - 00010777 _____ C:\Users\ms\Documents\Maria Luiza da Silva Kündigung MOVE.docx
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagwrn.xml
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagerr.xml
2016-12-24 13:36 - 2016-12-24 13:36 - 02496120 _____ C:\Users\ms\Documents\kleiner lovenox.oxps
2016-12-24 11:19 - 2016-12-24 11:19 - 02558985 _____ C:\Users\ms\Documents\Kleiner Targin u Nolotil 2.oxps
2016-12-24 11:18 - 2016-12-24 11:18 - 02495274 _____ C:\Users\ms\Documents\Kleiner Targin u. Nolotil.oxps
2016-12-22 16:14 - 2017-01-05 20:28 - 00000000 ____D C:\Users\ms\AppData\Local\CrashDumps
2016-12-21 14:32 - 2017-01-06 11:34 - 00912862 _____ C:\Windows\system32\prfh0816.dat
2016-12-21 14:32 - 2017-01-06 11:34 - 00264906 _____ C:\Windows\system32\prfc0816.dat
2016-12-21 14:32 - 2016-12-24 11:31 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT
2016-12-21 14:32 - 2016-12-21 14:32 - 00341016 _____ C:\Windows\system32\prfi0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00042642 _____ C:\Windows\system32\prfd0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\pt
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\pt-PT
2016-12-20 22:43 - 2016-07-15 18:45 - 05032448 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0816.dll
2016-12-20 22:43 - 2016-07-15 18:42 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0816.dll
2016-12-20 22:43 - 2016-07-15 18:38 - 04384256 _____ (Microsoft Corporation) C:\Windows\system32\MLS6.dll
2016-12-20 22:25 - 2016-12-20 22:25 - 00001051 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-12-19 10:59 - 2016-12-19 11:05 - 200982907 _____ C:\Users\ms\Downloads\SteuerSparErklaerung_21.37.107.zip
2016-12-19 10:56 - 2016-12-19 10:56 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509(1).exe
2016-12-19 10:49 - 2016-12-19 10:49 - 00000000 ____D C:\Windows\tiinst
2016-12-19 10:11 - 2016-12-19 10:17 - 07086792 _____ (Hewlett Packard Company ) C:\Users\ms\Downloads\sp33439.exe
2016-12-18 22:13 - 2016-12-18 22:23 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509.exe
2016-12-18 21:51 - 2016-12-18 21:51 - 00000386 _____ C:\Users\ms\Documents\dr scheuber carvoeiro.xml
2016-12-18 21:33 - 2016-12-18 21:33 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\Roaming\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Oracle
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Program Files\Java
2016-12-18 19:40 - 2016-12-18 19:40 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111(1).exe
2016-12-18 19:39 - 2016-12-18 19:39 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111.exe
2016-12-18 19:38 - 2016-12-18 19:38 - 00000000 ____D C:\Users\ms\Downloads\gnucrawlandmap
2016-12-18 19:37 - 2016-12-18 19:37 - 00045304 _____ C:\Users\ms\Downloads\gnucrawlandmap.zip
2016-12-18 19:23 - 2016-12-18 19:23 - 00000000 ____D C:\Users\ms\AppData\Roaming\FileZilla Server
2016-12-18 19:22 - 2016-12-18 19:22 - 02238848 _____ (FileZilla Project) C:\Users\ms\Downloads\FileZilla_Server-0_9_59.exe
2016-12-17 23:48 - 2016-12-17 23:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-12-16 12:26 - 2016-12-16 12:26 - 00011487 _____ C:\Users\ms\Documents\Certificate of good standing Schleswig.docx
2016-12-16 12:19 - 2016-12-16 12:20 - 00192368 _____ C:\Users\ms\Downloads\DHL-Marke-VW27MH7RND.pdf
2016-12-16 11:46 - 2016-12-16 11:46 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-12-16 10:39 - 2012-04-16 05:00 - 00314880 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2016-12-16 09:38 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-15 19:39 - 2016-12-15 19:39 - 01960776 _____ (SCM Microsystems ) C:\Users\ms\Downloads\SCR3_DriversOnly_V8.41.exe
2016-12-15 19:39 - 2016-12-15 19:39 - 00000880 _____ C:\Windows\HBCIKRNL.INI
2016-12-15 19:39 - 2016-12-15 19:39 - 00000000 ____D C:\Program Files\SCM Microsystems
2016-12-15 19:32 - 2016-12-15 19:33 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS(1).msi
2016-12-15 19:29 - 2016-12-15 19:29 - 07645416 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp47728.exe
2016-12-15 19:25 - 2016-12-15 19:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2016-12-15 19:18 - 2016-12-15 19:18 - 00000107 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-15 19:18 - 2016-12-15 19:18 - 00000000 ____D C:\Users\ms\AppData\Roaming\MedicineOne
2016-12-14 00:40 - 2016-12-09 11:14 - 06019936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-14 00:40 - 2016-12-09 11:09 - 00133296 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-14 00:40 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-14 00:40 - 2016-12-09 11:00 - 00523784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 00:40 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-14 00:40 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-14 00:40 - 2016-12-09 10:52 - 01344992 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 00:40 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 00:40 - 2016-12-09 10:37 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-14 00:40 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-12-14 00:40 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-14 00:40 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-14 00:40 - 2016-12-09 10:22 - 03776000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-14 00:40 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 01235456 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-14 00:40 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-14 00:40 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-14 00:40 - 2016-09-15 17:53 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 01415520 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 00115552 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-14 00:39 - 2016-12-09 11:16 - 00890984 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-14 00:39 - 2016-12-09 11:16 - 00784064 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-14 00:39 - 2016-12-09 11:12 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-14 00:39 - 2016-12-09 11:10 - 00583136 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 01897824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00551264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00342880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-14 00:39 - 2016-12-09 11:00 - 00117720 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 00:39 - 2016-12-09 10:55 - 00198496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-14 00:39 - 2016-12-09 10:52 - 01413664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-14 00:39 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-14 00:39 - 2016-12-09 10:37 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-14 00:39 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-14 00:39 - 2016-12-09 10:35 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-14 00:39 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-14 00:39 - 2016-12-09 10:28 - 01284096 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-14 00:39 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 00:39 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 00:39 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-14 00:39 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-14 00:39 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-14 00:39 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 22:36 - 2016-12-13 22:36 - 00001052 _____ C:\Users\Public\Desktop\ISO to USB.lnk
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\Program Files\ISO to USB
2016-12-13 22:35 - 2016-12-13 22:36 - 01733751 _____ (isotousb.com ) C:\Users\ms\Downloads\isotousb_setup.exe
2016-12-13 22:22 - 2016-12-13 22:26 - 00000000 ____D C:\Users\ms\Downloads\windows 10 usb
2016-12-13 20:20 - 2016-12-13 20:20 - 00000000 __SHD C:\RECYCLER
2016-12-13 15:36 - 2016-12-16 11:46 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canon
2016-12-13 15:35 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMXLMAD.DLL
2016-12-13 15:33 - 2016-12-13 15:33 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 15:32 - 2016-12-13 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-13 15:32 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMLMAD.DLL
2016-12-13 15:32 - 2010-03-11 08:56 - 00180224 _____ (CANON INC.) C:\Windows\system32\CNMIUAD.DLL
2016-12-13 15:31 - 2016-12-13 15:32 - 23940240 _____ C:\Users\ms\Downloads\mp68-win-mg5100-1_02-ea24.exe
2016-12-13 15:30 - 2016-12-13 15:30 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24.exe
2016-12-13 15:28 - 2016-12-13 15:28 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24(1).exe
2016-12-13 15:17 - 2016-12-13 15:17 - 00002118 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 4.0.lnk
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\Program Files\Canon
2016-12-13 15:02 - 2016-12-13 15:16 - 49819216 _____ C:\Users\ms\Downloads\mpnx_4_0-win-4_03-ea23_2.exe
2016-12-13 10:22 - 2016-12-13 10:22 - 00001665 _____ C:\Users\ms\Desktop\MED7 Neuer Patient.lnk
2016-12-13 10:20 - 2016-12-13 10:23 - 00000000 ____D C:\Users\ms\Downloads\runasdate
2016-12-13 10:20 - 2016-12-13 10:20 - 00035563 _____ C:\Users\ms\Downloads\runasdate.zip
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Scavenger 3.2
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\Program Files\File Scavenger 3.2
2016-12-12 18:08 - 2016-12-12 18:09 - 01632488 _____ (QueTek Consulting Corporation) C:\Users\ms\Downloads\32fsg32.exe
2016-12-12 15:06 - 2016-12-12 15:07 - 00000000 ____D C:\Program Files\Hardcopy
2016-12-12 15:06 - 2016-12-12 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardcopy - Bildschirmausdruck
2016-12-12 15:06 - 2016-01-28 06:19 - 01720088 _____ (www.sw4you.de Siegfried Weckmann) C:\Windows\SwSetupu.exe
2016-12-12 14:58 - 2016-12-12 15:05 - 07108168 _____ C:\Users\ms\Downloads\hc.exe
2016-12-12 14:21 - 2016-12-12 14:21 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-12 11:21 - 2016-12-12 11:21 - 00000000 ____D C:\Users\ms\AppData\Local\PeerDistRepub
2016-12-12 09:54 - 2016-12-12 09:54 - 00000000 ____D C:\ProgramData\ODIR
2016-12-11 23:47 - 2016-12-11 23:47 - 00000000 ____D C:\temp
2016-12-11 23:46 - 2016-12-11 23:47 - 00000000 ____D C:\Users\ms\AppData\Roaming\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00001262 _____ C:\Users\ms\Desktop\VoipConnect.lnk
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\Program Files\VoipConnect.com
2016-12-11 23:45 - 2016-12-11 23:46 - 07289336 _____ (Finarea S.A. Switzerland ) C:\Users\ms\Downloads\SetupVoipConnect-voipbuster.exe
2016-12-11 23:28 - 2017-01-02 14:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Adobe
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Local\CEF
2016-12-11 23:12 - 2016-12-15 09:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Adobe
2016-12-11 23:11 - 2016-12-11 23:17 - 00000000 ____D C:\ProgramData\Adobe
2016-12-11 23:10 - 2016-12-11 23:30 - 00000000 ____D C:\Users\ms\AppData\Local\Adobe
2016-12-11 23:07 - 2016-12-11 22:46 - 02219540 _____ (Vaita ) C:\Users\ms\Downloads\ODIR.exe
2016-12-11 23:07 - 2016-11-20 20:10 - 00042050 _____ C:\Users\ms\Downloads\Kuendigungsschreiben_1411-3956-1650-75.pdf
2016-12-11 23:07 - 2016-10-05 21:51 - 08244656 _____ (Piriform Ltd) C:\Users\ms\Downloads\ccsetup522.exe
2016-12-11 23:07 - 2016-09-16 21:33 - 02907822 _____ C:\Users\ms\Downloads\skriptum-wolfgang-aufermann.pdf
2016-12-11 23:07 - 2016-09-12 23:38 - 02254413 _____ (Dr. Olaf Jacobsen ) C:\Users\ms\Downloads\cmsetup.exe
2016-12-11 23:07 - 2016-09-12 23:23 - 00000920 _____ C:\Users\ms\Downloads\datev07.cer
2016-12-11 23:07 - 2016-09-02 16:34 - 02536914 _____ C:\Users\ms\Downloads\ebook.pdf
2016-12-11 23:07 - 2016-08-30 15:40 - 00094057 _____ C:\Users\ms\Downloads\faturaRecibo_41.pdf
2016-12-11 23:07 - 2016-08-27 21:44 - 00347648 _____ C:\Users\ms\Downloads\document.pdf
2016-12-11 23:07 - 2016-08-04 23:44 - 00853491 _____ C:\Users\ms\Downloads\PBBooking 3.x Docs.pdf
2016-12-11 23:07 - 2016-07-05 13:35 - 224073588 _____ C:\Users\ms\Downloads\Med7v806.exe
2016-12-11 23:07 - 2016-05-04 08:17 - 01098961 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1514.exe
2016-12-11 23:07 - 2016-03-26 21:46 - 00030723 _____ C:\Users\ms\Downloads\mysql.tar.gz
2016-12-11 23:07 - 2016-03-26 21:46 - 00000120 _____ C:\Users\ms\Downloads\files.tar.gz
2016-12-11 23:07 - 2016-03-14 22:00 - 00000053 _____ C:\Users\ms\Downloads\googlef3d513425c3c6eb5.html
2016-12-11 23:07 - 2016-01-14 23:39 - 02122336 _____ (Irfan Skiljan) C:\Users\ms\Downloads\iview441_setup.exe
2016-12-11 23:07 - 2015-11-04 23:53 - 00001257 _____ C:\Users\ms\Downloads\index.php
2016-12-11 23:07 - 2015-07-23 11:17 - 00036562 _____ C:\Users\ms\Downloads\Herz.jpg
2016-12-11 23:07 - 2015-02-10 22:10 - 167180781 _____ C:\Users\ms\Downloads\Med7voll.exe
2016-12-11 23:07 - 1997-11-28 21:08 - 00018944 _____ (Corel Corporation) C:\Users\ms\Downloads\Install.exe
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ODIR
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\Program Files\ODIR
2016-12-11 22:47 - 2000-12-05 23:00 - 00209608 _____ (Microsoft Corporation) C:\Windows\system32\Tabctl32.ocx
2016-12-11 22:47 - 1999-03-26 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-11 22:19 - 2016-12-15 19:39 - 00000000 ____D C:\Windows\Downloaded Installations
2016-12-11 21:33 - 2016-12-11 21:33 - 00000000 ____D C:\Users\ms\AppData\Local\Dropbox
2016-12-11 21:32 - 2016-12-11 21:33 - 00688536 _____ (Dropbox, Inc.) C:\Users\ms\Downloads\DropboxInstaller.exe
2016-12-11 21:24 - 2016-12-11 21:24 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-11 21:24 - 2016-12-11 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-11 21:23 - 2016-12-11 21:24 - 00000000 ____D C:\Program Files\CCleaner
2016-12-11 21:14 - 2016-12-11 21:33 - 00000000 ____D C:\Program Files\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Users\ms\AppData\Local\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Program Files\GUM5B71.tmp
2016-12-11 20:52 - 2016-12-11 20:52 - 00000000 ____D C:\Users\ms\AppData\Roaming\hpqLog
2016-12-11 20:37 - 2016-12-19 10:18 - 00000000 ____D C:\SWSETUP
2016-12-11 19:50 - 2016-12-11 20:10 - 00000000 ____D C:\Users\ms\AppData\Local\Diagnostics
2016-12-11 19:35 - 2016-12-11 19:35 - 00000017 _____ C:\Users\ms\AppData\Local\resmon.resmoncfg
2016-12-11 18:41 - 2016-12-11 18:41 - 00066496 _____ C:\Users\ms\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 18:16 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00448864 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-11 18:16 - 2016-11-11 09:00 - 01725136 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 01586736 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 00292192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-11 18:16 - 2016-11-11 08:59 - 00106336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-11 18:16 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-11 18:16 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-11 18:16 - 2016-11-11 08:46 - 00186720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-11 18:16 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00355680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-11 18:16 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00313088 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-12-11 18:16 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-11 18:16 - 2016-11-11 08:41 - 01384704 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00802608 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00675568 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-11 18:16 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-11 18:16 - 2016-11-11 08:37 - 00381720 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-11 18:16 - 2016-11-11 08:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-11 18:16 - 2016-11-11 08:29 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-11 18:16 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-11 18:16 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-11 18:16 - 2016-11-11 08:24 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-11 18:16 - 2016-11-11 08:22 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-11 18:16 - 2016-11-11 08:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-11 18:16 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00384512 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-11 18:16 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-11 18:16 - 2016-11-11 08:18 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-11 18:16 - 2016-11-11 08:16 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-11 18:16 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01722368 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-11 18:16 - 2016-11-11 08:12 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00786432 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-11 18:16 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01948160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01136128 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-11 18:16 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-11 18:16 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00920576 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00706048 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-11 18:16 - 2016-11-11 08:02 - 00612352 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-11 18:16 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-12-11 18:16 - 2016-11-02 12:23 - 01073816 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-11 18:16 - 2016-11-02 12:23 - 00945760 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-11 18:16 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-12-11 18:16 - 2016-11-02 12:21 - 01957216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-12-11 18:16 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-12-11 18:16 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-12-11 18:16 - 2016-11-02 12:06 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-12-11 18:16 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-12-11 18:16 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-12-11 18:16 - 2016-11-02 12:00 - 00042336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-12-11 18:16 - 2016-11-02 11:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-12-11 18:16 - 2016-11-02 11:53 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-12-11 18:16 - 2016-11-02 11:51 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-12-11 18:16 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-12-11 18:16 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-12-11 18:16 - 2016-11-02 11:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\AuthExt.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-12-11 18:16 - 2016-11-02 11:38 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-12-11 18:16 - 2016-11-02 11:36 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-12-11 18:16 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-12-11 18:16 - 2016-11-02 11:33 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-12-11 18:16 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 01056768 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03595776 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-12-11 18:16 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-12-11 18:16 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls
2016-12-11 18:16 - 2016-10-28 04:11 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-11 18:16 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-12-11 18:16 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-12-11 18:16 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-12-11 18:16 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-12-11 18:16 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-12-11 18:16 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-12-11 18:16 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-11 18:16 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-12-11 18:16 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-12-11 18:16 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-12-11 18:16 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-12-11 18:16 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-12-11 18:16 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-12-11 18:16 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-11 18:16 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-12-11 18:16 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-12-11 18:16 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-12-11 18:16 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-12-11 18:16 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-12-11 18:16 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-12-11 18:16 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-12-11 18:16 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-12-11 18:16 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-12-11 18:16 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-12-11 18:16 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-12-11 18:16 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-12-11 18:16 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-12-11 18:16 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-12-11 18:16 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-12-11 18:16 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2016-12-11 18:16 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00483840 _____ (Microsoft

pingodoce 06.01.2017 11:53
Code:
2016-12-11 18:16 - 2016-10-28 04:11 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-11 18:16 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-12-11 18:16 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-12-11 18:16 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-12-11 18:16 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-12-11 18:16 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-12-11 18:16 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-12-11 18:16 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-11 18:16 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-12-11 18:16 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-12-11 18:16 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-12-11 18:16 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-12-11 18:16 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-12-11 18:16 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-12-11 18:16 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-11 18:16 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-12-11 18:16 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-12-11 18:16 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-12-11 18:16 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-12-11 18:16 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-12-11 18:16 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-12-11 18:16 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-12-11 18:16 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-12-11 18:16 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-12-11 18:16 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-12-11 18:16 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-12-11 18:16 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-12-11 18:16 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-12-11 18:16 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-12-11 18:16 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-12-11 18:16 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2016-12-11 18:16 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-12-11 18:16 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2016-12-11 18:16 - 2016-10-05 10:23 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-12-11 18:16 - 2016-10-05 10:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2016-12-11 18:16 - 2016-10-05 10:22 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00498176 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-12-11 18:16 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-12-11 18:16 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-11 18:16 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-12-11 18:16 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-12-11 18:16 - 2016-10-05 10:11 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-12-11 18:16 - 2016-10-05 10:10 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 01700864 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2016-12-11 18:16 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00608256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-12-11 18:16 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-12-11 18:16 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-11 18:16 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00320152 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-12-11 18:16 - 2016-09-15 18:36 - 00021344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-12-11 18:16 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-12-11 18:16 - 2016-09-15 18:32 - 00279416 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2016-12-11 18:16 - 2016-09-15 18:27 - 00868704 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-12-11 18:16 - 2016-09-15 18:26 - 00581672 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-12-11 18:16 - 2016-09-15 18:23 - 00170448 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2016-12-11 18:16 - 2016-09-15 18:21 - 00557920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-12-11 18:16 - 2016-09-15 18:20 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2016-12-11 18:16 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-12-11 18:16 - 2016-09-15 18:17 - 00125792 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-12-11 18:16 - 2016-09-15 18:16 - 00093984 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2016-12-11 18:16 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-12-11 18:16 - 2016-09-15 18:06 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-12-11 18:16 - 2016-09-15 18:00 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-12-11 18:16 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 03716096 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00823808 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00265728 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-12-11 18:16 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2016-12-11 18:16 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-12-11 18:16 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-12-11 18:16 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2016-12-11 18:16 - 2016-09-15 17:46 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2016-12-11 18:16 - 2016-09-15 17:45 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00734208 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-12-11 18:16 - 2016-09-15 17:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-12-11 18:16 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-12-11 18:16 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 01438720 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2016-12-11 18:16 - 2016-09-07 06:35 - 00315736 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-12-11 18:16 - 2016-09-07 06:33 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-11 18:16 - 2016-09-07 06:29 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-12-11 18:16 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-12-11 18:16 - 2016-09-07 06:18 - 00290264 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00782176 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00509792 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-12-11 18:16 - 2016-09-07 06:16 - 00589144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-12-11 18:16 - 2016-09-07 06:16 - 00399712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-11 18:16 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-12-11 18:16 - 2016-09-07 06:13 - 00432328 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2016-12-11 18:16 - 2016-09-07 06:12 - 00321792 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-12-11 18:16 - 2016-09-07 06:07 - 00043944 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-11 18:16 - 2016-09-07 06:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2016-12-11 18:16 - 2016-09-07 06:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2016-12-11 18:16 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00392704 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-11 18:16 - 2016-09-07 05:51 - 06534656 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-12-11 18:16 - 2016-09-07 05:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 02318336 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 01774080 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-12-11 18:16 - 2016-09-07 05:45 - 05398016 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 01842688 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2016-12-11 18:16 - 2016-09-07 05:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-12-11 18:16 - 2016-09-07 05:40 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00895488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-12-11 18:16 - 2016-09-07 05:37 - 00640000 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-12-11 18:16 - 2016-09-07 05:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 04557824 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00860672 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-12-11 18:16 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-12-11 18:16 - 2016-09-07 05:31 - 00461312 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2016-12-11 18:16 - 2016-09-07 05:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-11 18:16 - 2016-08-27 05:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-12-11 18:16 - 2016-08-27 05:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-12-11 18:16 - 2016-08-20 06:49 - 00092000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-12-11 18:16 - 2016-08-20 06:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-12-11 18:16 - 2016-08-20 06:12 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-12-11 18:16 - 2016-08-20 06:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-12-11 18:16 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-12-11 18:16 - 2016-08-20 06:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-12-11 18:16 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-12-11 18:16 - 2016-08-20 05:59 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-12-11 18:16 - 2016-08-20 05:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-12-11 18:16 - 2016-08-20 05:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-12-11 18:16 - 2016-08-09 03:13 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-12-11 18:16 - 2016-08-06 05:26 - 00036704 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-12-11 18:16 - 2016-08-06 05:22 - 00173408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-12-11 18:16 - 2016-08-06 05:16 - 00798504 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-11 18:16 - 2016-08-06 05:15 - 00292184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-12-11 18:16 - 2016-08-06 05:14 - 00145248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-11 18:16 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-12-11 18:16 - 2016-08-06 05:06 - 00023776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-11 18:16 - 2016-08-06 05:03 - 01343928 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-12-11 18:16 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-12-11 18:16 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-11 18:16 - 2016-08-06 04:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-12-11 18:16 - 2016-08-06 04:48 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-12-11 18:16 - 2016-08-06 04:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-12-11 18:16 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-12-11 18:16 - 2016-08-06 04:46 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-12-11 18:16 - 2016-08-06 04:45 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-12-11 18:16 - 2016-08-06 04:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-12-11 18:16 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-12-11 18:16 - 2016-08-06 04:37 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-12-11 18:16 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-12-11 18:16 - 2016-08-06 04:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-12-11 18:16 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-12-11 18:16 - 2016-08-06 04:25 - 01997824 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-12-11 18:16 - 2016-08-06 04:23 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-12-11 18:16 - 2016-08-05 10:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-12-11 18:16 - 2016-08-05 09:54 - 00564488 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-12-11 18:16 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-12-11 18:16 - 2016-08-05 09:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-12-11 18:16 - 2016-08-05 09:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-12-11 18:16 - 2016-08-02 05:47 - 00094528 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-12-11 18:16 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-12-11 18:16 - 2016-07-22 02:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2016-12-11 18:15 - 2016-11-11 08:45 - 00261984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-11 18:15 - 2016-11-11 08:45 - 00175968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-11 18:15 - 2016-11-11 08:26 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-11 18:15 - 2016-11-11 08:25 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-11 18:15 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-11 18:15 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-11 18:15 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-11 18:15 - 2016-11-11 08:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-11 18:15 - 2016-11-11 08:15 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-11 18:15 - 2016-11-11 08:06 - 01602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-11 18:15 - 2016-11-02 12:21 - 00570720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-12-11 18:15 - 2016-11-02 12:09 - 00544088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-12-11 18:15 - 2016-11-02 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-12-11 18:15 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-12-11 18:15 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-12-11 18:15 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 01026400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00496992 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00192864 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-12-11 18:15 - 2016-10-15 05:40 - 01126496 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-12-11 18:15 - 2016-10-15 05:27 - 00421216 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-12-11 18:15 - 2016-10-15 05:18 - 00458592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-12-11 18:15 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-12-11 18:15 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-12-11 18:15 - 2016-10-15 04:55 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-12-11 18:15 - 2016-10-15 04:54 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-12-11 18:15 - 2016-10-15 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-12-11 18:15 - 2016-10-15 04:43 - 00500736 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-12-11 18:15 - 2016-10-05 11:10 - 00231776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-12-11 18:15 - 2016-10-05 10:53 - 00154976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-12-11 18:15 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2016-12-11 18:15 - 2016-10-05 10:46 - 00056672 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2016-12-11 18:15 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-12-11 18:15 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00614752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2016-12-11 18:15 - 2016-09-15 18:42 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2016-12-11 18:15 - 2016-09-15 18:00 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-12-11 18:15 - 2016-09-15 17:58 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-12-11 18:15 - 2016-09-15 17:55 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2016-12-11 18:15 - 2016-09-15 17:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2016-12-11 18:15 - 2016-09-15 17:52 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-12-11 18:15 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-12-11 18:15 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2016-12-11 18:15 - 2016-09-07 06:13 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2016-12-11 18:15 - 2016-09-07 05:54 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-12-11 18:15 - 2016-08-20 06:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-12-11 18:14 - 2010-03-18 19:25 - 00307200 _____ (CANON INC.) C:\Windows\system32\CNC5100L.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 01335296 _____ (CANON INC.) C:\Windows\system32\CNC5100C.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 00114688 _____ (CANON INC.) C:\Windows\system32\CNC5100I.dll
2016-12-11 18:14 - 2010-03-18 17:11 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC5100U.dll
2016-12-11 18:14 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\system32\CNHMCA.dll
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\Program Files\Microsoft
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-12-11 15:11 - 2016-12-20 17:01 - 00000000 ____D C:\Program Files\Kingston_SSD_Manager
2016-12-11 15:11 - 2016-12-11 15:11 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-11 15:02 - 2016-12-11 15:10 - 63327456 _____ (Kingston Digital, Inc ) C:\Users\ms\Downloads\KSM_setup_1.0.1.3.exe
2016-12-11 13:35 - 2016-12-11 13:35 - 00000000 ____D C:\Users\ms\AppData\Roaming\Identities
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AWP
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\Program Files\Oberthur Technologies
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 __HDC C:\ProgramData\{F9068F7D-ADD2-4370-8E57-E5C54FAD3F79}
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 ____D C:\Users\ms\AppData\Local\MedicineOne
2016-12-11 03:19 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-12-11 03:19 - 2016-12-11 03:19 - 00001280 _____ C:\Users\Public\Desktop\My MedicineOne.lnk
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MedicineOne
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MSBuild
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MedicineOne
2016-12-11 03:19 - 2016-12-01 13:45 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS.msi
2016-12-11 03:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-12-11 02:58 - 2016-12-11 02:58 - 00000458 __RSH C:\ProgramData\ntuser.pol
2016-12-11 02:42 - 2016-12-11 02:42 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-10 18:23 - 2016-12-10 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-12-10 18:22 - 2016-12-10 18:25 - 00000000 ____D C:\Program Files\Microsoft Works
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2016-12-10 13:29 - 2016-12-10 18:20 - 00000000 ____D C:\Windows\SHELLNEW
2016-12-10 13:20 - 2016-12-10 13:20 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft Help
2016-12-10 13:16 - 2016-12-25 18:09 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-10 13:15 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-10 13:06 - 2016-12-10 13:06 - 00000000 __RHD C:\MSOCache
2016-12-10 11:40 - 2016-12-13 22:34 - 00000000 ____D C:\Windows\system32\MRT
2016-12-10 11:38 - 2016-12-13 22:32 - 133430776 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-10 11:34 - 2016-12-10 11:34 - 00000000 ____D C:\Users\ms\AppData\Local\Programs
2016-12-10 11:22 - 2016-12-10 11:34 - 00000220 _____ C:\Users\ms\Downloads\results.txt
2016-12-10 11:22 - 2016-12-10 11:27 - 00002503 _____ C:\HCT.Log
2016-12-10 11:21 - 2016-12-16 16:34 - 00000000 ____D C:\Program Files\SpeedFan
2016-12-10 11:21 - 2016-12-10 11:21 - 00001038 _____ C:\Users\ms\Desktop\SpeedFan.lnk
2016-12-10 11:21 - 2016-12-10 11:21 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2016-12-10 11:21 - 2016-12-10 11:21 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-12-10 11:14 - 2016-12-10 11:15 - 00000158 _____ C:\Users\ms\Downloads\prime.txt
2016-12-10 11:14 - 2016-12-10 11:14 - 00000100 _____ C:\Users\ms\Downloads\local.txt
2016-12-10 11:13 - 2016-12-10 11:13 - 00000000 ____D C:\Users\ms\AppData\Local\Downloaded Installations
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:19 - 2017-01-06 08:31 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Mozilla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\joomla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\homepage Datenbank backup
2016-12-10 10:19 - 2016-12-10 10:34 - 00000000 ____D C:\Users\ms\AppData\Local\Mozilla
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\homepage AKEEBA
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\FOBI BERLIN
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\AppData\Roaming\Mozilla
2016-12-10 10:18 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-10 10:18 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\DJI_WIN_Driver_Installer
2016-12-10 10:18 - 2016-12-10 10:18 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-10 10:18 - 2016-12-10 10:18 - 00001178 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-10 10:14 - 2016-12-10 10:18 - 00000000 ____D C:\Users\ms\Downloads\Ant Videos
2016-12-10 10:10 - 2017-01-06 01:33 - 00000000 ____D C:\Users\ms\Downloads\android apk
2016-12-10 10:09 - 2016-10-18 20:58 - 00007113 _____ C:\Users\ms\Downloads\sitemap.xml
2016-12-10 10:09 - 2016-10-05 09:25 - 00004574 _____ C:\Users\ms\Downloads\subscribers_list_0_2016.30.09.csv
2016-12-10 10:09 - 2016-08-10 18:07 - 54811422 _____ C:\Users\ms\Downloads\site-www.dr-scheuber-carvoeiro.com-20160810-185738.jpa
2016-12-10 09:56 - 2017-01-03 15:42 - 00000000 ____D C:\Users\ms\Documents\Dokumente Privat
2016-12-10 09:54 - 2017-01-02 21:39 - 00000000 ____D C:\Users\ms\Documents\Dokumente Praxis
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\Documents\dokumente knie
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Temp
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Program Files\AuthenTec
2016-12-10 09:53 - 2016-12-19 10:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-10 09:53 - 2016-12-11 20:52 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Windows\QLB
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\ms\Downloads\Neuer Ordner
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-10-25 12:26 - 00288059 _____ C:\Users\ms\Desktop\Diploma I.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00465616 _____ C:\Users\ms\Desktop\certificado Bahrain.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00397695 _____ C:\Users\ms\Desktop\certificado Roland Klinik.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00362311 _____ C:\Users\ms\Desktop\Diploma.pdf
2016-12-10 09:53 - 2016-08-15 09:21 - 00128468 _____ C:\Users\ms\Desktop\elke2.png
2016-12-10 09:53 - 2016-08-13 20:10 - 00019777 _____ C:\Users\ms\Desktop\elke2.eld
2016-12-10 09:53 - 2016-05-03 01:10 - 00621681 _____ C:\Users\ms\Desktop\adresse jpg.jpg
2016-12-10 09:53 - 2016-05-02 14:48 - 00725526 _____ C:\Users\ms\Desktop\briefkopf neu.bmp
2016-12-10 09:53 - 2016-05-02 14:44 - 00028857 _____ C:\Users\ms\Desktop\briefkopf neu.jpg
2016-12-10 09:53 - 2009-04-29 07:46 - 00015872 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\system32\Drivers\HpqKbFiltr.sys
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 ____R (Hewlett-Packard Company) C:\Windows\system32\BttnCmn.dll
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\system32\BttnCmns.dll
2016-12-10 09:53 - 2006-11-02 06:09 - 01419232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01005.dll
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med7
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med wh
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\JP_HealthCare
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\Fotos Praxis
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\EBAY
2016-12-10 09:52 - 2016-08-15 11:12 - 00460009 _____ C:\Users\ms\Desktop\npl zum teil ausgefuellt.pdf
2016-12-10 09:52 - 2016-08-13 18:10 - 00107041 _____ C:\Users\ms\Desktop\elke3.png
2016-12-10 09:52 - 2016-05-12 16:12 - 00003407 _____ C:\Users\ms\Desktop\IRS2015
2016-12-10 09:52 - 2015-12-26 03:08 - 00001154 _____ C:\Users\ms\Desktop\IsoBuster.lnk
2016-12-10 09:52 - 2015-11-05 22:57 - 00004781 _____ C:\Users\ms\Desktop\farmaciaservico.png
2016-12-10 09:52 - 2015-09-27 15:07 - 00040814 _____ C:\Users\ms\Desktop\map.pdf
2016-12-10 09:52 - 2014-05-15 18:47 - 00582144 _____ C:\Users\ms\Desktop\Kopie von Scheuber.xls
2016-12-10 09:52 - 2014-03-07 21:48 - 03582301 _____ (Adobe Systems, Inc.) C:\Users\ms\Desktop\lantus_dosisfinder_05_080422_KO.exe
2016-12-10 09:52 - 2011-09-21 21:16 - 01676610 _____ C:\Users\ms\Desktop\PDF-Datei Hilfe.pdf
2016-12-10 09:51 - 2016-12-11 20:43 - 00000000 ____D C:\Program Files\Analog Devices
2016-12-10 09:50 - 2016-12-10 09:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf
2016-12-10 09:49 - 2016-12-10 09:49 - 00000000 ____D C:\Program Files\Synaptics
2016-12-10 09:48 - 2016-12-10 09:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-10 09:28 - 2016-12-10 10:11 - 00000000 ____D C:\Users\ms\AppData\Local\MicrosoftEdge
2016-12-10 09:27 - 2016-12-10 09:27 - 00000000 ____D C:\Users\ms\AppData\Local\NetworkTiles
2016-12-10 09:26 - 2016-12-10 09:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-12-10 09:25 - 2016-12-18 23:38 - 00000000 ___SD C:\Users\ms\AppData\LocalLow\Microsoft
2016-12-10 09:23 - 2017-01-06 11:34 - 04005350 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-10 07:06 - 2016-12-10 07:06 - 00000000 ____D C:\Users\ms\AppData\Local\Comms
2016-12-10 07:00 - 2016-12-10 07:00 - 00002378 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-10 07:00 - 2016-12-10 07:00 - 00000000 ___RD C:\Users\ms\OneDrive
2016-12-10 06:33 - 2016-12-10 06:33 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-10 06:25 - 2016-12-10 06:25 - 00000000 ____D C:\Users\ms\AppData\Local\Publishers
2016-12-10 06:12 - 2017-01-06 11:43 - 00000000 ____D C:\Users\ms\AppData\Local\Temp
2016-12-10 06:12 - 2017-01-06 11:30 - 00000000 ____D C:\Users\ms
2016-12-10 06:12 - 2017-01-06 10:35 - 00000000 ___RD C:\Users\ms\Desktop
2016-12-10 06:12 - 2017-01-06 09:16 - 02883584 ____H C:\Users\ms\NTUSER.DAT
2016-12-10 06:12 - 2017-01-06 08:40 - 00000000 ____D C:\Users\ms\AppData\Local
2016-12-10 06:12 - 2017-01-06 08:17 - 00000000 ____D C:\Users\ms\AppData\Roaming
2016-12-10 06:12 - 2017-01-06 08:15 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 06:12 - 2017-01-06 08:15 - 00065536 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 06:12 - 2017-01-06 01:33 - 00000000 ___RD C:\Users\ms\Downloads
2016-12-10 06:12 - 2017-01-04 22:58 - 00000000 ___RD C:\Users\ms\Documents
2016-12-10 06:12 - 2017-01-02 16:58 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft
2016-12-10 06:12 - 2017-01-02 16:09 - 00000000 ___SD C:\Users\ms\AppData\Roaming\Microsoft
2016-12-10 06:12 - 2017-01-02 12:49 - 00000000 ____D C:\Users\ms\AppData\Local\VirtualStore
2016-12-10 06:12 - 2016-12-22 18:36 - 00000000 ____D C:\Users\ms\AppData\Local\Packages
2016-12-10 06:12 - 2016-12-22 16:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 06:12 - 2016-12-20 22:25 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 06:12 - 2016-12-18 21:41 - 00000000 ____D C:\Users\ms\AppData\LocalLow
2016-12-10 06:12 - 2016-12-13 22:30 - 00000000 ___RD C:\Users\ms\Pictures
2016-12-10 06:12 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Roaming\Adobe
2016-12-10 06:12 - 2016-12-11 22:14 - 00000402 ___SH C:\Users\ms\Documents\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Videos
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Searches
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Saved Games
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Music
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Links
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Favorites
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Contacts
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-10 06:12 - 2016-12-10 09:19 - 00000000 ____D C:\Users\ms\AppData\Local\ConnectedDevicesPlatform
2016-12-10 06:12 - 2016-12-10 06:12 - 00819200 ___SH C:\Users\ms\ntuser.dat.LOG1
2016-12-10 06:12 - 2016-12-10 06:12 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 06:12 - 2016-12-10 06:12 - 00163840 ___SH C:\Users\ms\ntuser.dat.LOG2
2016-12-10 06:12 - 2016-12-10 06:12 - 00003340 ____H C:\Users\defaultuser0\AppData\Local\IconCache.db
2016-12-10 06:12 - 2016-12-10 06:12 - 00000020 ___SH C:\Users\ms\ntuser.ini
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Vorlagen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Startmenü
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\SendTo
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Recent
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Netzwerkumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Lokale Einstellungen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Eigene Dateien
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Druckumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Videos
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Musik
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Bilder
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Cookies
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Verlauf
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Temporary Internet Files
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___HD C:\Users\ms\AppData
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ____D C:\Users\ms\AppData\Local\TileDataLayer
2016-12-10 06:12 - 2016-12-09 14:01 - 00000084 ___SH C:\Users\ms\Downloads\desktop.ini
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 06:06 - 2017-01-05 20:45 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-10 06:03 - 2016-12-10 06:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\packages
2016-12-10 06:02 - 2016-12-10 06:02 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2016-12-10 01:14 - 2016-12-10 01:14 - 00000000 ____D C:\Windows\CSC
2016-12-10 01:01 - 2016-12-10 01:01 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\SendTo
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Recent
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Cookies
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Temporary Internet Files
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0\AppData\LocalLow
2016-12-10 01:00 - 2017-01-06 02:18 - 00262144 ____H C:\Users\defaultuser0\NTUSER.DAT
2016-12-10 01:00 - 2016-12-10 06:12 - 00000000 ____D C:\Users\defaultuser0\AppData\Local
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ___SD C:\Users\defaultuser0\AppData\Roaming\Microsoft
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Microsoft
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00065536 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___RD C:\Users\defaultuser0\Documents
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___HD C:\Users\defaultuser0\AppData
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0
2016-12-10 01:00 - 2016-12-10 01:00 - 00049152 ___SH C:\Users\defaultuser0\ntuser.dat.LOG1
2016-12-10 01:00 - 2016-12-10 01:00 - 00012288 ___SH C:\Users\defaultuser0\ntuser.dat.LOG2
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Videos
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Pictures
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Music
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Links
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Favorites
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Downloads
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Desktop
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\Saved Games
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Temp
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-10 00:55 - 2017-01-06 11:30 - 1445953536 ___SH C:\hiberfil.sys
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 00:53 - 2016-12-10 00:53 - 00047425 _____ C:\Windows\system32\license.rtf
2016-12-09 23:39 - 2016-12-09 23:39 - 00000000 ___HD C:\Program Files\Uninstall Information
2016-12-09 23:37 - 2016-12-09 23:37 - 00000000 ____D C:\ProgramData\USOShared
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00065536 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TM.blf
2016-12-09 23:24 - 2017-01-06 09:18 - 00000000 __SHD C:\Recovery
2016-12-09 23:15 - 2017-01-06 11:32 - 00067584 ____S C:\Windows\bootstat.dat
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:14 - 2017-01-06 07:49 - 00000000 ____D C:\Windows\Prefetch
2016-12-09 23:13 - 2017-01-06 00:00 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-09 23:10 - 2017-01-06 11:35 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-09 23:10 - 2016-12-15 09:23 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-09 23:10 - 2016-12-09 23:11 - 00000000 ____D C:\Windows\ServiceProfiles
2016-12-09 23:10 - 2016-12-09 23:10 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-09 23:09 - 2017-01-06 11:30 - 603979776 ___SH C:\pagefile.sys
2016-12-09 23:09 - 2017-01-06 11:30 - 16777216 ___SH C:\swapfile.sys
2016-12-09 23:09 - 2016-12-15 09:22 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:09 - 2016-12-15 09:22 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:09 - 2016-12-09 23:12 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:05 - 2016-12-13 17:51 - 00000000 __SHD C:\System Volume Information
2016-12-09 23:04 - 2017-01-06 10:34 - 00000000 ____D C:\Windows\Panther

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-06 11:34 - 2016-07-16 18:27 - 01230398 _____ C:\Windows\system32\perfh007.dat
2017-01-06 11:34 - 2016-07-16 18:27 - 00292530 _____ C:\Windows\system32\perfc007.dat
2017-01-06 09:16 - 2016-07-16 03:22 - 00524288 _____ C:\Windows\system32\config\BBI
2017-01-05 23:59 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\NDF
2017-01-05 22:42 - 2016-07-16 09:28 - 00000000 ____D C:\Windows\INF
2017-01-05 16:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\AppReadiness
2017-01-01 01:29 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-31 12:59 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\config
2016-12-30 16:13 - 2015-12-11 22:34 - 00000000 ____D C:\med7net
2016-12-30 16:13 - 2015-12-11 22:32 - 00000000 ____D C:\Med7
2016-12-29 16:50 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\rescache
2016-12-25 16:57 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\Logs
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-US
2016-12-24 11:31 - 2016-07-16 09:19 - 00000000 ____D C:\Windows\CbsTemp
2016-12-24 11:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-22 18:36 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-21 14:32 - 2016-07-16 18:32 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\winrm
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\WCN
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\slmgr
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\en
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\F12
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\MiracastView
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\oobe
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\MUI
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migration
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Com
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Boot
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\IME
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Help
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\apppatch
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Dism
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\servicing
2016-12-20 22:43 - 2016-07-16 18:28 - 00000000 ____D C:\Windows\OCR
2016-12-19 10:50 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-18 21:33 - 2016-07-16 03:22 - 00000000 ____D C:\Program Files\Common Files
2016-12-15 19:09 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-15 09:22 - 2016-07-16 09:30 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\twain_32
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Media
2016-12-12 15:06 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-12 00:56 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-11 22:11 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 __RSD C:\Windows\Fonts
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-HK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\uk-UA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\th-TH
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sl-SI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sk-SK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\setup
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ro-RO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-BR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nb-NO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hr-HR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\he-IL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-CA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ar-SA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Provisioning
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\bcastdvr
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-11 22:10 - 2016-07-16 09:30 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-12-11 21:55 - 2016-07-16 09:30 - 00000167 _____ C:\Windows\win.ini
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-11 12:44 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-12-11 12:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\appcompat
2016-12-11 03:19 - 2016-07-16 03:22 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-11 02:53 - 2016-07-16 09:29 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-12-10 17:09 - 2016-07-16 09:29 - 00000000 __SHD C:\$Recycle.Bin
2016-12-10 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-10 11:37 - 2016-07-16 09:25 - 00006656 _____ C:\Windows\system32\lpcio.dll
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Roaming
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Roaming
2016-12-10 06:12 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public
2016-12-10 06:12 - 2016-07-16 03:22 - 00000000 ___RD C:\Users
2016-12-10 01:16 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\spool
2016-12-10 01:15 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-10 01:06 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Default\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows NT
2016-12-10 00:59 - 2016-07-16 03:22 - 00000000 __RHD C:\Users\Default
2016-12-10 00:38 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Recovery
2016-12-09 23:37 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-09 23:36 - 2016-07-16 03:22 - 00032768 _____ C:\Windows\system32\config\ELAM
2016-12-09 23:34 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\PrintDialog
2016-12-09 23:19 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-09 23:04 - 2016-07-16 09:30 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-06 00:16 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.exe
2017-01-06 01:33 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.Vexe
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-11 19:35 - 2016-12-11 19:35 - 0000017 _____ () C:\Users\ms\AppData\Local\resmon.resmoncfg
2017-01-02 13:32 - 2017-01-02 16:33 - 0000043 ___SH () C:\ProgramData\.zreglib
2016-12-15 19:18 - 2016-12-15 19:18 - 0000107 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Einige Dateien in TEMP:
====================
C:\Users\ms\AppData\Local\Temp\dllnt_dump.dll
C:\Users\ms\AppData\Local\Temp\keygen.exe
C:\Users\ms\AppData\Local\Temp\svhost.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 11:20

==================== Ende vom FRST.txt =====

cosinus 06.01.2017 11:54
Zitat:
Start-Modus: Safe Mode (with Networking)
Wo bitte steht, du sollst in diesem Modus arbeiten :wtf:

pingodoce 06.01.2017 12:07
ich komm da nicht mehr raus. ..
wenn ich msconfig eingebe passiert nix

ok .. habs raus... startet normal. .. ich schick dann die frt nocheinmal

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 01-01-2017
durchgeführt von ms (Administrator) auf DESKTOP-TGSB6RT (06-01-2017 12:01:18)
Gestartet von E:\
Geladene Profile: ms (Verfügbare Profile: defaultuser0 & ms)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
() C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.3.0.0_x86__8wekyb3d8bbwe\Microsoft.StickyNotes.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\asulaunch.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Oberthur Technologies) C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(VoipConnect) C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe
(sw4you) C:\Program Files\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-15] (Synaptics, Inc.)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Certificate Synchronizer] => C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe [86528 2013-12-11] (Oberthur Technologies)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES/MALWAREBYTES/ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-01-05] (AVAST Software)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [VoipConnect] => C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe [38429792 2016-12-05] (VoipConnect)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Winlogon: [Shell] explorer.exe,"C:\Users\ms\AppData\Roaming\assembliesbckp.exe" <==== ACHTUNG
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-01-05] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK [2016-12-12]
ShortcutTarget: Hardcopy.LNK -> C:\Program Files\Hardcopy\hardcopy.exe (sw4you)
BootExecute: autocheck autochk * aswBoot.exe /M:c0481c9 /dir:"C:\Program Files\AVAST Software\Avast"
GroupPolicy: Beschränkung ? <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41473946-22be-44ae-b33f-b20026900a39}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bbbf93ff-9366-4c55-9a2b-55f0e0be0617}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-18] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 05qspcpa.default
FF ProfilePath: C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default [2017-01-06]
FF NewTab: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Extension: (Firebug) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\firebug@software.joehewitt.com.xpi [2016-10-11]
FF Extension: (FirePHP) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\FirePHPExtension-Build@firephp.org.xpi [2016-04-27]
FF Extension: (Button Snip Dies! für eBay) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2016-12-11]
FF Extension: (Bitdefender QuickScan) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2016-12-11]
FF HKLM\...\Firefox\Extensions: [PKCS11_Firefox@oberthur.com] - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi
FF Extension: (Oberthur Technologies PKCS#11 Module Loader) - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi [2013-11-28] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-05]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2017-01-01] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-01-05] (AVAST Software)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2017-01-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2017-01-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2017-01-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2017-01-05] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2017-01-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2017-01-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2017-01-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2017-01-05] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224752 2017-01-05] (AVAST Software)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59968 2016-12-14] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Datei ist nicht signiert]
R3 GTIPCI21; C:\Windows\system32\DRIVERS\gtipci21.sys [97280 2007-05-09] (Texas Instruments)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [153024 2017-01-04] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-06] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [219072 2017-01-06] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 netwlv32; C:\Windows\System32\drivers\netwlv32.sys [6637056 2016-07-16] (Intel Corporation)
S3 SCR3XX2K; C:\Windows\system32\DRIVERS\SCR3XX2K.sys [63104 2015-02-17] (Identiv)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S0 ElbyVCD; system32\DRIVERS\ElbyVCD.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-06 10:35 - 2017-01-06 10:35 - 00000597 _____ C:\Users\ms\Desktop\JRT.txt
2017-01-06 10:34 - 2017-01-06 12:01 - 00000000 ____D C:\FRST
2017-01-06 10:33 - 2017-01-06 10:34 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-06 09:18 - 2017-01-06 09:19 - 00000000 _____ C:\Recovery.txt
2017-01-06 02:22 - 2017-01-06 02:22 - 00005962 _____ C:\Users\ms\Desktop\tttt.txt
2017-01-06 01:33 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.Vexe
2017-01-06 01:32 - 2017-01-06 01:32 - 00001414 _____ C:\Users\ms\Desktop\eset.txt
2017-01-06 01:26 - 2017-01-06 01:26 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-01-06 01:25 - 2017-01-06 01:25 - 00001552 _____ C:\Users\ms\Desktop\mbam2.txt
2017-01-06 00:42 - 2017-01-06 00:42 - 00003272 _____ C:\Users\ms\Desktop\mbam.txt
2017-01-06 00:30 - 2017-01-06 07:32 - 00000000 ____D C:\ProgramData\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00001074 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\Program Files\RogueKiller
2017-01-06 00:28 - 2017-01-06 00:30 - 34631352 _____ (Adlice Software ) C:\Users\ms\Downloads\setup.exe
2017-01-06 00:16 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.exe
2017-01-06 00:13 - 2017-01-06 00:13 - 00000000 ____D C:\Users\ms\AppData\Local\ESET
2017-01-06 00:12 - 2017-01-06 00:13 - 06771840 _____ (ESET spol. s r.o.) C:\Users\ms\Downloads\esetonlinescanner_enu.exe
2017-01-06 00:09 - 2017-01-06 00:10 - 00005534 _____ C:\Users\ms\Desktop\Rkill.txt
2017-01-06 00:08 - 2017-01-06 00:09 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\ms\Downloads\rkill.com
2017-01-05 19:41 - 2017-01-05 19:41 - 00001197 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-01-05 19:41 - 2017-01-05 19:41 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-01-05 19:38 - 2017-01-05 19:38 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-01-05 19:34 - 2017-01-05 19:34 - 00000000 ____D C:\Users\ms\AppData\Roaming\AVAST Software
2017-01-05 19:31 - 2017-01-05 19:31 - 00002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-01-05 19:31 - 2017-01-05 19:31 - 00002152 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-01-05 19:29 - 2017-01-05 19:30 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00224752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-01-05 19:29 - 2017-01-05 19:28 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-01-05 19:29 - 2017-01-05 19:28 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-01-05 19:28 - 2017-01-05 19:28 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2017-01-05 19:25 - 2017-01-05 19:38 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-05 19:22 - 2017-01-05 19:38 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-05 19:19 - 2017-01-05 19:22 - 06253640 _____ (AVAST Software) C:\Users\ms\Downloads\avast_free_antivirus_setup_online.exe
2017-01-05 19:08 - 2017-01-06 11:30 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-05 19:08 - 2017-01-06 08:43 - 00000000 _RSHD C:\Program Files\Assemblies
2017-01-05 19:07 - 2017-01-06 11:58 - 00000000 ____D C:\Windows\pss
2017-01-04 22:58 - 2017-01-04 22:58 - 00150238 _____ C:\Users\ms\Documents\RNSDG170104072487 1 (2).pdf
2017-01-04 22:38 - 2017-01-04 22:38 - 00153024 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-04 22:37 - 2017-01-06 11:59 - 00219072 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-04 22:37 - 2017-01-06 09:20 - 00087496 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-04 22:37 - 2017-01-06 09:19 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-04 22:37 - 2017-01-06 08:15 - 00073152 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-04 22:37 - 2017-01-04 22:37 - 00002097 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-04 22:37 - 2016-12-14 12:55 - 00059968 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-04 22:34 - 2017-01-04 22:36 - 54199488 _____ (Malwarebytes ) C:\Users\ms\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-04 18:44 - 2017-01-04 18:45 - 00116612 _____ C:\Users\ms\Downloads\boarding-pass.pdf
2017-01-04 18:37 - 2017-01-04 18:37 - 00000000 ____D C:\Users\ms\AppData\Local\ElevatedDiagnostics
2017-01-02 16:27 - 2017-01-02 16:27 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2017-01-02 16:26 - 2017-01-02 16:26 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canneverbe Limited
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Users\ms\AppData\Local\AvgSetupLog
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\ProgramData\Avg
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Program Files\AVG
2017-01-02 16:10 - 2017-01-02 16:13 - 00000000 ____D C:\Users\ms\AppData\Local\Avg
2017-01-02 16:08 - 2017-01-02 16:08 - 00345360 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService.dll
2017-01-02 16:08 - 2017-01-02 16:08 - 00002920 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2017-01-02 15:53 - 2017-01-02 15:53 - 00000000 ____D C:\Users\ms\Downloads\amok27
2017-01-02 14:46 - 2017-01-02 14:46 - 00000000 ____D C:\Users\ms\Documents\AnyDVDHD
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\RedFox
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-01-02 14:36 - 2017-01-02 14:36 - 00000000 ____D C:\Program Files\RedFox
2017-01-02 14:35 - 2017-01-02 14:35 - 00000000 ____D C:\Users\ms\Downloads\A996
2017-01-02 13:32 - 2017-01-02 16:33 - 00000043 ___SH C:\ProgramData\.zreglib
2017-01-02 13:32 - 2017-01-02 13:33 - 00000000 ____D C:\ProgramData\Elaborate Bytes
2017-01-02 13:31 - 2017-01-06 01:33 - 00000000 _RSHD C:\ProgramData\Assemblies
2017-01-02 13:31 - 2017-01-02 13:31 - 00000000 _RSHD C:\Users\ms\AppData\Roaming\Assemblies
2017-01-02 13:29 - 2017-01-02 13:29 - 01110564 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604.exe
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\Program Files\7-Zip
2017-01-02 13:28 - 2017-01-02 13:28 - 01381582 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604-x64.exe
2017-01-02 13:06 - 2017-01-02 13:06 - 00001180 _____ C:\Users\ms\Desktop\Die Installation von Java fortsetzen.lnk
2017-01-02 12:48 - 2017-01-02 17:59 - 00000000 ____D C:\Program Files\Elaborate Bytes
2016-12-31 16:36 - 2016-12-31 16:36 - 00085590 _____ C:\Users\ms\Desktop\s-l1601.jpg
2016-12-31 16:35 - 2016-12-31 16:35 - 00264105 _____ C:\Users\ms\Desktop\s-l1600.jpg
2016-12-30 16:21 - 2016-12-30 16:21 - 00394682 _____ C:\Users\ms\Documents\Rudolf stoehr rp tavanic 2016.oxps
2016-12-29 18:47 - 2016-12-29 18:47 - 00010777 _____ C:\Users\ms\Documents\Maria Luiza da Silva Kündigung MOVE.docx
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagwrn.xml
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagerr.xml
2016-12-24 13:36 - 2016-12-24 13:36 - 02496120 _____ C:\Users\ms\Documents\kleiner lovenox.oxps
2016-12-24 11:19 - 2016-12-24 11:19 - 02558985 _____ C:\Users\ms\Documents\Kleiner Targin u Nolotil 2.oxps
2016-12-24 11:18 - 2016-12-24 11:18 - 02495274 _____ C:\Users\ms\Documents\Kleiner Targin u. Nolotil.oxps
2016-12-22 16:14 - 2017-01-05 20:28 - 00000000 ____D C:\Users\ms\AppData\Local\CrashDumps
2016-12-21 14:32 - 2017-01-06 11:34 - 00912862 _____ C:\Windows\system32\prfh0816.dat
2016-12-21 14:32 - 2017-01-06 11:34 - 00264906 _____ C:\Windows\system32\prfc0816.dat
2016-12-21 14:32 - 2016-12-24 11:31 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT
2016-12-21 14:32 - 2016-12-21 14:32 - 00341016 _____ C:\Windows\system32\prfi0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00042642 _____ C:\Windows\system32\prfd0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\pt
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\pt-PT
2016-12-20 22:43 - 2016-07-15 18:45 - 05032448 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0816.dll
2016-12-20 22:43 - 2016-07-15 18:42 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0816.dll
2016-12-20 22:43 - 2016-07-15 18:38 - 04384256 _____ (Microsoft Corporation) C:\Windows\system32\MLS6.dll
2016-12-20 22:25 - 2016-12-20 22:25 - 00001051 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-12-19 10:59 - 2016-12-19 11:05 - 200982907 _____ C:\Users\ms\Downloads\SteuerSparErklaerung_21.37.107.zip
2016-12-19 10:56 - 2016-12-19 10:56 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509(1).exe
2016-12-19 10:49 - 2016-12-19 10:49 - 00000000 ____D C:\Windows\tiinst
2016-12-19 10:11 - 2016-12-19 10:17 - 07086792 _____ (Hewlett Packard Company ) C:\Users\ms\Downloads\sp33439.exe
2016-12-18 22:13 - 2016-12-18 22:23 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509.exe
2016-12-18 21:51 - 2016-12-18 21:51 - 00000386 _____ C:\Users\ms\Documents\dr scheuber carvoeiro.xml
2016-12-18 21:33 - 2016-12-18 21:33 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\Roaming\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Oracle
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Program Files\Java
2016-12-18 19:40 - 2016-12-18 19:40 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111(1).exe
2016-12-18 19:39 - 2016-12-18 19:39 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111.exe
2016-12-18 19:38 - 2016-12-18 19:38 - 00000000 ____D C:\Users\ms\Downloads\gnucrawlandmap
2016-12-18 19:37 - 2016-12-18 19:37 - 00045304 _____ C:\Users\ms\Downloads\gnucrawlandmap.zip
2016-12-18 19:23 - 2016-12-18 19:23 - 00000000 ____D C:\Users\ms\AppData\Roaming\FileZilla Server
2016-12-18 19:22 - 2016-12-18 19:22 - 02238848 _____ (FileZilla Project) C:\Users\ms\Downloads\FileZilla_Server-0_9_59.exe
2016-12-17 23:48 - 2016-12-17 23:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-12-16 12:26 - 2016-12-16 12:26 - 00011487 _____ C:\Users\ms\Documents\Certificate of good standing Schleswig.docx
2016-12-16 12:19 - 2016-12-16 12:20 - 00192368 _____ C:\Users\ms\Downloads\DHL-Marke-VW27MH7RND.pdf
2016-12-16 11:46 - 2016-12-16 11:46 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-12-16 10:39 - 2012-04-16 05:00 - 00314880 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2016-12-16 09:38 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-15 19:39 - 2016-12-15 19:39 - 01960776 _____ (SCM Microsystems ) C:\Users\ms\Downloads\SCR3_DriversOnly_V8.41.exe
2016-12-15 19:39 - 2016-12-15 19:39 - 00000880 _____ C:\Windows\HBCIKRNL.INI
2016-12-15 19:39 - 2016-12-15 19:39 - 00000000 ____D C:\Program Files\SCM Microsystems
2016-12-15 19:32 - 2016-12-15 19:33 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS(1).msi
2016-12-15 19:29 - 2016-12-15 19:29 - 07645416 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp47728.exe
2016-12-15 19:25 - 2016-12-15 19:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2016-12-15 19:18 - 2016-12-15 19:18 - 00000107 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-15 19:18 - 2016-12-15 19:18 - 00000000 ____D C:\Users\ms\AppData\Roaming\MedicineOne
2016-12-14 00:40 - 2016-12-09 11:14 - 06019936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-14 00:40 - 2016-12-09 11:09 - 00133296 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-14 00:40 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-14 00:40 - 2016-12-09 11:00 - 00523784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 00:40 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-14 00:40 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-14 00:40 - 2016-12-09 10:52 - 01344992 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 00:40 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 00:40 - 2016-12-09 10:37 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-14 00:40 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-12-14 00:40 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-14 00:40 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-14 00:40 - 2016-12-09 10:22 - 03776000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-14 00:40 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 01235456 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-14 00:40 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-14 00:40 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-14 00:40 - 2016-09-15 17:53 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 01415520 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 00115552 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-14 00:39 - 2016-12-09 11:16 - 00890984 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-14 00:39 - 2016-12-09 11:16 - 00784064 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-14 00:39 - 2016-12-09 11:12 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-14 00:39 - 2016-12-09 11:10 - 00583136 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 01897824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00551264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00342880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-14 00:39 - 2016-12-09 11:00 - 00117720 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 00:39 - 2016-12-09 10:55 - 00198496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-14 00:39 - 2016-12-09 10:52 - 01413664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-14 00:39 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-14 00:39 - 2016-12-09 10:37 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-14 00:39 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-14 00:39 - 2016-12-09 10:35 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-14 00:39 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-14 00:39 - 2016-12-09 10:28 - 01284096 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-14 00:39 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 00:39 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 00:39 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-14 00:39 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-14 00:39 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-14 00:39 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 22:36 - 2016-12-13 22:36 - 00001052 _____ C:\Users\Public\Desktop\ISO to USB.lnk
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\Program Files\ISO to USB
2016-12-13 22:35 - 2016-12-13 22:36 - 01733751 _____ (isotousb.com ) C:\Users\ms\Downloads\isotousb_setup.exe
2016-12-13 22:22 - 2016-12-13 22:26 - 00000000 ____D C:\Users\ms\Downloads\windows 10 usb
2016-12-13 20:20 - 2016-12-13 20:20 - 00000000 __SHD C:\RECYCLER
2016-12-13 15:36 - 2016-12-16 11:46 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canon
2016-12-13 15:35 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMXLMAD.DLL
2016-12-13 15:33 - 2016-12-13 15:33 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 15:32 - 2016-12-13 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-13 15:32 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMLMAD.DLL
2016-12-13 15:32 - 2010-03-11 08:56 - 00180224 _____ (CANON INC.) C:\Windows\system32\CNMIUAD.DLL
2016-12-13 15:31 - 2016-12-13 15:32 - 23940240 _____ C:\Users\ms\Downloads\mp68-win-mg5100-1_02-ea24.exe
2016-12-13 15:30 - 2016-12-13 15:30 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24.exe
2016-12-13 15:28 - 2016-12-13 15:28 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24(1).exe
2016-12-13 15:17 - 2016-12-13 15:17 - 00002118 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 4.0.lnk
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\Program Files\Canon
2016-12-13 15:02 - 2016-12-13 15:16 - 49819216 _____ C:\Users\ms\Downloads\mpnx_4_0-win-4_03-ea23_2.exe
2016-12-13 10:22 - 2016-12-13 10:22 - 00001665 _____ C:\Users\ms\Desktop\MED7 Neuer Patient.lnk
2016-12-13 10:20 - 2016-12-13 10:23 - 00000000 ____D C:\Users\ms\Downloads\runasdate
2016-12-13 10:20 - 2016-12-13 10:20 - 00035563 _____ C:\Users\ms\Downloads\runasdate.zip
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Scavenger 3.2
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\Program Files\File Scavenger 3.2
2016-12-12 18:08 - 2016-12-12 18:09 - 01632488 _____ (QueTek Consulting Corporation) C:\Users\ms\Downloads\32fsg32.exe
2016-12-12 15:06 - 2016-12-12 15:07 - 00000000 ____D C:\Program Files\Hardcopy
2016-12-12 15:06 - 2016-12-12 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardcopy - Bildschirmausdruck
2016-12-12 15:06 - 2016-01-28 06:19 - 01720088 _____ (www.sw4you.de Siegfried Weckmann) C:\Windows\SwSetupu.exe
2016-12-12 14:58 - 2016-12-12 15:05 - 07108168 _____ C:\Users\ms\Downloads\hc.exe
2016-12-12 14:21 - 2016-12-12 14:21 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-12 11:21 - 2016-12-12 11:21 - 00000000 ____D C:\Users\ms\AppData\Local\PeerDistRepub
2016-12-12 09:54 - 2016-12-12 09:54 - 00000000 ____D C:\ProgramData\ODIR
2016-12-11 23:47 - 2016-12-11 23:47 - 00000000 ____D C:\temp
2016-12-11 23:46 - 2016-12-11 23:47 - 00000000 ____D C:\Users\ms\AppData\Roaming\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00001262 _____ C:\Users\ms\Desktop\VoipConnect.lnk
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\Program Files\VoipConnect.com
2016-12-11 23:45 - 2016-12-11 23:46 - 07289336 _____ (Finarea S.A. Switzerland ) C:\Users\ms\Downloads\SetupVoipConnect-voipbuster.exe
2016-12-11 23:28 - 2017-01-02 14:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Adobe
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Local\CEF
2016-12-11 23:12 - 2016-12-15 09:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Adobe
2016-12-11 23:11 - 2016-12-11 23:17 - 00000000 ____D C:\ProgramData\Adobe
2016-12-11 23:10 - 2016-12-11 23:30 - 00000000 ____D C:\Users\ms\AppData\Local\Adobe
2016-12-11 23:07 - 2016-12-11 22:46 - 02219540 _____ (Vaita ) C:\Users\ms\Downloads\ODIR.exe
2016-12-11 23:07 - 2016-11-20 20:10 - 00042050 _____ C:\Users\ms\Downloads\Kuendigungsschreiben_1411-3956-1650-75.pdf
2016-12-11 23:07 - 2016-10-05 21:51 - 08244656 _____ (Piriform Ltd) C:\Users\ms\Downloads\ccsetup522.exe
2016-12-11 23:07 - 2016-09-16 21:33 - 02907822 _____ C:\Users\ms\Downloads\skriptum-wolfgang-aufermann.pdf
2016-12-11 23:07 - 2016-09-12 23:38 - 02254413 _____ (Dr. Olaf Jacobsen ) C:\Users\ms\Downloads\cmsetup.exe
2016-12-11 23:07 - 2016-09-12 23:23 - 00000920 _____ C:\Users\ms\Downloads\datev07.cer
2016-12-11 23:07 - 2016-09-02 16:34 - 02536914 _____ C:\Users\ms\Downloads\ebook.pdf
2016-12-11 23:07 - 2016-08-30 15:40 - 00094057 _____ C:\Users\ms\Downloads\faturaRecibo_41.pdf
2016-12-11 23:07 - 2016-08-27 21:44 - 00347648 _____ C:\Users\ms\Downloads\document.pdf
2016-12-11 23:07 - 2016-08-04 23:44 - 00853491 _____ C:\Users\ms\Downloads\PBBooking 3.x Docs.pdf
2016-12-11 23:07 - 2016-07-05 13:35 - 224073588 _____ C:\Users\ms\Downloads\Med7v806.exe
2016-12-11 23:07 - 2016-05-04 08:17 - 01098961 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1514.exe
2016-12-11 23:07 - 2016-03-26 21:46 - 00030723 _____ C:\Users\ms\Downloads\mysql.tar.gz
2016-12-11 23:07 - 2016-03-26 21:46 - 00000120 _____ C:\Users\ms\Downloads\files.tar.gz
2016-12-11 23:07 - 2016-03-14 22:00 - 00000053 _____ C:\Users\ms\Downloads\googlef3d513425c3c6eb5.html
2016-12-11 23:07 - 2016-01-14 23:39 - 02122336 _____ (Irfan Skiljan) C:\Users\ms\Downloads\iview441_setup.exe
2016-12-11 23:07 - 2015-11-04 23:53 - 00001257 _____ C:\Users\ms\Downloads\index.php
2016-12-11 23:07 - 2015-07-23 11:17 - 00036562 _____ C:\Users\ms\Downloads\Herz.jpg
2016-12-11 23:07 - 2015-02-10 22:10 - 167180781 _____ C:\Users\ms\Downloads\Med7voll.exe
2016-12-11 23:07 - 1997-11-28 21:08 - 00018944 _____ (Corel Corporation) C:\Users\ms\Downloads\Install.exe
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ODIR
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\Program Files\ODIR
2016-12-11 22:47 - 2000-12-05 23:00 - 00209608 _____ (Microsoft Corporation) C:\Windows\system32\Tabctl32.ocx
2016-12-11 22:47 - 1999-03-26 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-11 22:19 - 2016-12-15 19:39 - 00000000 ____D C:\Windows\Downloaded Installations
2016-12-11 21:33 - 2016-12-11 21:33 - 00000000 ____D C:\Users\ms\AppData\Local\Dropbox
2016-12-11 21:32 - 2016-12-11 21:33 - 00688536 _____ (Dropbox, Inc.) C:\Users\ms\Downloads\DropboxInstaller.exe
2016-12-11 21:24 - 2016-12-11 21:24 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-11 21:24 - 2016-12-11 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-11 21:23 - 2016-12-11 21:24 - 00000000 ____D C:\Program Files\CCleaner
2016-12-11 21:14 - 2016-12-11 21:33 - 00000000 ____D C:\Program Files\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Users\ms\AppData\Local\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Program Files\GUM5B71.tmp
2016-12-11 20:52 - 2016-12-11 20:52 - 00000000 ____D C:\Users\ms\AppData\Roaming\hpqLog
2016-12-11 20:37 - 2016-12-19 10:18 - 00000000 ____D C:\SWSETUP
2016-12-11 19:50 - 2016-12-11 20:10 - 00000000 ____D C:\Users\ms\AppData\Local\Diagnostics
2016-12-11 19:35 - 2016-12-11 19:35 - 00000017 _____ C:\Users\ms\AppData\Local\resmon.resmoncfg
2016-12-11 18:41 - 2016-12-11 18:41 - 00066496 _____ C:\Users\ms\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 18:16 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00448864 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-11 18:16 - 2016-11-11 09:00 - 01725136 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 01586736 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 00292192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-11 18:16 - 2016-11-11 08:59 - 00106336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-11 18:16 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-11 18:16 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-11 18:16 - 2016-11-11 08:46 - 00186720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-11 18:16 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00355680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-11 18:16 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00313088 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-12-11 18:16 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-11 18:16 - 2016-11-11 08:41 - 01384704 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00802608 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00675568 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-11 18:16 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-11 18:16 - 2016-11-11 08:37 - 00381720 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-11 18:16 - 2016-11-11 08:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-11 18:16 - 2016-11-11 08:29 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-11 18:16 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-11 18:16 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-11 18:16 - 2016-11-11 08:24 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-11 18:16 - 2016-11-11 08:22 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-11 18:16 - 2016-11-11 08:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-11 18:16 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00384512 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-11 18:16 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-11 18:16 - 2016-11-11 08:18 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-11 18:16 - 2016-11-11 08:16 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-11 18:16 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01722368 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-11 18:16 - 2016-11-11 08:12 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00786432 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-11 18:16 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01948160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01136128 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-11 18:16 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-11 18:16 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00920576 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00706048 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-11 18:16 - 2016-11-11 08:02 - 00612352 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-11 18:16 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-12-11 18:16 - 2016-11-02 12:23 - 01073816 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-11 18:16 - 2016-11-02 12:23 - 00945760 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-11 18:16 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-12-11 18:16 - 2016-11-02 12:21 - 01957216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-12-11 18:16 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-12-11 18:16 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-12-11 18:16 - 2016-11-02 12:06 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-12-11 18:16 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-12-11 18:16 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-12-11 18:16 - 2016-11-02 12:00 - 00042336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-12-11 18:16 - 2016-11-02 11:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-12-11 18:16 - 2016-11-02 11:53 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-12-11 18:16 - 2016-11-02 11:51 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-12-11 18:16 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-12-11 18:16 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-12-11 18:16 - 2016-11-02 11:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\AuthExt.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-12-11 18:16 - 2016-11-02 11:38 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-12-11 18:16 - 2016-11-02 11:36 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-12-11 18:16 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-12-11 18:16 - 2016-11-02 11:33 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-12-11 18:16 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 01056768 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03595776 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-12-11 18:16 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-12-11 18:16 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls
2016-12-11 18:16 - 2016-10-28 04:11 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-11 18:16 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-12-11 18:16 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-12-11 18:16 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-12-11 18:16 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-12-11 18:16 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-12-11 18:16 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-12-11 18:16 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-11 18:16 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-12-11 18:16 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-12-11 18:16 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-12-11 18:16 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-12-11 18:16 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-12-11 18:16 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-12-11 18:16 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-11 18:16 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-12-11 18:16 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-12-11 18:16 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-12-11 18:16 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-12-11 18:16 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-12-11 18:16 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-12-11 18:16 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-12-11 18:16 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-12-11 18:16 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-12-11 18:16 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-12-11 18:16 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-12-11 18:16 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-12-11 18:16 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-12-11 18:16 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-12-11 18:16 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-12-11 18:16 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2016-12-11 18:16 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll

pingodoce 06.01.2017 12:15
Code:
Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-12-11 18:16 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2016-12-11 18:16 - 2016-10-05 10:23 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-12-11 18:16 - 2016-10-05 10:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2016-12-11 18:16 - 2016-10-05 10:22 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00498176 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-12-11 18:16 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-12-11 18:16 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-11 18:16 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-12-11 18:16 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-12-11 18:16 - 2016-10-05 10:11 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-12-11 18:16 - 2016-10-05 10:10 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 01700864 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2016-12-11 18:16 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00608256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-12-11 18:16 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-12-11 18:16 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-11 18:16 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00320152 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-12-11 18:16 - 2016-09-15 18:36 - 00021344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-12-11 18:16 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-12-11 18:16 - 2016-09-15 18:32 - 00279416 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2016-12-11 18:16 - 2016-09-15 18:27 - 00868704 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-12-11 18:16 - 2016-09-15 18:26 - 00581672 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-12-11 18:16 - 2016-09-15 18:23 - 00170448 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2016-12-11 18:16 - 2016-09-15 18:21 - 00557920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-12-11 18:16 - 2016-09-15 18:20 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2016-12-11 18:16 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-12-11 18:16 - 2016-09-15 18:17 - 00125792 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-12-11 18:16 - 2016-09-15 18:16 - 00093984 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2016-12-11 18:16 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-12-11 18:16 - 2016-09-15 18:06 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-12-11 18:16 - 2016-09-15 18:00 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-12-11 18:16 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 03716096 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00823808 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00265728 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-12-11 18:16 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2016-12-11 18:16 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-12-11 18:16 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-12-11 18:16 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2016-12-11 18:16 - 2016-09-15 17:46 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2016-12-11 18:16 - 2016-09-15 17:45 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00734208 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-12-11 18:16 - 2016-09-15 17:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-12-11 18:16 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-12-11 18:16 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 01438720 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2016-12-11 18:16 - 2016-09-07 06:35 - 00315736 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-12-11 18:16 - 2016-09-07 06:33 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-11 18:16 - 2016-09-07 06:29 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-12-11 18:16 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-12-11 18:16 - 2016-09-07 06:18 - 00290264 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00782176 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00509792 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-12-11 18:16 - 2016-09-07 06:16 - 00589144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-12-11 18:16 - 2016-09-07 06:16 - 00399712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-11 18:16 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-12-11 18:16 - 2016-09-07 06:13 - 00432328 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2016-12-11 18:16 - 2016-09-07 06:12 - 00321792 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-12-11 18:16 - 2016-09-07 06:07 - 00043944 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-11 18:16 - 2016-09-07 06:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2016-12-11 18:16 - 2016-09-07 06:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2016-12-11 18:16 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00392704 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-11 18:16 - 2016-09-07 05:51 - 06534656 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-12-11 18:16 - 2016-09-07 05:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 02318336 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 01774080 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-12-11 18:16 - 2016-09-07 05:45 - 05398016 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 01842688 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2016-12-11 18:16 - 2016-09-07 05:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-12-11 18:16 - 2016-09-07 05:40 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00895488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-12-11 18:16 - 2016-09-07 05:37 - 00640000 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-12-11 18:16 - 2016-09-07 05:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 04557824 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00860672 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-12-11 18:16 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-12-11 18:16 - 2016-09-07 05:31 - 00461312 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2016-12-11 18:16 - 2016-09-07 05:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-11 18:16 - 2016-08-27 05:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-12-11 18:16 - 2016-08-27 05:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-12-11 18:16 - 2016-08-20 06:49 - 00092000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-12-11 18:16 - 2016-08-20 06:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-12-11 18:16 - 2016-08-20 06:12 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-12-11 18:16 - 2016-08-20 06:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-12-11 18:16 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-12-11 18:16 - 2016-08-20 06:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-12-11 18:16 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-12-11 18:16 - 2016-08-20 05:59 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-12-11 18:16 - 2016-08-20 05:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-12-11 18:16 - 2016-08-20 05:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-12-11 18:16 - 2016-08-09 03:13 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-12-11 18:16 - 2016-08-06 05:26 - 00036704 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-12-11 18:16 - 2016-08-06 05:22 - 00173408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-12-11 18:16 - 2016-08-06 05:16 - 00798504 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-11 18:16 - 2016-08-06 05:15 - 00292184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-12-11 18:16 - 2016-08-06 05:14 - 00145248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-11 18:16 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-12-11 18:16 - 2016-08-06 05:06 - 00023776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-11 18:16 - 2016-08-06 05:03 - 01343928 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-12-11 18:16 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-12-11 18:16 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-11 18:16 - 2016-08-06 04:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-12-11 18:16 - 2016-08-06 04:48 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-12-11 18:16 - 2016-08-06 04:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-12-11 18:16 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-12-11 18:16 - 2016-08-06 04:46 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-12-11 18:16 - 2016-08-06 04:45 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-12-11 18:16 - 2016-08-06 04:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-12-11 18:16 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-12-11 18:16 - 2016-08-06 04:37 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-12-11 18:16 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-12-11 18:16 - 2016-08-06 04:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-12-11 18:16 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-12-11 18:16 - 2016-08-06 04:25 - 01997824 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-12-11 18:16 - 2016-08-06 04:23 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-12-11 18:16 - 2016-08-05 10:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-12-11 18:16 - 2016-08-05 09:54 - 00564488 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-12-11 18:16 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-12-11 18:16 - 2016-08-05 09:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-12-11 18:16 - 2016-08-05 09:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-12-11 18:16 - 2016-08-02 05:47 - 00094528 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-12-11 18:16 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-12-11 18:16 - 2016-07-22 02:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2016-12-11 18:15 - 2016-11-11 08:45 - 00261984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-11 18:15 - 2016-11-11 08:45 - 00175968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-11 18:15 - 2016-11-11 08:26 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-11 18:15 - 2016-11-11 08:25 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-11 18:15 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-11 18:15 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-11 18:15 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-11 18:15 - 2016-11-11 08:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-11 18:15 - 2016-11-11 08:15 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-11 18:15 - 2016-11-11 08:06 - 01602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-11 18:15 - 2016-11-02 12:21 - 00570720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-12-11 18:15 - 2016-11-02 12:09 - 00544088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-12-11 18:15 - 2016-11-02 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-12-11 18:15 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-12-11 18:15 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-12-11 18:15 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 01026400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00496992 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00192864 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-12-11 18:15 - 2016-10-15 05:40 - 01126496 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-12-11 18:15 - 2016-10-15 05:27 - 00421216 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-12-11 18:15 - 2016-10-15 05:18 - 00458592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-12-11 18:15 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-12-11 18:15 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-12-11 18:15 - 2016-10-15 04:55 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-12-11 18:15 - 2016-10-15 04:54 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-12-11 18:15 - 2016-10-15 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-12-11 18:15 - 2016-10-15 04:43 - 00500736 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-12-11 18:15 - 2016-10-05 11:10 - 00231776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-12-11 18:15 - 2016-10-05 10:53 - 00154976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-12-11 18:15 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2016-12-11 18:15 - 2016-10-05 10:46 - 00056672 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2016-12-11 18:15 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-12-11 18:15 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00614752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2016-12-11 18:15 - 2016-09-15 18:42 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2016-12-11 18:15 - 2016-09-15 18:00 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-12-11 18:15 - 2016-09-15 17:58 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-12-11 18:15 - 2016-09-15 17:55 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2016-12-11 18:15 - 2016-09-15 17:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2016-12-11 18:15 - 2016-09-15 17:52 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-12-11 18:15 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-12-11 18:15 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2016-12-11 18:15 - 2016-09-07 06:13 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2016-12-11 18:15 - 2016-09-07 05:54 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-12-11 18:15 - 2016-08-20 06:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-12-11 18:14 - 2010-03-18 19:25 - 00307200 _____ (CANON INC.) C:\Windows\system32\CNC5100L.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 01335296 _____ (CANON INC.) C:\Windows\system32\CNC5100C.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 00114688 _____ (CANON INC.) C:\Windows\system32\CNC5100I.dll
2016-12-11 18:14 - 2010-03-18 17:11 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC5100U.dll
2016-12-11 18:14 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\system32\CNHMCA.dll
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\Program Files\Microsoft
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-12-11 15:11 - 2016-12-20 17:01 - 00000000 ____D C:\Program Files\Kingston_SSD_Manager
2016-12-11 15:11 - 2016-12-11 15:11 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-11 15:02 - 2016-12-11 15:10 - 63327456 _____ (Kingston Digital, Inc ) C:\Users\ms\Downloads\KSM_setup_1.0.1.3.exe
2016-12-11 13:35 - 2016-12-11 13:35 - 00000000 ____D C:\Users\ms\AppData\Roaming\Identities
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AWP
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\Program Files\Oberthur Technologies
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 __HDC C:\ProgramData\{F9068F7D-ADD2-4370-8E57-E5C54FAD3F79}
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 ____D C:\Users\ms\AppData\Local\MedicineOne
2016-12-11 03:19 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-12-11 03:19 - 2016-12-11 03:19 - 00001280 _____ C:\Users\Public\Desktop\My MedicineOne.lnk
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MedicineOne
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MSBuild
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MedicineOne
2016-12-11 03:19 - 2016-12-01 13:45 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS.msi
2016-12-11 03:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-12-11 02:58 - 2016-12-11 02:58 - 00000458 __RSH C:\ProgramData\ntuser.pol
2016-12-11 02:42 - 2016-12-11 02:42 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-10 18:23 - 2016-12-10 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-12-10 18:22 - 2016-12-10 18:25 - 00000000 ____D C:\Program Files\Microsoft Works
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2016-12-10 13:29 - 2016-12-10 18:20 - 00000000 ____D C:\Windows\SHELLNEW
2016-12-10 13:20 - 2016-12-10 13:20 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft Help
2016-12-10 13:16 - 2016-12-25 18:09 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-10 13:15 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-10 13:06 - 2016-12-10 13:06 - 00000000 __RHD C:\MSOCache
2016-12-10 11:40 - 2016-12-13 22:34 - 00000000 ____D C:\Windows\system32\MRT
2016-12-10 11:38 - 2016-12-13 22:32 - 133430776 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-10 11:34 - 2016-12-10 11:34 - 00000000 ____D C:\Users\ms\AppData\Local\Programs
2016-12-10 11:22 - 2016-12-10 11:34 - 00000220 _____ C:\Users\ms\Downloads\results.txt
2016-12-10 11:22 - 2016-12-10 11:27 - 00002503 _____ C:\HCT.Log
2016-12-10 11:21 - 2016-12-16 16:34 - 00000000 ____D C:\Program Files\SpeedFan
2016-12-10 11:21 - 2016-12-10 11:21 - 00001038 _____ C:\Users\ms\Desktop\SpeedFan.lnk
2016-12-10 11:21 - 2016-12-10 11:21 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2016-12-10 11:21 - 2016-12-10 11:21 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-12-10 11:14 - 2016-12-10 11:15 - 00000158 _____ C:\Users\ms\Downloads\prime.txt
2016-12-10 11:14 - 2016-12-10 11:14 - 00000100 _____ C:\Users\ms\Downloads\local.txt
2016-12-10 11:13 - 2016-12-10 11:13 - 00000000 ____D C:\Users\ms\AppData\Local\Downloaded Installations
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:19 - 2017-01-06 12:01 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Mozilla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\joomla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\homepage Datenbank backup
2016-12-10 10:19 - 2016-12-10 10:34 - 00000000 ____D C:\Users\ms\AppData\Local\Mozilla
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\homepage AKEEBA
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\FOBI BERLIN
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\AppData\Roaming\Mozilla
2016-12-10 10:18 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-10 10:18 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\DJI_WIN_Driver_Installer
2016-12-10 10:18 - 2016-12-10 10:18 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-10 10:18 - 2016-12-10 10:18 - 00001178 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-10 10:14 - 2016-12-10 10:18 - 00000000 ____D C:\Users\ms\Downloads\Ant Videos
2016-12-10 10:10 - 2017-01-06 01:33 - 00000000 ____D C:\Users\ms\Downloads\android apk
2016-12-10 10:09 - 2016-10-18 20:58 - 00007113 _____ C:\Users\ms\Downloads\sitemap.xml
2016-12-10 10:09 - 2016-10-05 09:25 - 00004574 _____ C:\Users\ms\Downloads\subscribers_list_0_2016.30.09.csv
2016-12-10 10:09 - 2016-08-10 18:07 - 54811422 _____ C:\Users\ms\Downloads\site-www.dr-scheuber-carvoeiro.com-20160810-185738.jpa
2016-12-10 09:56 - 2017-01-03 15:42 - 00000000 ____D C:\Users\ms\Documents\Dokumente Privat
2016-12-10 09:54 - 2017-01-02 21:39 - 00000000 ____D C:\Users\ms\Documents\Dokumente Praxis
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\Documents\dokumente knie
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Temp
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Program Files\AuthenTec
2016-12-10 09:53 - 2016-12-19 10:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-10 09:53 - 2016-12-11 20:52 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Windows\QLB
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\ms\Downloads\Neuer Ordner
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-10-25 12:26 - 00288059 _____ C:\Users\ms\Desktop\Diploma I.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00465616 _____ C:\Users\ms\Desktop\certificado Bahrain.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00397695 _____ C:\Users\ms\Desktop\certificado Roland Klinik.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00362311 _____ C:\Users\ms\Desktop\Diploma.pdf
2016-12-10 09:53 - 2016-08-15 09:21 - 00128468 _____ C:\Users\ms\Desktop\elke2.png
2016-12-10 09:53 - 2016-08-13 20:10 - 00019777 _____ C:\Users\ms\Desktop\elke2.eld
2016-12-10 09:53 - 2016-05-03 01:10 - 00621681 _____ C:\Users\ms\Desktop\adresse jpg.jpg
2016-12-10 09:53 - 2016-05-02 14:48 - 00725526 _____ C:\Users\ms\Desktop\briefkopf neu.bmp
2016-12-10 09:53 - 2016-05-02 14:44 - 00028857 _____ C:\Users\ms\Desktop\briefkopf neu.jpg
2016-12-10 09:53 - 2009-04-29 07:46 - 00015872 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\system32\Drivers\HpqKbFiltr.sys
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 ____R (Hewlett-Packard Company) C:\Windows\system32\BttnCmn.dll
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\system32\BttnCmns.dll
2016-12-10 09:53 - 2006-11-02 06:09 - 01419232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01005.dll
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med7
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med wh
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\JP_HealthCare
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\Fotos Praxis
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\EBAY
2016-12-10 09:52 - 2016-08-15 11:12 - 00460009 _____ C:\Users\ms\Desktop\npl zum teil ausgefuellt.pdf
2016-12-10 09:52 - 2016-08-13 18:10 - 00107041 _____ C:\Users\ms\Desktop\elke3.png
2016-12-10 09:52 - 2016-05-12 16:12 - 00003407 _____ C:\Users\ms\Desktop\IRS2015
2016-12-10 09:52 - 2015-12-26 03:08 - 00001154 _____ C:\Users\ms\Desktop\IsoBuster.lnk
2016-12-10 09:52 - 2015-11-05 22:57 - 00004781 _____ C:\Users\ms\Desktop\farmaciaservico.png
2016-12-10 09:52 - 2015-09-27 15:07 - 00040814 _____ C:\Users\ms\Desktop\map.pdf
2016-12-10 09:52 - 2014-05-15 18:47 - 00582144 _____ C:\Users\ms\Desktop\Kopie von Scheuber.xls
2016-12-10 09:52 - 2014-03-07 21:48 - 03582301 _____ (Adobe Systems, Inc.) C:\Users\ms\Desktop\lantus_dosisfinder_05_080422_KO.exe
2016-12-10 09:52 - 2011-09-21 21:16 - 01676610 _____ C:\Users\ms\Desktop\PDF-Datei Hilfe.pdf
2016-12-10 09:51 - 2016-12-11 20:43 - 00000000 ____D C:\Program Files\Analog Devices
2016-12-10 09:50 - 2016-12-10 09:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf
2016-12-10 09:49 - 2016-12-10 09:49 - 00000000 ____D C:\Program Files\Synaptics
2016-12-10 09:48 - 2016-12-10 09:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-10 09:28 - 2016-12-10 10:11 - 00000000 ____D C:\Users\ms\AppData\Local\MicrosoftEdge
2016-12-10 09:27 - 2016-12-10 09:27 - 00000000 ____D C:\Users\ms\AppData\Local\NetworkTiles
2016-12-10 09:26 - 2016-12-10 09:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-12-10 09:25 - 2016-12-18 23:38 - 00000000 ___SD C:\Users\ms\AppData\LocalLow\Microsoft
2016-12-10 09:23 - 2017-01-06 11:34 - 04005350 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-10 07:06 - 2016-12-10 07:06 - 00000000 ____D C:\Users\ms\AppData\Local\Comms
2016-12-10 07:00 - 2016-12-10 07:00 - 00002378 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-10 07:00 - 2016-12-10 07:00 - 00000000 ___RD C:\Users\ms\OneDrive
2016-12-10 06:33 - 2016-12-10 06:33 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-10 06:25 - 2016-12-10 06:25 - 00000000 ____D C:\Users\ms\AppData\Local\Publishers
2016-12-10 06:12 - 2017-01-06 12:02 - 00000000 ____D C:\Users\ms\AppData\Local\Temp
2016-12-10 06:12 - 2017-01-06 11:58 - 02883584 ____H C:\Users\ms\NTUSER.DAT
2016-12-10 06:12 - 2017-01-06 11:30 - 00000000 ____D C:\Users\ms
2016-12-10 06:12 - 2017-01-06 10:35 - 00000000 ___RD C:\Users\ms\Desktop
2016-12-10 06:12 - 2017-01-06 08:40 - 00000000 ____D C:\Users\ms\AppData\Local
2016-12-10 06:12 - 2017-01-06 08:17 - 00000000 ____D C:\Users\ms\AppData\Roaming
2016-12-10 06:12 - 2017-01-06 08:15 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 06:12 - 2017-01-06 08:15 - 00065536 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 06:12 - 2017-01-06 01:33 - 00000000 ___RD C:\Users\ms\Downloads
2016-12-10 06:12 - 2017-01-04 22:58 - 00000000 ___RD C:\Users\ms\Documents
2016-12-10 06:12 - 2017-01-02 16:58 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft
2016-12-10 06:12 - 2017-01-02 16:09 - 00000000 ___SD C:\Users\ms\AppData\Roaming\Microsoft
2016-12-10 06:12 - 2017-01-02 12:49 - 00000000 ____D C:\Users\ms\AppData\Local\VirtualStore
2016-12-10 06:12 - 2016-12-22 18:36 - 00000000 ____D C:\Users\ms\AppData\Local\Packages
2016-12-10 06:12 - 2016-12-22 16:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 06:12 - 2016-12-20 22:25 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 06:12 - 2016-12-18 21:41 - 00000000 ____D C:\Users\ms\AppData\LocalLow
2016-12-10 06:12 - 2016-12-13 22:30 - 00000000 ___RD C:\Users\ms\Pictures
2016-12-10 06:12 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Roaming\Adobe
2016-12-10 06:12 - 2016-12-11 22:14 - 00000402 ___SH C:\Users\ms\Documents\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Videos
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Searches
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Saved Games
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Music
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Links
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Favorites
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Contacts
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-10 06:12 - 2016-12-10 09:19 - 00000000 ____D C:\Users\ms\AppData\Local\ConnectedDevicesPlatform
2016-12-10 06:12 - 2016-12-10 06:12 - 00851968 ___SH C:\Users\ms\ntuser.dat.LOG1
2016-12-10 06:12 - 2016-12-10 06:12 - 00655360 ___SH C:\Users\ms\ntuser.dat.LOG2
2016-12-10 06:12 - 2016-12-10 06:12 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 06:12 - 2016-12-10 06:12 - 00003340 ____H C:\Users\defaultuser0\AppData\Local\IconCache.db
2016-12-10 06:12 - 2016-12-10 06:12 - 00000020 ___SH C:\Users\ms\ntuser.ini
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Vorlagen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Startmenü
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\SendTo
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Recent
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Netzwerkumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Lokale Einstellungen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Eigene Dateien
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Druckumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Videos
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Musik
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Bilder
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Cookies
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Verlauf
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Temporary Internet Files
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___HD C:\Users\ms\AppData
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ____D C:\Users\ms\AppData\Local\TileDataLayer
2016-12-10 06:12 - 2016-12-09 14:01 - 00000084 ___SH C:\Users\ms\Downloads\desktop.ini
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 06:06 - 2017-01-05 20:45 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-10 06:03 - 2016-12-10 06:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\packages
2016-12-10 06:02 - 2016-12-10 06:02 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2016-12-10 01:14 - 2016-12-10 01:14 - 00000000 ____D C:\Windows\CSC
2016-12-10 01:01 - 2016-12-10 01:01 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\SendTo
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Recent
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Cookies
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Temporary Internet Files
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0\AppData\LocalLow
2016-12-10 01:00 - 2017-01-06 02:18 - 00262144 ____H C:\Users\defaultuser0\NTUSER.DAT
2016-12-10 01:00 - 2016-12-10 06:12 - 00000000 ____D C:\Users\defaultuser0\AppData\Local
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ___SD C:\Users\defaultuser0\AppData\Roaming\Microsoft
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Microsoft
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00065536 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___RD C:\Users\defaultuser0\Documents
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___HD C:\Users\defaultuser0\AppData
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0
2016-12-10 01:00 - 2016-12-10 01:00 - 00049152 ___SH C:\Users\defaultuser0\ntuser.dat.LOG1
2016-12-10 01:00 - 2016-12-10 01:00 - 00012288 ___SH C:\Users\defaultuser0\ntuser.dat.LOG2
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Videos
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Pictures
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Music
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Links
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Favorites
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Downloads
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Desktop
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\Saved Games
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Temp
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-10 00:55 - 2017-01-06 11:58 - 1445953536 ___SH C:\hiberfil.sys
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 00:53 - 2016-12-10 00:53 - 00047425 _____ C:\Windows\system32\license.rtf
2016-12-09 23:39 - 2016-12-09 23:39 - 00000000 ___HD C:\Program Files\Uninstall Information
2016-12-09 23:37 - 2016-12-09 23:37 - 00000000 ____D C:\ProgramData\USOShared
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00065536 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TM.blf
2016-12-09 23:24 - 2017-01-06 09:18 - 00000000 __SHD C:\Recovery
2016-12-09 23:15 - 2017-01-06 12:01 - 00067584 ____S C:\Windows\bootstat.dat
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:14 - 2017-01-06 12:02 - 00000000 ____D C:\Windows\Prefetch
2016-12-09 23:13 - 2017-01-06 11:59 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-09 23:10 - 2017-01-06 11:35 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-09 23:10 - 2016-12-15 09:23 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-09 23:10 - 2016-12-09 23:11 - 00000000 ____D C:\Windows\ServiceProfiles
2016-12-09 23:10 - 2016-12-09 23:10 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-09 23:09 - 2017-01-06 11:59 - 603979776 ___SH C:\pagefile.sys
2016-12-09 23:09 - 2017-01-06 11:59 - 16777216 ___SH C:\swapfile.sys
2016-12-09 23:09 - 2016-12-15 09:22 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:09 - 2016-12-15 09:22 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:09 - 2016-12-09 23:12 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:05 - 2016-12-13 17:51 - 00000000 __SHD C:\System Volume Information
2016-12-09 23:04 - 2017-01-06 10:34 - 00000000 ____D C:\Windows\Panther

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-06 11:58 - 2016-07-16 03:22 - 00524288 _____ C:\Windows\system32\config\BBI
2017-01-06 11:34 - 2016-07-16 18:27 - 01230398 _____ C:\Windows\system32\perfh007.dat
2017-01-06 11:34 - 2016-07-16 18:27 - 00292530 _____ C:\Windows\system32\perfc007.dat
2017-01-05 23:59 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\NDF
2017-01-05 22:42 - 2016-07-16 09:28 - 00000000 ____D C:\Windows\INF
2017-01-05 16:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\AppReadiness
2017-01-01 01:29 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-31 12:59 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\config
2016-12-30 16:13 - 2015-12-11 22:34 - 00000000 ____D C:\med7net
2016-12-30 16:13 - 2015-12-11 22:32 - 00000000 ____D C:\Med7
2016-12-29 16:50 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\rescache
2016-12-25 16:57 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\Logs
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-US
2016-12-24 11:31 - 2016-07-16 09:19 - 00000000 ____D C:\Windows\CbsTemp
2016-12-24 11:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-22 18:36 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-21 14:32 - 2016-07-16 18:32 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\winrm
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\WCN
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\slmgr
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\en
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\F12
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\MiracastView
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\oobe
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\MUI
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migration
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Com
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Boot
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\IME
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Help
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\apppatch
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Dism
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\servicing
2016-12-20 22:43 - 2016-07-16 18:28 - 00000000 ____D C:\Windows\OCR
2016-12-19 10:50 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-18 21:33 - 2016-07-16 03:22 - 00000000 ____D C:\Program Files\Common Files
2016-12-15 19:09 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-15 09:22 - 2016-07-16 09:30 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\twain_32
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Media
2016-12-12 15:06 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-12 00:56 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-11 22:11 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 __RSD C:\Windows\Fonts
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-HK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\uk-UA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\th-TH
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sl-SI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sk-SK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\setup
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ro-RO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-BR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nb-NO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hr-HR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\he-IL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-CA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ar-SA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Provisioning
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\bcastdvr
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-11 22:10 - 2016-07-16 09:30 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-12-11 21:55 - 2016-07-16 09:30 - 00000167 _____ C:\Windows\win.ini
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-11 12:44 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-12-11 12:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\appcompat
2016-12-11 03:19 - 2016-07-16 03:22 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-11 02:53 - 2016-07-16 09:29 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-12-10 17:09 - 2016-07-16 09:29 - 00000000 __SHD C:\$Recycle.Bin
2016-12-10 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-10 11:37 - 2016-07-16 09:25 - 00006656 _____ C:\Windows\system32\lpcio.dll
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Roaming
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Roaming
2016-12-10 06:12 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public
2016-12-10 06:12 - 2016-07-16 03:22 - 00000000 ___RD C:\Users
2016-12-10 01:16 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\spool
2016-12-10 01:15 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-10 01:06 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Default\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows NT
2016-12-10 00:59 - 2016-07-16 03:22 - 00000000 __RHD C:\Users\Default
2016-12-10 00:38 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Recovery
2016-12-09 23:37 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-09 23:36 - 2016-07-16 03:22 - 00032768 _____ C:\Windows\system32\config\ELAM
2016-12-09 23:34 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\PrintDialog
2016-12-09 23:19 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-09 23:04 - 2016-07-16 09:30 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-06 00:16 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.exe
2017-01-06 01:33 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp1.Vexe
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-11 19:35 - 2016-12-11 19:35 - 0000017 _____ () C:\Users\ms\AppData\Local\resmon.resmoncfg
2017-01-02 13:32 - 2017-01-02 16:33 - 0000043 ___SH () C:\ProgramData\.zreglib
2016-12-15 19:18 - 2016-12-15 19:18 - 0000107 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Einige Dateien in TEMP:
====================
C:\Users\ms\AppData\Local\Temp\dllnt_dump.dll
C:\Users\ms\AppData\Local\Temp\keygen.exe
C:\Users\ms\AppData\Local\Temp\svhost.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 11:20

==================== Ende vom FRST.txt ============================
so... alles besser nun

cosinus 06.01.2017 12:19
addition.txt?

pingodoce 06.01.2017 12:22
FRST Additions Logfile:
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 01-01-2017
durchgeführt von ms (06-01-2017 12:03:23)
Gestartet von E:\
Microsoft Windows 10 Pro Version 1607 (X86) (2016-12-10 04:57:52)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1255615618-1242680333-4154777488-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1255615618-1242680333-4154777488-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1255615618-1242680333-4154777488-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-1255615618-1242680333-4154777488-501 - Limited - Disabled)
ms (S-1-5-21-1255615618-1242680333-4154777488-1001 - Administrator - Enabled) => C:\Users\ms

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM\...\Avast) (Version: 12.3.2280 - AVAST Software)
AWP v4.6 SR12 (HKLM\...\{5A237A0B-3E20-4D38-9316-C04FF4D2D9FE}) (Version: 4.6 - Nome da empresa:)
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - Canon Inc.)
Canon MP Navigator EX 4.0 (HKLM\...\MP Navigator EX 4.0) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
File Scavenger 3.2 (de) (HKLM\...\QueTek File Scavenger 3.2 (de)) (Version: 3.2.24.0 - QueTek Consulting Corporation)
Hardcopy (HKLM\...\Hardcopy) (Version: 2016.11.07 - www.hardcopy.de)
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company)
ISO to USB (HKLM\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version:  - isotousb.com)
Java 8 Update 111 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Med7 (HKLM\...\{C09D663B-A9ED-4EEE-8CC3-2C7A3DB63618}) (Version: 7.92.0017 - Bitron GmbH)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 de) (HKLM\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
My MedicineOne 8 (HKLM\...\My MedicineOne 8) (Version: 8.0 - MedicineOne Life Sciences Computing, S.A.)
My MedicineOne 8 (Version: 8.0 - MedicineOne, Life Sciences Computing, SA) Hidden
ODIR (HKLM\...\ODIR_is1) (Version:  - Vaita)
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
RogueKiller Version 12.9.1.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.9.1.0 - Adlice Software)
SafeZone Stable 1.51.2220.53 (Version: 1.51.2220.53 - Avast Software) Hidden
SCR3xxx Smart Card Reader (HKLM\...\{9C411EF9-6EBA-46E3-8132-EDADF1CC0B16}) (Version: 8.41 - SCM Microsystems)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.0.13.2 - Synaptics)
Texas Instruments PCIxx21/x515/xx12 drivers. (HKLM\...\InstallShield_{767B964C-D9B4-422D-802B-F7ACBE2D310A}) (Version: 2.00.0004 - Texas Instruments Inc.)
TIPCI (Version: 2.00.0004 - Texas Instruments Inc.) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VoipConnect (HKLM\...\VoipConnect_is1) (Version: 4.14 build 776 - Finarea S.A. Switzerland)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2A27F093-5D70-411F-A275-9C6324CA4CBF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd)
Task: {33F8036C-CA7C-4C12-9370-90AA8DA4BBC8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2017-01-05] (AVAST Software)
Task: {642896BE-8521-4816-B01D-AE0C0704D944} - System32\Tasks\SafeZone scheduled Autoupdate 1483641660 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {724DBDEC-CA44-4E1F-ABF2-F622DD0571D4} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe [2016-02-03] ()
Task: {7EDEBBE8-5B11-427C-8B63-B2700DC43305} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {CAF49C18-2222-4E14-8525-D6C2B9A016E3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-01] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 09:25 - 2016-07-16 09:25 - 00190976 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-01-05 19:28 - 2017-01-05 19:28 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-01-05 22:44 - 2017-01-05 22:44 - 03070464 _____ () C:\Program Files\AVAST Software\Avast\defs\17010502\algo.dll
2017-01-05 19:28 - 2017-01-05 19:28 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-04 22:37 - 2016-12-14 12:55 - 01729312 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-12 15:05 - 2016-02-03 09:12 - 00062232 _____ () C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
2016-12-12 15:06 - 2016-02-03 07:58 - 00072984 _____ () C:\Program Files\Hardcopy\hardcopy_06.dll
2016-12-12 15:06 - 2016-11-07 11:40 - 00148664 _____ () C:\Program Files\Hardcopy\HcDLL2_48_Win32.dll
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-12-10 06:36 - 2016-12-10 06:36 - 00679624 _____ () C:\Users\ms\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\ClientTelemetry.dll
2016-12-11 18:16 - 2016-09-15 18:42 - 02261856 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
2016-07-16 09:26 - 2016-07-16 18:31 - 01486688 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll
2016-12-11 02:35 - 2016-12-11 02:37 - 01260232 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.3.0.0_x86__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2016-12-15 08:26 - 2016-12-15 08:33 - 00306688 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.3.0.0_x86__8wekyb3d8bbwe\Microsoft.Notes.Upgrade.dll
2016-07-16 09:25 - 2016-07-16 09:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-14 00:40 - 2016-12-09 10:36 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-11 18:16 - 2016-11-02 11:24 - 01150464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-12-11 18:16 - 2016-11-02 11:24 - 01724928 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03158528 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 00062464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 12:16 - 2016-12-14 12:44 - 00153088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 30359552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 01733120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\roottools.dll
2017-01-05 19:29 - 2017-01-05 19:29 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-12-12 15:06 - 2016-09-08 10:09 - 03660984 _____ () C:\Program Files\Hardcopy\HcDllS.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 09:30 - 2016-07-16 09:27 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "QlbCtrl.exe"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "Assemblies"

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{9838232A-B7F3-4544-8A8F-D24C605B19E6}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{944A5BBD-AAE7-40CC-9DD8-44C3CE3145A2}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C50EF1FF-63DB-4E59-BBA4-00537A5ED569}] => %SystemDrive%\Med7\med7.exe
FirewallRules: [{95A37AAF-B771-4A07-AA52-C33D8F4BC3EB}] => %SystemDrive%\Med7\med7.exe
FirewallRules: [TCP Query User{2FA09E23-68BE-40F7-A6A0-C1AB6F8DFABA}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [UDP Query User{F3495D05-7FD1-42E3-9F2E-0598D743C2D1}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [TCP Query User{8D9AB736-3CF5-456C-A345-3A1CBDD57F43}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [UDP Query User{9028719B-A7B7-4F9B-B9BD-875C99A484F9}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============

Name:  AuthenTec Inc. AES2501A
Description:  AuthenTec Inc. AES2501A
Class Guid: {53d29ef7-377c-4d14-864b-eb3a85769359}
Manufacturer: AuthenTec
Service: ATSwpWDF
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual CloneDrive
Description: Virtual CloneDrive
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/06/2017 12:00:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (01/06/2017 12:00:20 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/06/2017 12:00:20 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/06/2017 11:30:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 09:20:00 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 08:50:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_16.1118.10000.0_x86__8wekyb3d8bbwe:App.AppX65n3t4j73ch7cremsjxn7q8bph1ma8jw.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 08:50:23 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_16.1118.10000.0_x86__8wekyb3d8bbwe:App.AppX65n3t4j73ch7cremsjxn7q8bph1ma8jw.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 08:49:03 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 08:41:35 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/06/2017 08:15:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TGSB6RT)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============

CodeIntegrity:
===================================
  Date: 2017-01-03 11:20:13.246
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-25 17:57:12.571
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-21 14:25:22.128
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-19 11:08:44.762
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-17 23:16:20.412
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz
Prozentuale Nutzung des RAM: 40%
Installierter physikalischer RAM: 3447.43 MB
Verfügbarer physikalischer RAM: 2034.35 MB
Summe virtueller Speicher: 4023.43 MB
Verfügbarer virtueller Speicher: 2604.62 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:98.12 GB) (Free:48.06 GB) NTFS
Drive d: () (Fixed) (Total:13.67 GB) (Free:2.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (SANDISK) (Removable) (Total:14.91 GB) (Free:3.18 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 4C177CD5)
Partition 1: (Active) - (Size=13.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 14.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende vom Addition.txt ============================
--- --- ---

cosinus 06.01.2017 12:23
Zitat:
Microsoft Office Professional Plus 2007
Gewerblich genutztes System? Oder hats nen anderen Grund, dass du die teuerste Office Edition hast?

pingodoce 06.01.2017 12:26
Zitat:
Zitat von cosinus (Beitrag 1632699)
Gewerblich genutztes System? Oder hats nen anderen Grund, dass du die teuerste Office Edition hast?

privat genutzt.. geschenkt bekommen

cosinus 06.01.2017 12:30
Geschenkt? Samt Lizenzaufkleber oder hat dir jmd ne Raubkopie "geschenkt"? :wtf:

pingodoce 06.01.2017 12:48
das ist auf diesem book gewesen als ich es bekommen habe.. war vorher ein business rechner der ausgemustert wurde

der lief vorher als business rechner und wurde dann ausgemustet .. .geschenkt .. familienintern

cosinus 06.01.2017 12:50
ahja :D

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

pingodoce 06.01.2017 13:52
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.06.05
  rootkit: v2016.11.20.01

Windows 10 x86 NTFS
Internet Explorer 11.576.14393.0
ms :: DESKTOP-TGSB6RT [administrator]

06.01.2017 13:21:44
mbar-log-2017-01-06 (13-21-44).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 292489
Time elapsed: 10 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|shell (Hijack.ShellA.Gen) -> Data: explorer.exe,"C:\Users\ms\AppData\Roaming\assembliesbckp.exe" -> Delete on reboot. [b9f4bbbd773105313453466c7a88dc24]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\ms\AppData\Local\Temp\keygen.exe (RiskWare.Tool.CK) -> Delete on reboot. [e2cba6d2b9ef1b1b303bda4f44beeb15]
C:\Users\ms\AppData\Local\Temp\svhost.exe (RiskWare.HeuristicsReservedWordExploit) -> Delete on reboot. [affe99dfc6e252e4ba4b521273905ca4]

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
13:48:13.0339 0x18c8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
13:48:19.0734 0x18c8  ============================================================
13:48:19.0734 0x18c8  Current date / time: 2017/01/06 13:48:19.0734
13:48:19.0734 0x18c8  SystemInfo:
13:48:19.0736 0x18c8 
13:48:19.0736 0x18c8  OS Version: 10.0.14393 ServicePack: 0.0
13:48:19.0736 0x18c8  Product type: Workstation
13:48:19.0736 0x18c8  ComputerName: DESKTOP-TGSB6RT
13:48:19.0736 0x18c8  UserName: ms
13:48:19.0736 0x18c8  Windows directory: C:\Windows
13:48:19.0736 0x18c8  System windows directory: C:\Windows
13:48:19.0736 0x18c8  Processor architecture: Intel x86
13:48:19.0736 0x18c8  Number of processors: 2
13:48:19.0736 0x18c8  Page size: 0x1000
13:48:19.0736 0x18c8  Boot type: Normal boot
13:48:19.0736 0x18c8  CodeIntegrityOptions = 0x00000000
13:48:19.0736 0x18c8  ============================================================
13:48:19.0801 0x18c8  KLMD registered as C:\Windows\system32\drivers\18521563.sys
13:48:19.0801 0x18c8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.576, osProperties = 0x18
13:48:19.0980 0x18c8  System UUID: {C0033F47-12FB-D9F3-E5F6-DB9C98A71D76}
13:48:20.0710 0x18c8  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
13:48:20.0728 0x18c8  ============================================================
13:48:20.0728 0x18c8  \Device\Harddisk0\DR0:
13:48:20.0728 0x18c8  MBR partitions:
13:48:20.0728 0x18c8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1B56E41
13:48:20.0728 0x18c8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B57000, BlocksNum 0xC43D000
13:48:20.0728 0x18c8  ============================================================
13:48:20.0734 0x18c8  C: <-> \Device\Harddisk0\DR0\Partition2
13:48:20.0736 0x18c8  D: <-> \Device\Harddisk0\DR0\Partition1
13:48:20.0736 0x18c8  ============================================================
13:48:20.0736 0x18c8  Initialize success
13:48:20.0736 0x18c8  ============================================================
13:48:43.0539 0x06a4  ============================================================
13:48:43.0539 0x06a4  Scan started
13:48:43.0539 0x06a4  Mode: Manual; SigCheck; TDLFS;
13:48:43.0539 0x06a4  ============================================================
13:48:43.0539 0x06a4  KSN ping started
13:48:43.0748 0x06a4  KSN ping finished: true
13:48:44.0044 0x06a4  ================ Scan system memory ========================
13:48:44.0044 0x06a4  System memory - ok
13:48:44.0045 0x06a4  ================ Scan services =============================
13:48:44.0137 0x06a4  [ 03155454BC4709FC220B92360B7BBB20, 3C3EC5CFFB9EC28C2E7810CC536E8B560B6AD7B1245AD963D79A4DCA1E0A7C76 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
13:48:44.0339 0x06a4  1394ohci - ok
13:48:44.0363 0x06a4  [ 2809BD40414F0651BC84D55B7459E104, 223EF6EF3592796E962A7D8C2ABB0A27C2504B03A53BA5CF2A94DC06C1485385 ] 3ware          C:\Windows\system32\drivers\3ware.sys
13:48:44.0413 0x06a4  3ware - ok
13:48:44.0428 0x06a4  [ 943297AA998EA2B4A4E9E9DAA9954729, 6BC9E6557826A70B447443228DEFC0DF55C546DE1D6B4745CD78DDBD3605B4D1 ] Accelerometer  C:\Windows\system32\DRIVERS\Accelerometer.sys
13:48:44.0476 0x06a4  Accelerometer - ok
13:48:44.0507 0x06a4  [ 7A185EE3C8C42D5EA0AD695AA3756339, E3494959DAA76E5CA0E088C6F94B2C1A077B877C93B29D74F0E40C80AFDF5686 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
13:48:44.0585 0x06a4  ACPI - ok
13:48:44.0599 0x06a4  [ 0C970C83236D49A37EAA026AE33E1E13, 0773433CC55976C116E74AB5FB0F1076740699B2E2BDE9C6A174464A9EC64422 ] AcpiDev        C:\Windows\System32\drivers\AcpiDev.sys
13:48:44.0651 0x06a4  AcpiDev - ok
13:48:44.0665 0x06a4  [ 68BD81393B208AFACFEC59354D6ED4A5, 3FF394B2105F8AF3435B9E7D65F4788370F3C0DADBF9C221A3879616AC2A816B ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
13:48:44.0709 0x06a4  acpiex - ok
13:48:44.0720 0x06a4  [ 3A8A0B3D2EE12EC85DB725A923BC1E53, C34F941DA35F7270D2AF7E22ECDCF6D55CE01BF5F2759A902DF27D001AE64DD4 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
13:48:44.0772 0x06a4  acpipagr - ok
13:48:44.0781 0x06a4  [ 98D16BAF0AC99877C6EF5573B8F202BF, 1D9C170AFDDF698273E36BD23E1D52EE0038F62FC8C249FC6B3F41BE3C806876 ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
13:48:44.0837 0x06a4  AcpiPmi - ok
13:48:44.0846 0x06a4  [ 5B15A344A42AB5AD9E3D6236B2D8261A, F6C4660494B09658086671E4F8F737680CA55BBF679EB69BF6C74CE89025629A ] acpitime        C:\Windows\System32\drivers\acpitime.sys
13:48:44.0895 0x06a4  acpitime - ok
13:48:44.0915 0x06a4  [ FB9ECE3F7B8A03E474E611031AD4CD23, 32CDBC6D32DF5C711819A85FD147511AA2E8EE7609CE7D9D352E7755D2E964BB ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
13:48:44.0984 0x06a4  ADIHdAudAddService - ok
13:48:44.0999 0x06a4  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
13:48:45.0022 0x06a4  AdobeARMservice - ok
13:48:45.0042 0x06a4  [ B79750091FC0842182FE49D263791294, 32FC260A74C9C45CD1E8998523642C285866378FCD9478FEFD15A0CC42EC0E0B ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
13:48:45.0078 0x06a4  AdobeFlashPlayerUpdateSvc - ok
13:48:45.0129 0x06a4  [ 7E9D4FB10269A5DAF8DE9B012FED37B1, 6930F14AA6826946DA41FA11D370A9D76C948C5FB2CEC351FDA8DFAEFCC531AC ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
13:48:45.0227 0x06a4  ADP80XX - ok
13:48:45.0247 0x06a4  [ 12D23758621B00B8D3134095EC3325FD, 30DC1C40539FF6E14D9D692870FD6D511455F2D86DB1BF505B2500F953A611C4 ] AEADIFilters    C:\Windows\system32\AEADISRV.EXE
13:48:45.0286 0x06a4  AEADIFilters - ok
13:48:45.0313 0x06a4  [ 3B5BE5B3D3CE8D9834C2C9B325AC6A29, 86D221CFF168D61C7359425A20C0A413E6EF8B023806BBB84E5F26E4E997D74A ] AFD            C:\Windows\system32\drivers\afd.sys
13:48:45.0382 0x06a4  AFD - ok
13:48:45.0429 0x06a4  [ 7E10E3BB9B258AD8A9300F91214D67B9, CE5FAD7BF78234B64EAADF64DB23F3C342AADB9C5E3B0168E57863F494F30318 ] AgereSoftModem  C:\Windows\system32\DRIVERS\AGRSM.sys
13:48:45.0548 0x06a4  AgereSoftModem - ok
13:48:45.0568 0x06a4  [ 266739048C6ADCC52050D057EE7B7FC4, C5CDCD14071917110A206DD99548BF1D41C1028F1CEF24F2488197B786B8978C ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
13:48:45.0632 0x06a4  ahcache - ok
13:48:45.0643 0x06a4  [ BE415E130B5598C355FD781CE36838A7, 0C0E010459E2485950F9F1B0363436ADD111DF8532360D927A5113E8A24F7D10 ] AJRouter        C:\Windows\System32\AJRouter.dll
13:48:45.0682 0x06a4  AJRouter - ok
13:48:45.0693 0x06a4  [ 0E3981D2FACC626692D3974A3BCA375A, DDB2F31CC7A8CCBCE62C23311004A60B0DE67BFC10020F1037581062C7A59381 ] ALG            C:\Windows\System32\alg.exe
13:48:45.0735 0x06a4  ALG - ok
13:48:45.0748 0x06a4  [ 3CD02476635113FD49D420ADF18F3187, AF38701C875D01939B43A27C26E6DE04601566C4FE1ED74FA4ABA48885264121 ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
13:48:45.0804 0x06a4  AmdK8 - ok
13:48:45.0819 0x06a4  [ EC40FB47E51F4ED05A5A3E1FBB7A3323, 9307BEE98A161291B4094099E3DA351A65FE6DB6E3222B2F1A0861BCB38491AD ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
13:48:45.0877 0x06a4  AmdPPM - ok
13:48:45.0889 0x06a4  [ 859393BF40B714092A20561146401E48, 7F46EA0CE27971CEB6961BF3AA2AFC23A53BCA59BDC5525A8F217C15F7C2B809 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
13:48:45.0931 0x06a4  amdsata - ok
13:48:45.0948 0x06a4  [ 976A5D0F41721613177C352B90B330AE, 7060FF655AE3B396AC104C159BF0982329AB7307D69E5F5BB9B92A4A1E0AF5B9 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
13:48:46.0000 0x06a4  amdsbs - ok
13:48:46.0011 0x06a4  [ D41974D87F5C44902DA797BF13142AE9, 3CDD9C999316E91046B7E9D89E3BD65C6A96E2759E4E55D37980927D04E19879 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
13:48:46.0051 0x06a4  amdxata - ok
13:48:46.0066 0x06a4  [ 01999F61F9A20E1548A0872C0A9AAAC1, D2FE98CB692A76B52AA742A07ECCB1A03206FF7F85A052E5A32219F3770F6CF7 ] AppID          C:\Windows\system32\drivers\appid.sys
13:48:46.0117 0x06a4  AppID - ok
13:48:46.0130 0x06a4  [ 86183D1D11EBCF8E7D92CD089A74A606, 4F80A74A96EBFFBDE6B74A5457C0D50E669D36027A6E84E1A1F7BAE2331095EA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
13:48:46.0178 0x06a4  AppIDSvc - ok
13:48:46.0191 0x06a4  [ 49C0FBF00247C7DC48ED6085E2F4C391, F6F4FED838473B120175128809CFB3DFCBECE925BD23FD46FFEC3300CA4A0CCE ] Appinfo        C:\Windows\System32\appinfo.dll
13:48:46.0236 0x06a4  Appinfo - ok
13:48:46.0248 0x06a4  [ 9DCCF6510C13B29D5542E80E78670507, B43B4B4E957105CB49C39897B7CE7B6AAD17945CA2FE59970C39A69E6557C150 ] applockerfltr  C:\Windows\system32\drivers\applockerfltr.sys
13:48:46.0313 0x06a4  applockerfltr - ok
13:48:46.0329 0x06a4  [ 964B3242103F4CBC5174A301B6F2ED0F, 17732F02835910C7A301FC1D467148CAEF4A4ED05D2A8B47D7A1C7E0916A00C7 ] AppMgmt        C:\Windows\System32\appmgmts.dll
13:48:46.0381 0x06a4  AppMgmt - ok
13:48:46.0409 0x06a4  [ 503A049594590BFCCBA89E2D50D24EB3, C0426DF54F9D4237F446A1E85D2F106DAECD0CFC9E95A86CCB24791A0B40D7B6 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
13:48:46.0469 0x06a4  AppReadiness - ok
13:48:46.0501 0x06a4  [ FB4AC4CD756432034439082724697BF8, 0B37555972713DB8B9A71326B30519024395C65B7188B35B84EF851AF44CEEDE ] AppVClient      C:\Windows\system32\AppVClient.exe
13:48:46.0551 0x06a4  AppVClient - ok
13:48:46.0569 0x06a4  [ 2B80ADDDB8E2F07987C056C2D2E6C41C, F76A4872593C4A2F8A961E7B8B9C931C5A476A2266E5F9BA19C7E60A603B5557 ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
13:48:46.0616 0x06a4  AppvStrm - ok
13:48:46.0630 0x06a4  [ C3A3693B495AAECBA08CA10380F68A28, A1EEC75DEBA3C0DA76CCD6F4A95EFB9644665416D62002F8D5C2C66EDBC4533B ] AppvVemgr      C:\Windows\system32\drivers\AppvVemgr.sys
13:48:46.0675 0x06a4  AppvVemgr - ok
13:48:46.0688 0x06a4  [ FE3BAA1D877589FA101FFE06937E8287, F93440A682B040D163CC4D6618E386AF5936782E47CC0AF628420DE9E5678438 ] AppvVfs        C:\Windows\system32\drivers\AppvVfs.sys
13:48:46.0732 0x06a4  AppvVfs - ok
13:48:46.0810 0x06a4  [ FDC4207AD1583C38D1AD68C6FC146E7A, 5CC2467B44CFE111297E1F09965BD15973C7141FE51592E4AAE3E8138C1464E6 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
13:48:46.0954 0x06a4  AppXSvc - ok
13:48:46.0973 0x06a4  [ 976AFA23533862271F28DDA23DF9FC3B, D988693278554079F778AE52AC6FB8F580F26DF3778EE78445082970321A17C4 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
13:48:47.0017 0x06a4  arcsas - ok
13:48:47.0027 0x06a4  [ ACE407AF9DCE214772E04894C18BC18B, 5D54569C791520125ED472FFEBC6F5471DFA1D2C0274E488DAEC20824972246C ] aswHwid        C:\Windows\system32\drivers\aswHwid.sys
13:48:47.0064 0x06a4  aswHwid - ok
13:48:47.0074 0x06a4  [ 7393DE24CAE720E128FE61CC1A7632E3, 20EA724AB746973A53FF387F36F7CA445126C006A06858CA329654BED1E7CE6E ] aswKbd          C:\Windows\system32\drivers\aswKbd.sys
13:48:47.0112 0x06a4  aswKbd - ok
13:48:47.0126 0x06a4  [ 9A3BCD9CB36311EC1DB686010CE2E793, 66A9A6B3D23CA2D0D86887223AB4D8EC4F28426CFC950BAFECA9597834FBB915 ] aswMonFlt      C:\Windows\system32\drivers\aswMonFlt.sys
13:48:47.0164 0x06a4  aswMonFlt - ok
13:48:47.0178 0x06a4  [ 411E8CF998E01C3247DE094376E3CB3B, 27A430466EB8E655D03B29BFB994DE657CE3878CF1D90EB51A39521BF7767954 ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
13:48:47.0216 0x06a4  aswRdr - ok
13:48:47.0227 0x06a4  [ 39445B2AA5CD7711DA5572E816D5DC86, A63DF762A316CB69B3FD7731197EABDCDFB6BB21F840504A50B4363751EC909E ] aswRvrt        C:\Windows\system32\drivers\aswRvrt.sys
13:48:47.0263 0x06a4  aswRvrt - ok
13:48:47.0298 0x06a4  [ 03AD952FC1287D5623763E310CE081BA, BACCBDE6E1B98E9502B0ABDA5BBEC2FFDA50820085E08CFC50F81B5C728D843A ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
13:48:47.0378 0x06a4  aswSnx - ok
13:48:47.0407 0x06a4  [ E061C8C09103BBE429D9DB222ED7F4C3, 78C5DDB5BE25DED9BB58A4E12C2E3DDD3E798CFF5AC0F87D1BE615FAEC896B0E ] aswSP          C:\Windows\system32\drivers\aswSP.sys
13:48:47.0462 0x06a4  aswSP - ok
13:48:47.0478 0x06a4  [ A084E7BEA9EA4D0BE94357BFE8E987D7, C006EE86A0E6BBDFC6EC1F2708C32722AB571FC64879D6EA1FB6A230E13444B9 ] aswStm          C:\Windows\system32\drivers\aswStm.sys
13:48:47.0506 0x06a4  aswStm - ok
13:48:47.0523 0x06a4  [ 8CA850403483A9373406707E8144EB5C, 58C33AFFB6CA2F52BE2534D3099E6F76134484657413E9B4F8A58CB3F08F8FC8 ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
13:48:47.0571 0x06a4  aswVmm - ok
13:48:47.0582 0x06a4  [ D8B54F3B0714F425A1E750930F2959B7, 6926B7249E7D6506D084E00212E00E2C3CD79D556CEC4B0489459D1030163A08 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
13:48:47.0638 0x06a4  AsyncMac - ok
13:48:47.0647 0x06a4  [ 1D8B6976EC75698485A195A06B2DEBAC, 750281084F24190DD77CD2DE23EE8E8B46A942F30C8CCDDA2073F80B4EC01B3A ] atapi          C:\Windows\system32\drivers\atapi.sys
13:48:47.0687 0x06a4  atapi - ok
13:48:47.0713 0x06a4  [ 1EC637725AEBE586508626BA50AF3324, 8D3D873D96BAB9DA82AED3E898690BB03AD7E0108D45C3EB0B165BE52A0ADCE0 ] ATSwpWDF        C:\Windows\system32\DRIVERS\ATSwpWDF.sys
13:48:47.0750 0x06a4  ATSwpWDF - ok
13:48:47.0769 0x06a4  [ 9086C5B04CE8C611043B80A52B4E5482, 231D2F05EAA2FE105195F24F0EE1FE97105BB20D970831220B232FC637AF2C21 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
13:48:47.0823 0x06a4  AudioEndpointBuilder - ok
13:48:47.0858 0x06a4  [ 18590E6DF36EF89A2A1E9BBA0429CEA1, E9401391A7DF497BCF7F92147BF823F873343BF1FBAC88A204C62827CCD56973 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
13:48:47.0937 0x06a4  Audiosrv - ok
13:48:47.0956 0x06a4  [ F4E0580B5789474385E7ACB189C4AF2C, DB5BE2C852AC102AB8EB186362E582E250B843BA52B3B71AF08A5FDA8A6F91AF ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
13:48:47.0985 0x06a4  avast! Antivirus - ok
13:48:48.0005 0x06a4  [ 24CB11F0C843ACF345AF4B6ABCC88627, B5F6F7CD21250ACE9F63691ACBECEDCE69693B2BFDCEB2C3151BC59927B7458E ] AxInstSV        C:\Windows\System32\AxInstSV.dll
13:48:48.0052 0x06a4  AxInstSV - ok
13:48:48.0075 0x06a4  [ 49EF8E38514DB9AFFC696876D3540A52, F9E088FE3F0ABCA329C20424080F4527EAADAB2A5460C188735901F581F1DAB8 ] b57nd60x        C:\Windows\System32\drivers\b57nd60x.sys
13:48:48.0157 0x06a4  b57nd60x - ok
13:48:48.0172 0x06a4  [ F777221219ED35095E903F69B058C42E, 379471A9F84B648212CEA31E9F9AA791F702CE000B59CF6ABAD13AE3AC3CA1F4 ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
13:48:48.0225 0x06a4  BasicDisplay - ok
13:48:48.0236 0x06a4  [ D68ED76646F49C52D65006FC4C596A26, 4CAC90A72DF1E6112BC1AB2607E9D51AFBA96C291FE4F6767B3F303A212028BD ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
13:48:48.0285 0x06a4  BasicRender - ok
13:48:48.0299 0x06a4  [ 045ED769BF5396D346FA7493F47DF811, D0A57A040E3B18AC3A5ED56BF2D26E334DA0381AB686CC3F0517953EC3F7B46D ] bcmfn          C:\Windows\System32\drivers\bcmfn.sys
13:48:48.0351 0x06a4  bcmfn - ok
13:48:48.0363 0x06a4  [ E4D6B5E5E5CD2606391220B156235692, 4633C60BDA9FCB892054D4F338323A4C9E35915D1BF7571A38AC25D51C1BFBE5 ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
13:48:48.0414 0x06a4  bcmfn2 - ok
13:48:48.0437 0x06a4  [ 1F602D94A1DB47003B373DB0F14AAAF1, 964D37C4605E0A312E51C38C94E72C6E2F4D576C5D7416EF0D3C28F275DCC4DC ] BDESVC          C:\Windows\System32\bdesvc.dll
13:48:48.0490 0x06a4  BDESVC - ok
13:48:48.0505 0x06a4  [ 47DC23ACA8BEEE31FBA52E6657767E8F, A145DF855E70020AE96BF6D9852033E79E218F91998BE57B86E27083F8E86B1B ] Beep            C:\Windows\system32\drivers\Beep.sys
13:48:48.0555 0x06a4  Beep - ok
13:48:48.0582 0x06a4  [ AFD903C0CA3AB3F70E1E6DC09E1F7C97, 30A79F603BC6828AB6EA9AA992CC5C5CBEFC3741A7FD0A58B4D6C71501255742 ] BFE            C:\Windows\System32\bfe.dll
13:48:48.0650 0x06a4  BFE - ok
13:48:48.0689 0x06a4  [ 1605DDADAF3CC89E8F803F5955C82747, 480BCA04DA5DFBFD2FB4804113806013BD43DE0E64652B63310A16F7D959ACBD ] BITS            C:\Windows\System32\qmgr.dll
13:48:48.0771 0x06a4  BITS - ok
13:48:48.0786 0x06a4  [ EB4E94E3A66E19470176972A549A5A9C, 417E34B4004DB2187483E6AF2F9811373C2D57F7773BF04E5F9145FE78CC29AB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
13:48:48.0839 0x06a4  bowser - ok
13:48:48.0870 0x06a4  [ 2DBE710FC2592023F550A0A6D5E35AEA, 651BC87E88F335642BF1DFE3C729991E288EFC8ACA889CD7219C9459A7C7B6D3 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
13:48:48.0940 0x06a4  BrokerInfrastructure - ok
13:48:48.0958 0x06a4  [ 47AFBA90CD451D64352C90851761DF66, 54A6B66B1BFABD7968D4C641067E7199B0077EA3510C0D03837FB2B36FB4DD15 ] Browser        C:\Windows\System32\browser.dll
13:48:49.0001 0x06a4  Browser - ok
13:48:49.0012 0x06a4  [ AE0FB0E7C275AFAF60F822415DC6748C, C62CC0799A6DC4F4290B1FF15F95A988FF86D47D90AAFCEDA1F5752D311366A5 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
13:48:49.0064 0x06a4  BthAvrcpTg - ok
13:48:49.0075 0x06a4  [ D7CF5255298D8377812ED2E072E889A9, 6700C39D7413B5D948C01B7E90408BFA05C6EE0C5767841D32FC27234628DA09 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
13:48:49.0130 0x06a4  BthHFEnum - ok
13:48:49.0140 0x06a4  [ 36C5FB26B23A686EF24F7BF8E0FF2731, E7FAFEFE8184EFF66CA1BFCA55069F7B4FA2F4FAD70973448445A1DBE6043886 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
13:48:49.0193 0x06a4  bthhfhid - ok
13:48:49.0210 0x06a4  [ E6D7B2DC8DEDD9851CEBF4AD748DB651, D2A63D3E0F38B4D30E0D653E35F30AD2B2EC5440D41132CDAE4772846AA5ED03 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
13:48:49.0259 0x06a4  BthHFSrv - ok
13:48:49.0270 0x06a4  [ 946F5FAC425C4C616AD4B347FAA2A8C5, 5D56A9129F4ECF9A1B180E5987C9C57D2934FADFBAD2C5FCAD887DFC1649983C ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
13:48:49.0321 0x06a4  BTHMODEM - ok
13:48:49.0342 0x06a4  [ 64C79FE4EBE17BADD43E7945C3231FF6, AD4A53F594E9D23B23D71D42825DD4F1BE94D6BC03AFABE9A40E9027C55761FE ] bthserv        C:\Windows\system32\bthserv.dll
13:48:49.0401 0x06a4  bthserv - ok
13:48:49.0411 0x06a4  [ 1611E3AD41DD64FA2666BC25D3AEB6F8, 0A8E5B1B7E8235BE9516CDE477DED11EC88037AE8B2894A04F18598A33036F67 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
13:48:49.0490 0x06a4  buttonconverter - ok
13:48:49.0502 0x06a4  [ 4B51E183CB0460ACCCB08826B82BA2A5, 1B9F45AAED054EC5CA0C91CF888F7458F423609EDA4A8481BBF1D968CACEEA4A ] CapImg          C:\Windows\System32\drivers\capimg.sys
13:48:49.0585 0x06a4  CapImg - ok
13:48:49.0597 0x06a4  [ 9577B2171AD8DBC6A8BAAD75232CBF38, F939BDDB99A3A3A090A4A2728FB75E89ACFF72CB5C4BD74F00C7DA3A7028374D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
13:48:49.0689 0x06a4  cdfs - ok
13:48:49.0711 0x06a4  [ D7D8E3DC85C585EAE0A24BB78B718054, DA774648F3786FD2D31FCA8CE9C1B2DFAD79D49B9F7DA1078A663C4A37C610D1 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
13:48:49.0766 0x06a4  CDPSvc - ok
13:48:49.0784 0x06a4  [ 00677D7D4770A93AFDDFD59C97C5DB02, BB51DA44C4AA86BC4FBD39CB10B9E5047441C1130DFA6F720D9E346C28F27A50 ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
13:48:49.0833 0x06a4  CDPUserSvc - ok
13:48:49.0852 0x06a4  [ 67B188419B7018D7956A38C89EFCC70A, C37C1BBA25D9AE35649BE3ED2D829008F72EA92A3ADCC7A9038D1E47928513D1 ] cdrom          C:\Windows\System32\drivers\cdrom.sys
13:48:49.0914 0x06a4  cdrom - ok
13:48:49.0930 0x06a4  [ 1D6A243ECD54F7CC294B28946F6B5B33, 7A7F19ABD4B6D73121466B4D8649BBF375034B293FBDFE02A8982D09AA9E6393 ] CertPropSvc    C:\Windows\System32\certprop.dll
13:48:49.0978 0x06a4  CertPropSvc - ok
13:48:49.0991 0x06a4  [ 3B93FFBBBD36E1DD8335CA18E8432F7C, 4C1B712BB5A60C0B275B345712265BF5C9ADB80A5295155A76F4259F89E0F1AF ] circlass        C:\Windows\System32\drivers\circlass.sys
13:48:50.0044 0x06a4  circlass - ok
13:48:50.0063 0x06a4  [ C86D5336F7EBE40E8B69CE8515283DC8, CA084894BCD3ABAA2FF61DD72BD70071B828DF03079E9F4E746D29EF0DDEB7A9 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
13:48:50.0117 0x06a4  CLFS - ok
13:48:50.0149 0x06a4  [ 45DBAD9665B07032CADF149B8CEEF24B, 2D311D62C84EDFD55C39152AC0C84359B92C056137AB9EECAA46E7862F16254F ] ClipSVC        C:\Windows\System32\ClipSVC.dll
13:48:50.0200 0x06a4  ClipSVC - ok
13:48:50.0217 0x06a4  [ 95E1EFBF28F5B071DC763D54E8A302E2, 47609CF571F29A02E94BF64D0158E0D894EC4FD42BE38970EA20202474FB9DBD ] clreg          C:\Windows\System32\drivers\registry.sys
13:48:50.0268 0x06a4  clreg - ok
13:48:50.0289 0x06a4  [ 2DE5CAA56A2BE62470E65E5B0A438821, 2BF3B3186712803E351398215190336BF22A6AA1C892E7707CB50D67BC130E56 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
13:48:50.0341 0x06a4  CmBatt - ok
13:48:50.0367 0x06a4  [ 8AD8C91D90F656948650BCAECF13448C, 30B3BF8F7855894D546149DFF81ECD3838D718511019C02DBA0D5F0DE07822A7 ] CNG            C:\Windows\system32\Drivers\cng.sys
13:48:50.0449 0x06a4  CNG - ok
13:48:50.0461 0x06a4  [ 2BC3F67E62E85D19348A3882B923E343, 6C87C1EB6FCAF65E88088EA673972EC15F7B6EBCBE961FC9008D41C280314BC1 ] cnghwassist    C:\Windows\system32\DRIVERS\cnghwassist.sys
13:48:50.0504 0x06a4  cnghwassist - ok
13:48:50.0525 0x06a4  [ C7A0E61D5714AC20DE52D4F66EC773B8, 53F0C91FD62E6787221EFB4BFDB087C2087CACD6B0C0605F58FC391F546EBA7A ] Com4QLBEx      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
13:48:50.0558 0x06a4  Com4QLBEx - ok
13:48:50.0587 0x06a4  [ A647E88E5949450EB06DF2A7738043AF, D8CF5626115285E8793C6DAA7011598C86F821F934BBD5FBDE6A0E5EE7642C8E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_x86_ed148199964e21c5\CompositeBus.sys
13:48:50.0650 0x06a4  CompositeBus - ok
13:48:50.0660 0x06a4  COMSysApp - ok
13:48:50.0675 0x06a4  [ 9F17B6403B954A9C7C24C70F6F90792A, E242A073742E092CF51E99AD5B9484F596A0D0CA080AEE7AB5CD1B1EE8767245 ] condrv          C:\Windows\system32\drivers\condrv.sys
13:48:50.0718 0x06a4  condrv - ok
13:48:50.0748 0x06a4  [ 2A2C56D4EE5B54D2BAAA39AE88EA0EEA, E03C3E7B802698397EAC802E6789A92D1E62626A3D0AE4FC96EAC6DFFE1783C7 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
13:48:50.0800 0x06a4  CoreMessagingRegistrar - ok
13:48:50.0822 0x06a4  [ 2AD3EF1C870850E1C7D8F07078006555, 6B37FB025F5F7E3E6E550EEF3DE06B73744F78152057FC2D7EC1FCF2519459B1 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
13:48:50.0867 0x06a4  CryptSvc - ok
13:48:50.0896 0x06a4  [ DB8B45AF1B7F27FCCC28BDA6DB8D8312, C1B08606F533D16E58D1D13B35367595B1C1F66618B6D2E06E27A6D3926F4CF7 ] CSC            C:\Windows\system32\drivers\csc.sys
13:48:50.0974 0x06a4  CSC - ok
13:48:51.0010 0x06a4  [ 3CE212F62B56993010B181F914875315, E6FBAE019BA37B7D4117179341B19352FB14E3A6884261E15E3D02ECC75BB1C5 ] CscService      C:\Windows\System32\cscsvc.dll
13:48:51.0078 0x06a4  CscService - ok
13:48:51.0092 0x06a4  [ 1253A07702253E23A6D31A7EA8F0152C, 36E670C661999FFF62FD5AA3EF19465189EDBE1B212A883081B186A26F7BE5A0 ] dam            C:\Windows\system32\drivers\dam.sys
13:48:51.0133 0x06a4  dam - ok
13:48:51.0176 0x06a4  [ 16C4E1708C9574B5CC9A32324FCE51DE, A7D99F2A6B254B5E9532CE957BDDE339D6D2281290A4ABE6B8E497E9D4872D05 ] DcomLaunch      C:\Windows\system32\rpcss.dll
13:48:51.0253 0x06a4  DcomLaunch - ok
13:48:51.0271 0x06a4  [ E32C822C524D7C72EB27A778FEE532D2, 641BF41A9364EBDABCE2576DB423171A4048850BC61F6C20534AB13933814E63 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
13:48:51.0323 0x06a4  DcpSvc - ok
13:48:51.0347 0x06a4  [ 6B8D6B334672A0ED29CCA41369888431, F63EF65651E113446B528AF927F0417BC909996F3DDAC639F164933A3FF022A4 ] defragsvc      C:\Windows\System32\defragsvc.dll
13:48:51.0416 0x06a4  defragsvc - ok
13:48:51.0439 0x06a4  [ 234BAFE8BC6930A22290FB4BD42575BE, 5E6955EE67AEA5E6A61101A892EB65A10D5F31199660C5C12206DD1BEBD94BC3 ] DeviceAssociationService C:\Windows\system32\das.dll
13:48:51.0494 0x06a4  DeviceAssociationService - ok
13:48:51.0508 0x06a4  [ 0DF131F7F00E34B6C9DA053E55A80AA4, B3CA50986884B00B67EF1BB3910CA60FFEB4EA3AB9D08CBD6E82E792B650128B ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
13:48:51.0561 0x06a4  DeviceInstall - ok
13:48:51.0570 0x06a4  [ AFD78D3A35662205B8E3BF50F5FC0A70, CB50A1B5645922DF1338BDFE733E9846B89AA2F8F2AE127314A971DC12EF6702 ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
13:48:51.0613 0x06a4  DevQueryBroker - ok
13:48:51.0626 0x06a4  [ 9C24695688530F014821E30FC8FFD3C9, 72EAAC4F21826F5198F313421B82484A1D3FEAD4AEF4F4DC45A22C4FF3B59D20 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
13:48:51.0694 0x06a4  Dfsc - ok
13:48:51.0718 0x06a4  [ E0201A4BB639042959A11457A52DD627, CA05AE303DC32347C87B512078F4CCD9E821271D8E54A18023D1DCB1F5D0C2B6 ] Dhcp            C:\Windows\system32\dhcpcore.dll
13:48:51.0772 0x06a4  Dhcp - ok
13:48:51.0784 0x06a4  [ 06BFFF10377726EE09E9CD38E187EF16, 51E4875DE91309D86FD24744356E70BE2E0CB3E7BE0CC9321F65544A68ADAC1B ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
13:48:51.0828 0x06a4  diagnosticshub.standardcollector.service - ok
13:48:51.0888 0x06a4  [ E16FC9748D4D9CC1B5037B78DC738F7F, 1A01B81C0AF4F4B9EEFA515CBC14D5B3E9D8DAC5B9CD5B3D771F111BAD9EA6B3 ] DiagTrack      C:\Windows\system32\diagtrack.dll
13:48:52.0005 0x06a4  DiagTrack - ok
13:48:52.0023 0x06a4  [ F2BBF4C89BE9D8A5338955CC660C9308, 95039E5786F00949D1C375FD23EA2D1AD1BD86CE01270473955D470BCCE4D9D3 ] disk            C:\Windows\system32\drivers\disk.sys
13:48:52.0066 0x06a4  disk - ok
13:48:52.0085 0x06a4  [ A185BCC083628A702D61F384B2D37DE3, 1DFD17D0E6C7C31D8330C15F33F1C6F22808A4170935C3C087BEBC9CCB3225D3 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
13:48:52.0147 0x06a4  DmEnrollmentSvc - ok
13:48:52.0158 0x06a4  [ 22C192B3FC5DD7068BA6D56D8755948E, 0D16516710C7EE7CA32AC45B5BC83E6B8AF352B18C6ED4663689B7AB74DBD0D6 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
13:48:52.0209 0x06a4  dmvsc - ok
13:48:52.0224 0x06a4  [ 98B56EE8E60A517DB651F79A10FD937B, 9B5F4CD835E441F3835BAB4D1D74C082ADA8B07B046CA77517155C74C98B3FD4 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
13:48:52.0280 0x06a4  dmwappushservice - ok
13:48:52.0296 0x06a4  [ F3F9449C3F466434912D06E0FBA59FBD, 46BD399D7707E238E440AC8E68D7BED58E4C2D8031EF19F951796EE969956CBC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
13:48:52.0346 0x06a4  Dnscache - ok
13:48:52.0368 0x06a4  [ 29B816D498BB00B46328887131943ECF, 350152ECAC1693B3F66052CCC0E673827220F7B6CB960B979B1A970E68E86BB9 ] dot3svc        C:\Windows\System32\dot3svc.dll
13:48:52.0420 0x06a4  dot3svc - ok
13:48:52.0434 0x06a4  [ 3A46434BC8319CDDC44E02664D67CA26, 74C26F8E17FA08E70F2A103C7DD032A41AD39D1564C3EEE4E30CAF557678FE24 ] DPS            C:\Windows\system32\dps.dll
13:48:52.0479 0x06a4  DPS - ok
13:48:52.0492 0x06a4  [ 065F7A30FDCFC86E850BA76C8AC3C8F8, 692D47A6231AEF32E554F43823855B4AF449B5881AF956B5E9E4F01A04D57D58 ] drmkaud        C:\Windows\system32\DRIVERS\drmkaud.sys
13:48:52.0536 0x06a4  drmkaud - ok
13:48:52.0550 0x06a4  [ 122C70C18BFABCF509F683A1D739264D, 88A29F225A5B136EAA6DFA2F03BA2CBF86B484EA32A331590216F48408F05364 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
13:48:52.0612 0x06a4  DsmSvc - ok
13:48:52.0624 0x06a4  [ 2C8B7475888EAA31315F5960DA2019B2, F5C4E6C54C3C339CCBF025FE847BF9B5C5EAE485A7707D2BF24E7174ABB260DD ] DsSvc          C:\Windows\System32\DsSvc.dll
13:48:52.0679 0x06a4  DsSvc - ok
13:48:52.0753 0x06a4  [ 26D7D93C95E514606D2470445DCB3AE4, EBC5A0619B10BB6DAC1F8A5CD32A58984C080A94D128917B8487646E40A55093 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
13:48:52.0906 0x06a4  DXGKrnl - ok
13:48:52.0925 0x06a4  [ 6E1E91144E0058039E2D5C0FAFF52783, A3D143A9F0B3385471449683985A3803085480DC27F811F471AC6B59EBA8F918 ] Eaphost        C:\Windows\System32\eapsvc.dll
13:48:52.0981 0x06a4  Eaphost - ok
13:48:52.0992 0x06a4  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] EFS            C:\Windows\System32\lsass.exe
13:48:53.0025 0x06a4  EFS - ok
13:48:53.0036 0x06a4  [ 13919673FB7CD6EA50B65D0A780C6668, 2F1C32B9E2F013A0F83A449FCA3CD886289E8F073A79522AA6515183613A9B0B ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
13:48:53.0080 0x06a4  EhStorClass - ok
13:48:53.0092 0x06a4  [ 985743134FA3EFCCE29420C78899C04D, 8F1DA5CC155FF315D93AF17781F0E1BC8BCCF1D649686B0C0502026E2ABCDAB1 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
13:48:53.0138 0x06a4  EhStorTcgDrv - ok
13:48:53.0146 0x06a4  ElbyVCD - ok
13:48:53.0163 0x06a4  [ 7BBC217388D13405B20B6DB2D2B149C2, 02CB05C0914A8D96F729B9FBF96E09855E06EC2624A5B3C7CE8DB6141BAB8351 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
13:48:53.0234 0x06a4  embeddedmode - ok
13:48:53.0253 0x06a4  [ 17641F7E9BC7EEC02420747962D9D106, B2999FBBBCD708917AD9D6FC7053632C06089D0BD2564D3F68C6F87C8E11A845 ] EntAppSvc      C:\Windows\system32\EnterpriseAppMgmtSvc.dll
13:48:53.0306 0x06a4  EntAppSvc - ok
13:48:53.0316 0x06a4  [ D7136B01DC15851F82F1ED40A3889CA0, F7744A5EADBB2CA55E7525E64AAA7301F7B749019E8146992B2B8EF7DC02A201 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
13:48:53.0366 0x06a4  ErrDev - ok
13:48:53.0381 0x06a4  [ A8CE54F53E76FDB5EDA357083369F06D, 648AA6B2521C861E63F1A0108C2201AEA7B9971DC216DF54FED5D6D66601E2FC ] ESProtectionDriver C:\Windows\system32\drivers\mbae.sys
13:48:53.0422 0x06a4  ESProtectionDriver - ok
13:48:53.0456 0x06a4  [ 297BFCA82AA994CE9B95706146764FBC, 9850D39254033EAA3FEE7ED25286CCF85608AA81D04112264A6F2C41CF153148 ] EventSystem    C:\Windows\system32\es.dll
13:48:53.0512 0x06a4  EventSystem - ok
13:48:53.0530 0x06a4  [ 0AD112D64CBE7CD0CC56BCC51A96C244, 872B791C97C3404AC056F231A436DC5FEA0AFAFDBA8843B7B0F345E551647A56 ] exfat          C:\Windows\system32\drivers\exfat.sys
13:48:53.0600 0x06a4  exfat - ok
13:48:53.0625 0x06a4  [ D2FC572D6B71CF1EB30370617AF46C4B, 416236FB42B91D435BB3613026E8CAB9E26642AD32BE69CB109C1BF6697E6F99 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
13:48:53.0683 0x06a4  fastfat - ok
13:48:53.0712 0x06a4  [ 0DA3553D2D52F8529B67C38D6DD0E15A, A6D590BCE75E0D70A175C115D48FC483452458B04078394C1B3829E6BF75810D ] Fax            C:\Windows\system32\fxssvc.exe
13:48:53.0779 0x06a4  Fax - ok
13:48:53.0790 0x06a4  [ A0126E7A898BB9D2903DE9F403920DE5, 6794087F2E0D9DF0A16138689A2D908D4B85C79AFE684E917121A242F21B2114 ] fdc            C:\Windows\System32\drivers\fdc.sys
13:48:53.0840 0x06a4  fdc - ok
13:48:53.0853 0x06a4  [ DC3775810E822B01FFA7F2495247D253, DB59321E07BEDD011BACC0797A41BC924384A1EA8A07905A801785603D9B687C ] fdPHost        C:\Windows\system32\fdPHost.dll
13:48:53.0899 0x06a4  fdPHost - ok
13:48:53.0909 0x06a4  [ BDEFD67A4F1BBC713BC25E8B1A6EC531, CD80EFE7BEF14894BA81028F5E303ABDB2BCD51ADF397F3D035BC11D007121ED ] FDResPub        C:\Windows\system32\fdrespub.dll
13:48:53.0978 0x06a4  FDResPub - ok
13:48:53.0990 0x06a4  [ CB1D954A95C06BE11AD1342FB118C781, 78187C52714B2A69EB3323261B64FB3239FCC861109C5057529D132B78390130 ] fhsvc          C:\Windows\system32\fhsvc.dll
13:48:54.0035 0x06a4  fhsvc - ok
13:48:54.0047 0x06a4  [ B1CBAE1E28CDC943C15A84071F458B68, BED9F204C32334204B22B6756C47692131F1A330ECC58A31BE9533DD4A6C358F ] FileCrypt      C:\Windows\system32\drivers\filecrypt.sys
13:48:54.0098 0x06a4  FileCrypt - ok
13:48:54.0109 0x06a4  [ 3FB44718D1EEAF86084E3DB63C2CCE35, BE1985D12738F1AF7367C0CA0086CD7216E989159BB880C0BDAFACB499186ECC ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
13:48:54.0153 0x06a4  FileInfo - ok
13:48:54.0163 0x06a4  [ D83A9B254CD6F8DA9F088B11549F7079, 34A8E248B7A66075C8EA5AA5FA180E6E2FF7A5CE8BAE09F0144EC1D23B01E87B ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
13:48:54.0225 0x06a4  Filetrace - ok
13:48:54.0240 0x06a4  [ 89D636A10C1D074B3CC4DA34F106728F, C836D780A4848BB2F093125390FEE2D885F80DDDB6E68AFB2D85B2672B6E4DC8 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
13:48:54.0309 0x06a4  flpydisk - ok
13:48:54.0331 0x06a4  [ 79C58738E216A568216ACE46CEEA9C21, 585A1C5426D13F009940CA84C41623C7FDDF9660C58F1B211BC744BE8AE566C7 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
13:48:54.0386 0x06a4  FltMgr - ok
13:48:54.0455 0x06a4  [ 51B108F8123250BCD617B628F4FF4785, DBEF8A3AF4539CD27DA596B78CD2D3AB0B0071C13FE98D634ADB75ACD34DF88C ] FontCache      C:\Windows\system32\FntCache.dll
13:48:54.0573 0x06a4  FontCache - ok
13:48:54.0588 0x06a4  [ C9427725CB6DDFA911F30D5F4E369581, 03ABCDEE3C5AF02B1D9A3E686ACA7C8E71F1E93FA26F126EA424B40E1D5DEEA4 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
13:48:54.0617 0x06a4  FontCache3.0.0.0 - ok
13:48:54.0643 0x06a4  [ F596DF5D4C4F4135658C41FC03931076, 56D6751E418A4D30DFB9A3B9FE72F2969CE5A47AD91B568720E0B42419195189 ] FrameServer    C:\Windows\system32\FrameServer.dll
13:48:54.0708 0x06a4  FrameServer - ok
13:48:54.0720 0x06a4  [ A5B6ECA47256E837FE15937D2BDAB1CA, C5D4BC3CEB145A2130F22C27779BB19573861B0F08CB1B5E2C02C82F7FBF8BB3 ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
13:48:54.0760 0x06a4  FsDepends - ok
13:48:54.0770 0x06a4  [ 6D729037BFBBBB21BA8F1ADC4888C254, 92FB100060B01503D880D1F150D361ABA32D839643620EFE93BAC96ADA7E9C2C ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
13:48:54.0809 0x06a4  Fs_Rec - ok
13:48:54.0838 0x06a4  [ 37159C90791F2D07EECA46137E021CB3, A0E14B280563B1C714B9AB03CFE2C51E283160503DA060CB5EBA0FB7EBCE9928 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
13:48:54.0909 0x06a4  fvevol - ok
13:48:54.0923 0x06a4  [ 55D0AB364EC299911365D85DFDDF9E53, 3673F08B233FC62B0DF464B0B310D3301A34424A5B2D1C737488A8E2FD9347DD ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
13:48:54.0992 0x06a4  gencounter - ok
13:48:55.0005 0x06a4  [ 813721B1164B29FC94711E94ED5948D5, 91A10E0CF09AB1C10045B2BA73247511312DD374938211C6E3649B8E01FB1E31 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
13:48:55.0056 0x06a4  genericusbfn - ok
13:48:55.0070 0x06a4  [ 77EBF3E9386DAA51551AF429052D88D0, 94C3294BB9E14B07448734AE65B37801D3FF15BEC987D182A929A017FEF7B276 ] giveio          C:\Windows\system32\giveio.sys
13:48:55.0107 0x06a4  giveio - detected UnsignedFile.Multi.Generic ( 1 )
13:48:55.0319 0x06a4  Detect skipped due to KSN trusted
13:48:55.0319 0x06a4  giveio - ok
13:48:55.0330 0x06a4  [ 73EFE8A2747BB87F66B5646AA2262AE4, 368AAFA38F214D474206B914A4258B3679CB0B1C9080D32DFB3BF890BD5611A8 ] GPIO            C:\Windows\System32\drivers\iaiogpio.sys
13:48:55.0381 0x06a4  GPIO - ok
13:48:55.0394 0x06a4  [ 3B76B2A4EA0461434706F6F9E51F570A, 479AEB84BDBC6133E1D7CF3880D175C99C64F37D46686B06942798EBBAE3BE5F ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
13:48:55.0444 0x06a4  GPIOClx0101 - ok
13:48:55.0494 0x06a4  [ 477F552C63B73DF010E603A7515609CD, 7D488AB5C14A0F35A9CB5922FDC2028E201C2CC699FBDC58DD3CA5D910A2654C ] gpsvc          C:\Windows\System32\gpsvc.dll
13:48:55.0595 0x06a4  gpsvc - ok
13:48:55.0610 0x06a4  [ F6C07AD956D1FEE95D6A8D21CFA024A9, C23F7DAED98CDF1C128A5CB012CC916BE5FD5B9494B84F93761279505B842871 ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
13:48:55.0659 0x06a4  GpuEnergyDrv - ok
13:48:55.0672 0x06a4  [ CEA72AC01892B12514D15E21EF1BC75D, A44B9493C31479F9EB6C82FFDD6DBF0E6EA98336E6996116CD1A926C7A591214 ] GTIPCI21        C:\Windows\system32\DRIVERS\gtipci21.sys
13:48:55.0715 0x06a4  GTIPCI21 - ok
13:48:55.0725 0x06a4  [ C172F0D0329E46513B09E1FC60A27B9D, 05DE0544C8A29B2C6028D2B97F81EACED5B99B571DE507A18CE856BD30DF7D56 ] HBtnKey        C:\Windows\system32\DRIVERS\cpqbttn.sys
13:48:55.0747 0x06a4  HBtnKey - ok
13:48:55.0766 0x06a4  [ 1243DF3886454DBC0CE10F50809FEB94, 72205060CCD3E40B94A2331FDDDF2CBB248B1B9EB4B7FD7EA79263EEDFC7DB51 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
13:48:55.0835 0x06a4  HdAudAddService - ok
13:48:55.0846 0x06a4  [ E67AAF24F03D9D1B7616C0F5663556CA, 009345F574B3A061EE2A814378151FFE682F1F6011AC4D1C39185629BCED1615 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
13:48:55.0899 0x06a4  HDAudBus - ok
13:48:55.0909 0x06a4  [ DC0EE7188ECB1DC81329242ADC9AA866, 03DCCD6A4DB164025B7048EC2D75C2EFB7C2C59AF86CFF17C8445A7B11DCC5F4 ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
13:48:55.0952 0x06a4  HidBatt - ok
13:48:55.0969 0x06a4  [ B48564703C7EADF54E98BD37DAC977FF, 3DA211BCF0CAAE4723B77EA29EA8C1931CAF68BB9B2106482109871CF0BD47C0 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
13:48:56.0023 0x06a4  HidBth - ok
13:48:56.0033 0x06a4  [ 06717AF4BA807B54C79B9769815F1853, D4757F51F6F1DF9C3B2D0254E1C50C3AD509D1AEF825338C834A1E368EC664E4 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
13:48:56.0084 0x06a4  hidi2c - ok
13:48:56.0093 0x06a4  [ 886742395F435F565CBE3623E2EBB7E4, CC6666929DB21B70F2FF6DC8E0E1245B3518DF5A00612E8B5D96B9CF96F2E37D ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
13:48:56.0135 0x06a4  hidinterrupt - ok
13:48:56.0144 0x06a4  [ E1BD3175634178556EBD4EE4711BD7AF, 9EB96D3D9E92476E51FA70ADDAEEBD15DBF65C7D307793FDA68CE7DBE8AC138A ] HidIr          C:\Windows\System32\drivers\hidir.sys
13:48:56.0195 0x06a4  HidIr - ok
13:48:56.0205 0x06a4  [ BE6A279ED7023652DD94FA19E9B27882, A5A0E3AF6121BF2122C7652CB0232651FFBADB9CE2B04580C8112886686191A2 ] hidserv        C:\Windows\system32\hidserv.dll
13:48:56.0248 0x06a4  hidserv - ok
13:48:56.0257 0x06a4  [ 5E0186347B8E9A868EFAC611BE88206B, 1AEFF85613248DAF5724BE99A7CAD9115505CAF4807A2D5D391DB3AC6C6EF4C0 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
13:48:56.0306 0x06a4  HidUsb - ok
13:48:56.0323 0x06a4  [ 6098A3A34FB7709E5542BD772AC65261, 37E001A413D9669323F4887569F08A58A5C485707D0695466F25E2DF86E1FD67 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:48:56.0374 0x06a4  HomeGroupListener - ok
13:48:56.0397 0x06a4  [ E5D081908B6DD64BDFC125A56428AEA5, 751E9EA2168C475690C1A081FBDEC80F2BD140D77C61C9CD4C9ECA338D2A99F3 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:48:56.0458 0x06a4  HomeGroupProvider - ok
13:48:56.0470 0x06a4  [ 91AB80156F5DF5B1495A687E5047961B, 3F6F91200553A2DC907D12903C3EE9EE36BDC82521628515C6AFDA09789F8DC6 ] hpdskflt        C:\Windows\system32\DRIVERS\hpdskflt.sys
13:48:56.0504 0x06a4  hpdskflt - ok
13:48:56.0513 0x06a4  [ 1210960FF8928950D2A786895B0C424A, 22C8785E024CFDD3A43FAEAAA96B8332C37E9B6C765AB7AFBCD3DAA2DC9EFFC7 ] HpqKbFiltr      C:\Windows\System32\drivers\HpqKbFiltr.sys
13:48:56.0561 0x06a4  HpqKbFiltr - ok
13:48:56.0580 0x06a4  [ FDF273A845F1FFCCEADF363AAF47582F, 9BB99346A977225EF77261CD3CF4219A238EB06FFE2DB91D00A0037BDCFECEF1 ] hpqwmiex        C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
13:48:56.0605 0x06a4  hpqwmiex - ok
13:48:56.0618 0x06a4  [ 4823026B825C419071EF342EAA02AC25, 313EDCA453777A1888EB3B2BD14F5F3266F265C6B829DF37E8EBFD5D74C9415F ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
13:48:56.0662 0x06a4  HpSAMD - ok
13:48:56.0673 0x06a4  [ 361069D78E96F27647EA99A5A5789DC3, 771E790C304BB159094C4AA24A1F20C92DBD9D41917B59EEE8AFA3A88558048C ] hpsrv          C:\Windows\system32\Hpservice.exe
13:48:56.0699 0x06a4  hpsrv - ok
13:48:56.0737 0x06a4  [ 4C448A376B2830E04C479526EBDBB5C2, F697191DE2A2A6D72CC6766204A11B757C503AB21B622736E39BBA357E167C5F ] HTTP            C:\Windows\system32\drivers\HTTP.sys
13:48:56.0821 0x06a4  HTTP - ok
13:48:56.0835 0x06a4  [ 87DD07FD11E223C6F3322C242818E35B, A13F5E957926F441F899AF82C1CF72C425569B049DB32B06D8712A48A8132C57 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
13:48:56.0873 0x06a4  hwpolicy - ok
13:48:56.0882 0x06a4  [ 13757A2431D14C7E9E4221D7E4E49266, 6BD7A6CBC6606380153EE7DCC1A8A0F0AC9E74BCF9665E64BA8123BE63813E2C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
13:48:56.0932 0x06a4  hyperkbd - ok
13:48:56.0944 0x06a4  [ 7D889F2D2464940C2DA8A218F5282F21, 06A8CE55D30EEADD3BCDBCD66F2CADA074D32E60B474BBE18759CB5A4318BD89 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
13:48:56.0998 0x06a4  i8042prt - ok
13:48:57.0007 0x06a4  [ 9FD2F64E54C2B4B2EC0F0C7BF9997C34, 659417B7005DF6716231A66D2BA947A3F12957B5A9801826DF7808B2C8AAE2C7 ] iagpio          C:\Windows\System32\drivers\iagpio.sys
13:48:57.0058 0x06a4  iagpio - ok
13:48:57.0069 0x06a4  [ A0D5587F43A9824840A8D1EE4BDB184E, B7A7557BBB4E8C25883FE39070F5C71C0AFC080EEF72CFADD563C3572ECE0314 ] iai2c          C:\Windows\System32\drivers\iai2c.sys
13:48:57.0122 0x06a4  iai2c - ok
13:48:57.0134 0x06a4  [ 646D3B416BC970C3CD2F53844FD156A5, 045CBA642382B33DB1E222302B14DD46838895A73CE50426FD180B4CA918253A ] iaioi2c        C:\Windows\System32\drivers\iaioi2c.sys
13:48:57.0201 0x06a4  iaioi2c - ok
13:48:57.0231 0x06a4  [ 679359487C5ED5DD1FBF357749EBB020, C53A8D79E019E889C6B1B956CCC39F6B6D0F88FD71BD092FBC5DC64D5E8192DD ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
13:48:57.0299 0x06a4  iaStorAV - ok
13:48:57.0323 0x06a4  [ 9B62A8511B3D9154F4B2A47C7EECBBA5, C04681055B84A4BD75F4AA405CF40EDCA3DEA77D4BADB37A441BC687E7A5EF18 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
13:48:57.0379 0x06a4  iaStorV - ok
13:48:57.0395 0x06a4  [ C44E3058903C80EB48205919E887CAB4, 0EF5C7625EE3BE52DFDF44804CA4CF9C7F5FEE22315AF1BBA4213C888025B4A0 ] icssvc          C:\Windows\System32\tetheringservice.dll
13:48:57.0447 0x06a4  icssvc - ok
13:48:57.0618 0x06a4  [ 35CBB5A4A91DA63C8EE6F36FE9B1FDB5, C0055E3D904F79A1C3810381F3383FD276DBE4D75357E45C21ED0C8842BF77B0 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
13:48:57.0970 0x06a4  igfx - ok
13:48:58.0026 0x06a4  [ D0A86D037E8FC3584FBF882F0232B194, 2A002A0FAB09A4544C6363DC4132E3138D9D776D208FEB25B8626916BECF2BDC ] IKEEXT          C:\Windows\System32\ikeext.dll
13:48:58.0103 0x06a4  IKEEXT - ok
13:48:58.0118 0x06a4  [ 7C28B5FF1A83FAD4EB2964A6769DB972, AD0B0F7BDFE6DC3411D3D0168F286E2F7A7215DAE6B6704D772F3A79C3CA7913 ] IndirectKmd    C:\Windows\System32\drivers\IndirectKmd.sys
13:48:58.0166 0x06a4  IndirectKmd - ok
13:48:58.0180 0x06a4  [ FF01147A374A06FEAB1BFAC93287C8C7, 62384B44EE90A019A07594B761D3E645E31F8FE3B52A7E99654D1468450A76CF ] intelide        C:\Windows\system32\drivers\intelide.sys
13:48:58.0227 0x06a4  intelide - ok
13:48:58.0259 0x06a4  [ 8CA679CF6CC09754F8398AE18242503B, 63004515749D468AC29A109F76028AAC2BA6C8B0246A26F6901C4308BA81AE29 ] intelpep        C:\Windows\system32\drivers\intelpep.sys
13:48:58.0303 0x06a4  intelpep - ok
13:48:58.0319 0x06a4  [ 27242FBDF64B9B1C29A8555279DD47E2, 5B055E2652B87EE98CAE9834EAF58207AA417BD64E581FA3313F52644E505685 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
13:48:58.0377 0x06a4  intelppm - ok
13:48:58.0389 0x06a4  [ 061B3A4E1FC4EA13225D9C4830733172, E43F6A7962B1E6A1CBBC90A68BD3497ECB5A0F4E25FD2A522890CEB1380DAF9A ] iorate          C:\Windows\system32\drivers\iorate.sys
13:48:58.0429 0x06a4  iorate - ok
13:48:58.0439 0x06a4  [ 0936FE04B833C852CAADE4A4EF7520FD, 6B69D2E2AFC30E6D759BB0DA1573DD090FF3C9C7E2E542C4598B401C2249085B ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:48:58.0492 0x06a4  IpFilterDriver - ok
13:48:58.0534 0x06a4  [ 2A1F3BF1C239647775E41F8020F93629, 4C7EA6753BC98F82D32765C55C4295077DA1D91978FAE3AC947C77FDF789EE21 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
13:48:58.0616 0x06a4  iphlpsvc - ok
13:48:58.0630 0x06a4  [ 3CE14CA8BE8E6738657EF6A2BEA8BC51, 19696986B1A01B8A656F52BF4E2107FB07F88B3BD4217F16C6374330E23EAC4B ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
13:48:58.0671 0x06a4  IPMIDRV - ok
13:48:58.0691 0x06a4  [ 3FDB0E7AC49A78D21B470863CDA5E342, 0439E9EBD40FD1E293CD0676F4029617E03AABF7A1B668C38D2EAED4DF2A836C ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
13:48:58.0750 0x06a4  IPNAT - ok
13:48:58.0763 0x06a4  [ 100935549DB97F99CC9DB141B10E4AA7, 3E591D073202A901695BF3A8EB1E9D48391D4E5387E3CC86B9CDB365A2076C06 ] irda            C:\Windows\system32\drivers\irda.sys
13:48:58.0822 0x06a4  irda - ok
13:48:58.0831 0x06a4  [ D428B631C883610C92A83DCA0A813D76, 59F3F4FACD2671BD97A4D0DA67CA2B02EFB8B01E2E66AA9D937E99AB88BF462B ] IRENUM          C:\Windows\system32\drivers\irenum.sys
13:48:58.0881 0x06a4  IRENUM - ok
13:48:58.0894 0x06a4  [ 51CF322AE4D5C752FA3977B419341ABB, 2DA9ADBAF91E57DF41EFB389C21EB0F9D34B9F5A705AE2E4B5113189BB2FCB24 ] irmon          C:\Windows\System32\irmon.dll
13:48:58.0935 0x06a4  irmon - ok
13:48:58.0945 0x06a4  [ 15DD238B3E280A3E31E2F5BB29630B98, 57F37172410C74DB5DEBC10FD9DB55D2D959F45E5AEA51FAEA900B119A34FD80 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
13:48:58.0985 0x06a4  isapnp - ok
13:48:59.0003 0x06a4  [ 3AE6DA207A27333CBD71B132B695BBBD, 0BD58DAFAD2199AB9312B020315628153A8DC1EDBE6FD7C48F18F785349BB7FA ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
13:48:59.0056 0x06a4  iScsiPrt - ok
13:48:59.0071 0x06a4  [ D09509545F6E0B1D5895129DA5255FB4, E0FC5F564A134DE6030C1561D253056B7E449F56402D3119A82EA4B158A5D17A ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
13:48:59.0112 0x06a4  kbdclass - ok
13:48:59.0121 0x06a4  [ 12A96DA887C835D83D492CF12FF3E098, A8E48F341D1478C2A81AB8175404CB1949510DCCC658FE66682C770BDB1BF3E1 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
13:48:59.0169 0x06a4  kbdhid - ok
13:48:59.0182 0x06a4  [ A6B39C3BA2D85BF7D640EBE81995DD64, 4A72D372CDA0F862505C640EF43C0F0C01E0E0533E4CC4439FDAE6D20F4ADE72 ] kdnic          C:\Windows\System32\drivers\kdnic.sys
13:48:59.0231 0x06a4  kdnic - ok
13:48:59.0245 0x06a4  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] KeyIso          C:\Windows\system32\lsass.exe
13:48:59.0278 0x06a4  KeyIso - ok
13:48:59.0291 0x06a4  [ D1030A854286D7A2171C239D8FCE5C02, 24475DA6F6ED2CCAECB5E0C11748EF509B86991A49F1887196F96BC2A804BA42 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
13:48:59.0336 0x06a4  KSecDD - ok
13:48:59.0351 0x06a4  [ 755F5B189F8B92B10A0DF2175B064C63, 9F0FDAAD5C3D1BEABA18EA9B1C3A34AE9614DE67DFA7222A8B16BA17AE619DCE ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
13:48:59.0399 0x06a4  KSecPkg - ok
13:48:59.0419 0x06a4  [ FC5E079DD7EEAE9EEC0F441459FCE8D7, 5D8B26EE0520227CC4AD0D5D3AC8291531807628EC9917372EA1D819EFBB7427 ] KtmRm          C:\Windows\system32\msdtckrm.dll
13:48:59.0476 0x06a4  KtmRm - ok
13:48:59.0493 0x06a4  [ 258661013CC98B51218CCEF4ED7F0834, 1432FCFAB25F4965C3E3E7A964AE076CC9420980FBC33D2BAC0BBD04F3A351EA ] LanmanServer    C:\Windows\system32\srvsvc.dll
13:48:59.0551 0x06a4  LanmanServer - ok
13:48:59.0571 0x06a4  [ 64C3883E74D12CB08C4091874C8B8DEA, 84C84E6CBD9223912CAF0FCE69BAE2036FEC3F414CCCB44FE6452BAAF8BD20A0 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:48:59.0628 0x06a4  LanmanWorkstation - ok
13:48:59.0645 0x06a4  [ 1C9CAD178A37A3C7047BDA51FF39D454, 5ADD6AB911D2AF6E94E39286D94EEAF5462AA719FBE977FAFF7717E09608C1B0 ] lfsvc          C:\Windows\System32\lfsvc.dll
13:48:59.0688 0x06a4  lfsvc - ok
13:48:59.0697 0x06a4  [ 9D43EA3F9CB70E07486378D2D61D0770, 40C7DBF2DF77D7A290059C464F918BFA60F4586A25B4B9ED67900A3BEC7FDE64 ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
13:48:59.0739 0x06a4  LicenseManager - ok
13:48:59.0749 0x06a4  [ 1A8B2F55C261A041A4F9D684FBB2DFFD, 3A8D24A46DEB1841D5644594953426A371109DA11D7CC2E0C49B28697D715B26 ] lltdio          C:\Windows\system32\drivers\lltdio.sys
13:48:59.0803 0x06a4  lltdio - ok
13:48:59.0819 0x06a4  [ 5DCBC3F45B9070DAB1A4413284F3DFB1, 210B33442B102C1BBEB5B85AEFD35E8B4B3B81DF36C8A2AD6DC21F2BC2FE57AA ] lltdsvc        C:\Windows\System32\lltdsvc.dll
13:48:59.0868 0x06a4  lltdsvc - ok
13:48:59.0877 0x06a4  [ BE7615B2C86641644525E5FD448CBE4C, 72435837BBED624442A25C88685F0D09636ABDCF0CEFCDEEB66C6DEAF01E36AA ] lmhosts        C:\Windows\System32\lmhsvc.dll
13:48:59.0921 0x06a4  lmhosts - ok
13:48:59.0939 0x06a4  [ 08947A02B42C4AE496E9E0AFF99D0059, C3FC294220F77C8756E670420F766E092CBA41055143A6A8E38B5F42BF8C5B6E ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
13:48:59.0983 0x06a4  LSI_SAS - ok
13:48:59.0996 0x06a4  [ 083C404C6CF4578AE46AB28F72DA4B1E, 6E2C868B87F742CF20B0AAC752AA067B7D6378B59A563310FB4CF927507CC305 ] LSI_SAS2i      C:\Windows\system32\drivers\lsi_sas2i.sys
13:49:00.0045 0x06a4  LSI_SAS2i - ok
13:49:00.0061 0x06a4  [ D0F4EC4718F7EB222C8AD76BC3B5E013, 90B161571A5EE8E880198A978B7022E7A43A9D1D756EB198A7DB65C8A91843E2 ] LSI_SAS3i      C:\Windows\system32\drivers\lsi_sas3i.sys
13:49:00.0103 0x06a4  LSI_SAS3i - ok
13:49:00.0114 0x06a4  [ 0BAB30365711E81D11311BF1C30F9F75, C2C3A0090E43B6BBC504F9EA0A4CD31D48B125A7B689F0D5815B78B961E308ED ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
13:49:00.0158 0x06a4  LSI_SSS - ok
13:49:00.0192 0x06a4  [ 35754BFDE1F707A3202ECADC7F369A56, D297B8868A88BE8F3B13ED82166AD2255046B2A9BFABD20F5CA041AEA0772170 ] LSM            C:\Windows\System32\lsm.dll
13:49:00.0263 0x06a4  LSM - ok
13:49:00.0277 0x06a4  [ 32A1009A6933E75BB0BB85DE9AEE84FE, 8C2ECD0C3EFB9C91B71769A72D9229D8047E876E28237EC75C6C3E1490802536 ] luafv          C:\Windows\system32\drivers\luafv.sys
13:49:00.0337 0x06a4  luafv - ok
13:49:00.0352 0x06a4  [ 599D0CB2A9EB7F07BAD948D852083FCB, 5BA77A5DCDF5D9A295AE160C05E5212EE933898456ECC016B0CA4895CD82369F ] MapsBroker      C:\Windows\System32\moshost.dll
13:49:00.0400 0x06a4  MapsBroker - ok
13:49:00.0417 0x06a4  [ 7023B5835A1D6E5C69518AB6FED7DD0C, FD073393FA572EC098F640AF80997E8EFEE2837699384D95350F1C719FE71863 ] MBAMChameleon  C:\Windows\system32\drivers\MBAMChameleon.sys
13:49:00.0461 0x06a4  MBAMChameleon - ok
13:49:00.0471 0x06a4  [ D9351F554ED0784764DB0564186906AE, C7DC59A8D528A9A2FCF592D20C20B40D4315B1C09E82A4C1D0B5C6807E8E7338 ] MBAMProtection  C:\Windows\system32\drivers\mbam.sys
13:49:00.0504 0x06a4  MBAMProtection - ok
13:49:00.0629 0x06a4  [ 28D7A3DEC41EB05A80BAF58697B54E98, 8C87C56396C4922C225F9B7F92888434DA9C6CC467FA643107CE11F8D51A329B ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
13:49:00.0761 0x06a4  MBAMService - ok
13:49:00.0789 0x06a4  [ BF7D701D9EDDA9737DF8A39C1C0B8210, A4F5B4B411CFB3939CABC7F5DE2CAE97F023A51D877AD0CEC3123E0B7E708FAE ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
13:49:00.0844 0x06a4  MBAMSwissArmy - ok
13:49:00.0858 0x06a4  [ D98E46A7173656E4B92C9D1C4943BFA7, 2B62183553530DE58AC29ADB0CFE210C51F1F62A910F2E4F39BE846A24FE9056 ] megasas        C:\Windows\system32\drivers\megasas.sys
13:49:00.0899 0x06a4  megasas - ok
13:49:00.0914 0x06a4  [ BC14937F97BF810850FDC0D30D916334, 289AFE9C61C9EA8749773A16CB7670ED040EF12DFA042F9FDD6E6CC2C7CA68C2 ] megasas2i      C:\Windows\system32\drivers\MegaSas2i.sys
13:49:00.0954 0x06a4  megasas2i - ok
13:49:00.0980 0x06a4  [ 31DBF4F3D492A056A40C97E089D7B8D7, A87A40FF9713EE18146F1C239DCF8E8044C7ED3667AE0A5854458285038C831E ] megasr          C:\Windows\system32\drivers\megasr.sys
13:49:01.0051 0x06a4  megasr - ok
13:49:01.0069 0x06a4  [ 6C031C152D14E2A92E0A8EC779F90E1E, C7C1CC6E4987C88A2516B794216ECA60B9624FB991721629EF3311CE8D90BDD9 ] MessagingService C:\Windows\System32\MessagingService.dll
13:49:01.0112 0x06a4  MessagingService - ok
13:49:01.0127 0x06a4  [ F0EFB8F9E7F30641FADDBAB4EFD00C19, 77109E6E967AF41F16026C325F6D3FAF071FBDDEA2D49A515D611777CA372954 ] MMCSS          C:\Windows\system32\drivers\mmcss.sys
13:49:01.0177 0x06a4  MMCSS - ok
13:49:01.0188 0x06a4  [ 5573DCE55EFAD536FAEF3A35952D5CCA, 615E5DAF92697A3494247640A04BEF4CCDD0215A4E97ED8931CBC50C67202D44 ] Modem          C:\Windows\system32\drivers\modem.sys
13:49:01.0237 0x06a4  Modem - ok
13:49:01.0246 0x06a4  [ 53D96D67E61A57577E3F682117E7053B, C4F426B1C3D39A3A60FF361BA136DFD1EFCBAD79777CC612EB0EF1096D14A8D0 ] monitor        C:\Windows\System32\drivers\monitor.sys
13:49:01.0296 0x06a4  monitor - ok
13:49:01.0313 0x06a4  [ 3437EA58173F7E5D3D704B3A6ACA642B, 877D0F9A6C696835220E8FB9C4A527E93CD3FCB19615D4A36AA2829915A0C29F ] mouclass        C:\Windows\System32\drivers\mouclass.sys
13:49:01.0356 0x06a4  mouclass - ok
13:49:01.0366 0x06a4  [ 14E01A66D7F55A5086A22E92B5D1D482, 7691E660C7C952A2B7148D9CAB83EC4F52AB7845FF769B517903C8BDDD9F4784 ] mouhid          C:\Windows\System32\drivers\mouhid.sys
13:49:01.0417 0x06a4  mouhid - ok
13:49:01.0430 0x06a4  [ D086985BBC9463ABD18B04A701CF5AA0, F189D83C3BE2977F777F01ABD79113FC00D09359C52C60457B5A1F3EEBBA8CD2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
13:49:01.0472 0x06a4  mountmgr - ok
13:49:01.0487 0x06a4  [ E464A0A92E2E354D07DDA713D3E10DE4, D5CF213F03DF54EF9933027A7A7D4413371C1ECBFF61E4DE818D50FA72C8C5FC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
13:49:01.0515 0x06a4  MozillaMaintenance - ok
13:49:01.0526 0x06a4  [ CCDDE4B4962A7F5BE0A754B48D9E6BCA, C10EF4C3653259B3BB61ED6BDCE0A2D65AC59F1D611B80A31A297C0D0B38C93F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
13:49:01.0579 0x06a4  mpsdrv - ok
13:49:01.0614 0x06a4  [ D1F7B4D73964AC2156732C772EBDC10A, 2519B250D4647FB0E16A12066E7797609E8F11A1AB4F4C740E503CD686159A63 ] MpsSvc          C:\Windows\system32\mpssvc.dll
13:49:01.0689 0x06a4  MpsSvc - ok
13:49:01.0707 0x06a4  [ E24D4FDF59F925D277D481B22D05BF3A, 6FF00B015C405C81C287C609E4260C686450F68C6C677E4D2C6F8D1B7540B3BB ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
13:49:01.0760 0x06a4  MRxDAV - ok
13:49:01.0788 0x06a4  [ 9549298C64834EF719F81C272ED03CD3, 63269DA24C7798AB3F34D15E427EBC7A86CBD65091C9973482B3FD4B26846B6C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
13:49:01.0853 0x06a4  mrxsmb - ok
13:49:01.0872 0x06a4  [ F3887F36C197E14C4DDA517EFFE6A9E1, 21667D8FC73445C9741BC825BFCAE4D7FE19A76143F84BD8184D5D30CC05359B ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:49:01.0933 0x06a4  mrxsmb10 - ok
13:49:01.0949 0x06a4  [ 6F9697BFCC9EF7714CC69E99FEA52D14, CE30F63CA38CB381AE5AFD60B9B8F25627A784620E687D2B792EDF0C9D317E90 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:49:01.0999 0x06a4  mrxsmb20 - ok
13:49:02.0014 0x06a4  [ B518C756312C1C383B18CF0C924AF732, BAE81F81C683AD97C31BDAF25F701B4C212AC93B8F62B18F05C0E48951E1D9A6 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
13:49:02.0069 0x06a4  MsBridge - ok
13:49:02.0088 0x06a4  [ 8C5C7992443917AD41C04C1FB6208315, 16F330EF061B8D8F3052A67C559154F60A5BE87C4AA92BD0FEB9410C60FF6A61 ] MSDTC          C:\Windows\System32\msdtc.exe
13:49:02.0135 0x06a4  MSDTC - ok
13:49:02.0153 0x06a4  [ CC0842323F6A55DFF24BA7ED03E24872, E34C6743F2C29FBD0416BB8CD3172A597DB9903F7AFE89648AB02967A46BBECA ] Msfs            C:\Windows\system32\drivers\Msfs.sys
13:49:02.0205 0x06a4  Msfs - ok
13:49:02.0215 0x06a4  [ 8510450FD3647F2F495D76E26DEAA3C7, B6F333BB1C65921841FCDC98C5CB3D658C0588774B113D38CE4FF1944968FE84 ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
13:49:02.0258 0x06a4  msgpiowin32 - ok
13:49:02.0272 0x06a4  [ 0642FFFD9A66D4BF539142D2EA3B7107, 48A6B9461D8599FC07053066933F5B0B22071F691525E239B874494C80BD2E99 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
13:49:02.0324 0x06a4  mshidkmdf - ok
13:49:02.0333 0x06a4  [ B57054E2DEFDF633509358E1CFF702E6, 713B76B3AB861C22206F1C30CDFBCB8104B06EB5C98B499293CA56175C71A191 ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
13:49:02.0383 0x06a4  mshidumdf - ok
13:49:02.0394 0x06a4  [ 4217EA4A2D4DE7642507BD9598F5C3E8, EF1336CE44A5A0055C7C2015D55EAFBEA3EEA39D19B9DD6256E509F9E91828D5 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
13:49:02.0435 0x06a4  msisadrv - ok
13:49:02.0453 0x06a4  [ 04F6E3444A431FDF50D1498929024E19, 395784475091267E25563FC28E787AF97B309FE3AF6A706D5B0A40723AE4FFB5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
13:49:02.0500 0x06a4  MSiSCSI - ok
13:49:02.0509 0x06a4  msiserver - ok
13:49:02.0520 0x06a4  [ 92D051C41C29C366B1FB7CA07045E56B, 31FA43550595654776358735D87DB67E7496D23B58CE6C7A1E415EFB3F6999CD ] MSKSSRV        C:\Windows\system32\DRIVERS\MSKSSRV.sys
13:49:02.0581 0x06a4  MSKSSRV - ok
13:49:02.0594 0x06a4  [ 4DE3058B79BFB48F79654B46970A02DE, C19CFB2EFAD2D55223B18889B5DDDDAD00778727720A2FCB5BA243E3ABDC4D67 ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
13:49:02.0657 0x06a4  MsLldp - ok
13:49:02.0669 0x06a4  [ 093D83C03E1A1A9947B951234A4C0C9D, 83A824016F33A51BF3390E86AC39E7F380F3C59A107A12BAEE4C32225821D3B2 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys
13:49:02.0725 0x06a4  MSPCLOCK - ok
13:49:02.0734 0x06a4  [ 4699BEC54D996CB5FCCCAC24A3ECCBBE, B0028067036C5C8B922E2AFC4202B4C3EB145DFEA8AAF2CFF215A46399AC356A ] MSPQM          C:\Windows\system32\DRIVERS\MSPQM.sys
13:49:02.0789 0x06a4  MSPQM - ok
13:49:02.0804 0x06a4  [ EF426772B40A5F8B8832D81D948F76EE, F57B57F2954A1617DF2432ECEFFE27E4C6D16660169465D6EA8B32CD5642525C ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
13:49:02.0855 0x06a4  MsRPC - ok
13:49:02.0876 0x06a4  [ E3B9AE489707AE178BF20D94A252BBF2, FEFC61D8BC1ADC0B7B3AAC12F15411B037E1E434057627FBCF3B373DE7EB90FE ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
13:49:02.0925 0x06a4  MsSecFlt - ok
13:49:02.0937 0x06a4  [ B657BE9141A1507B7E3B8A0B3F0EA329, 2FEB56C95D979CC9967A25623B3B2D3896846769212E7E657BCD0AA7EA85F7D0 ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
13:49:02.0976 0x06a4  mssmbios - ok
13:49:02.0984 0x06a4  [ 6FED2BF0C76FBD0178F70E7A5A30ED70, C86FAA9BA4D6B0817B5098F120BB77D00064CC1FBFDF03C6BFEDDFCBE8CA81D8 ] MSTEE          C:\Windows\system32\DRIVERS\MSTEE.sys
13:49:03.0043 0x06a4  MSTEE - ok
13:49:03.0058 0x06a4  [ DA767F51E37113713D660138254A4E3F, CCC80CFD211F69F4D84951F66D94D92C345F72F7B9F56A4BC86F2CB6D7C817D7 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
13:49:03.0110 0x06a4  MTConfig - ok
13:49:03.0122 0x06a4  [ 9CFA4FF187394C636007FB81E15D2E5E, 63295423B7942E53E0946BBE5936F0A0C48FF8B8C7A5B5DF41A383A9339C56A8 ] Mup            C:\Windows\system32\Drivers\mup.sys
13:49:03.0165 0x06a4  Mup - ok
13:49:03.0175 0x06a4  [ 97D7E6AED8F0F70613D4661FEB717AF7, 51152A9B891D0A308505FCC2AE00BBAB89290A1E6E785A311886734BA93F0869 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
13:49:03.0221 0x06a4  mvumis - ok
13:49:03.0252 0x06a4  [ 6CADBF41FC06B6370256C4CD5771B9BA, 9254A2F39E23957323D3CF09D98A4C2423112AF7234FCA76CC447E9DB2B31335 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
13:49:03.0331 0x06a4  NativeWifiP - ok
13:49:03.0346 0x06a4  [ 8AEE13EBE7FFC98C45B0C04C5C6F29B3, E84D2CD5DD0024212A3814D575D384FA1AA34DDDF3AD2506FA33DEE53C0AD662 ] NcaSvc          C:\Windows\System32\ncasvc.dll
13:49:03.0395 0x06a4  NcaSvc - ok
13:49:03.0417 0x06a4  [ C8A80E6C483826A7AF941C86C958B2D7, 28941336B062E0B19A355A47B4BDD376E88F85700ADAECC959ECA016627FD46F ] NcbService      C:\Windows\System32\ncbservice.dll
13:49:03.0472 0x06a4  NcbService - ok
13:49:03.0490 0x06a4  [ A919B5FBFE50A7C1D0C4661E00C2C7AE, 991124BBA769FD2B8F1480290DAA81A5436E6D36989DDE293E265B4B182733B1 ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
13:49:03.0551 0x06a4  NcdAutoSetup - ok
13:49:03.0594 0x06a4  [ F7A91BC77A4DDAAAD4062747B593EA27, DF931F4A901641750C4A950111A59CDD7FF2D196B976FD561714585F2F46AFE3 ] NDIS            C:\Windows\system32\drivers\ndis.sys
13:49:03.0690 0x06a4  NDIS - ok
13:49:03.0706 0x06a4  [ 166C2C9834BE1ED431CEF7E29D50DDEE, 2ACB97C4B50866C8B310355575A14FDFE288477AA17862692621E373880A6BCD ] NdisCap        C:\Windows\system32\drivers\ndiscap.sys
13:49:03.0755 0x06a4  NdisCap - ok
13:49:03.0768 0x06a4  [ F636C9239528DD57CCA634D8AA7EA39C, BEA1328C4B4ED9BFDECE05BB9B4EC69A2DF2CA620DF89DDB5C5A93D7C8ED38FD ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
13:49:03.0830 0x06a4  NdisImPlatform - ok
13:49:03.0841 0x06a4  [ 119553FA6C6820362F49C6F99957B8AE, 37B733F87AE0A9AF78BC5B97D0026094EC06D5CDB370F3D65522E1E68A4117A8 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
13:49:03.0898 0x06a4  NdisTapi - ok
13:49:03.0909 0x06a4  [ 0F196ACC070C0AFEAB38F1562E984814, 735747A8D526F7E1FF7BCF1CF189D9BC16A9D22728CE6F6E41C25C384F276A8D ] Ndisuio        C:\Windows\system32\drivers\ndisuio.sys
13:49:03.0958 0x06a4  Ndisuio - ok
13:49:03.0968 0x06a4  [ 8C4619BFE8F2B59AB9CD61B7C7F1EBF6, 3AE5FD177DCA4EE2BB100CB916DF07B0FC25E76C198EFADD6C831A9644716153 ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
13:49:04.0019 0x06a4  NdisVirtualBus - ok
13:49:04.0034 0x06a4  [ 4D0B4130FA4489E565238693BF08C7EF, D450E272F7F23475506252A77A8750D1184538BABD62FFC6408B0C0ED45C071D ] NdisWan        C:\Windows\System32\drivers\ndiswan.sys
13:49:04.0102 0x06a4  NdisWan - ok
13:49:04.0122 0x06a4  [ 4D0B4130FA4489E565238693BF08C7EF, D450E272F7F23475506252A77A8750D1184538BABD62FFC6408B0C0ED45C071D ] ndiswanlegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
13:49:04.0188 0x06a4  ndiswanlegacy - ok
13:49:04.0201 0x06a4  [ C5EDAC2BF6B08F2C0613A0997728AFA0, A3FD738EDE1859C53CF567FB87FA33E8D80BFCC1CB1E33F2F2603D225C6F3106 ] ndproxy        C:\Windows\system32\DRIVERS\NDProxy.sys
13:49:04.0257 0x06a4  ndproxy - ok
13:49:04.0273 0x06a4  [ 8A74EC3B7EFD422572909D54EE510DCF, 00E66FC076E4BCDCF5E5C8E3328ACA2986815A818C64A3450263AA4B78EEC02F ] Ndu            C:\Windows\system32\drivers\Ndu.sys
13:49:04.0337 0x06a4  Ndu - ok
13:49:04.0355 0x06a4  [ 63D8BC59B39D3C5CF79638BBEF173190, 8F2831A2267D8C4B95D521914F72476B3F69BC928E1BEF2427C7B873E192D13C ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
13:49:04.0412 0x06a4  NetAdapterCx - ok
13:49:04.0422 0x06a4  [ 538984DAB17A517155E1914621C0DEFD, 710C3EEA56B4A1B613EA72B2188A445F9BB1269729076D64DEEFA78643906304 ] NetBIOS        C:\Windows\system32\drivers\netbios.sys
13:49:04.0463 0x06a4  NetBIOS - ok
13:49:04.0489 0x06a4  [ 19B3776EE853B95924BAEDEF14702135, 7E39B01AB275641A5F4938CB3AE8BDF5140E829CFE28849CDBBF6083C4D62A0F ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
13:49:04.0551 0x06a4  NetBT - ok
13:49:04.0562 0x06a4  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] Netlogon        C:\Windows\system32\lsass.exe
13:49:04.0598 0x06a4  Netlogon - ok
13:49:04.0613 0x06a4  [ EE495A358221B1378EF3F061BFA0E957, 3252DA2B7B959400EF66B39F340021567BF0D05245695F8DDE3C270666417DAB ] Netman          C:\Windows\System32\netman.dll
13:49:04.0664 0x06a4  Netman - ok
13:49:04.0688 0x06a4  [ F14FE8786CE58E62F3B9D75D41934EF5, 6031B883066F6311F6B36588AE7C9A7003DD23E82022444494CFD4D8C5C03AEB ] netprofm        C:\Windows\System32\netprofmsvc.dll
13:49:04.0750 0x06a4  netprofm - ok
13:49:04.0767 0x06a4  [ B35F1AA2507385B77764BDC569622430, 1ACB22773E56FAC77F398E3FCD7F2552599E5B5BCD4D6AB69AD606556CA42069 ] NetSetupSvc    C:\Windows\System32\NetSetupSvc.dll
13:49:04.0817 0x06a4  NetSetupSvc - ok
13:49:04.0837 0x06a4  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:49:04.0868 0x06a4  NetTcpPortSharing - ok
13:49:05.0112 0x06a4  [ 2D8BE96190FBE41B27FEC87C63F4CDD4, D3A1D37331027CE286B093B9535A2D353EFF4F068055186C2C3FB3048C12A786 ] netwlv32        C:\Windows\System32\drivers\netwlv32.sys
13:49:05.0562 0x06a4  netwlv32 - ok
13:49:05.0606 0x06a4  [ BA532E5655D46193C068EFB59668948A, F9C42557C1A867A9A78930D3B587A7D8307E6202D89365EF3663A8E8C95AD746 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
13:49:05.0661 0x06a4  NgcCtnrSvc - ok
13:49:05.0698 0x06a4  [ 5F46471A72497B6FCF9F8044F3A8F383, 2FE35A8A60F01BA5C8D1B9BF2AACA3D8F5BBBE857AF432CCB93095E38814E8F0 ] NgcSvc          C:\Windows\system32\ngcsvc.dll
13:49:05.0778 0x06a4  NgcSvc - ok
13:49:05.0799 0x06a4  [ F8E8E13C15D503A445AD07C6F9660A0B, DFC5E44A0F796C886A8792D736BFAC2A8BADF8F67AD23AD569B8B3A0E268F13F ] NlaSvc          C:\Windows\System32\nlasvc.dll
13:49:05.0855 0x06a4  NlaSvc - ok
13:49:05.0868 0x06a4  [ C404AC553CABF90F1EB327AC1CA91614, E36F0420E904D6F8F8FEABCCF555E0B43ED4ECA1006A86C625F986B719C5016C ] Npfs            C:\Windows\system32\drivers\Npfs.sys
13:49:05.0922 0x06a4  Npfs - ok
13:49:05.0935 0x06a4  [ D538DBD5654E98804B1AC997B0562A2D, 2D39E0BB9FFDE0FFE1F4D5947739FA459C5E1282DB99A24F82216CF86C44CE76 ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
13:49:05.0986 0x06a4  npsvctrig - ok
13:49:05.0999 0x06a4  [ 80101B43A747AA905A42BDA6CD62B380, 67B3A8ACF1C86F3BFF7BB037D8DE262AB3FFDD32A5CB31D1E66470814DFDE99A ] nsi            C:\Windows\system32\nsisvc.dll
13:49:06.0042 0x06a4  nsi - ok
13:49:06.0051 0x06a4  [ 73CD0852308102CA33AB6C362F786AF7, 98D69243174B0E6F11AF488849A74BDBA52A36C9959E2C7BD468A7F9C44E08BA ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
13:49:06.0099 0x06a4  nsiproxy - ok
13:49:06.0187 0x06a4  [ 08EFFF2FFD9E85CEDBC103B1C514EDBD, 3E61E66CFD378CF6D3062DD27F20992B65BBE64FD93E3D4441DC8E67063D420D ] NTFS            C:\Windows\system32\drivers\NTFS.sys
13:49:06.0334 0x06a4  NTFS - ok
13:49:06.0351 0x06a4  [ 63F0747EBCEA98247EB874051A0C9488, C67F74E1504C18E64E719C5C6828E3716C0120FB8B4844D6B83A1585E7EA5D73 ] Null            C:\Windows\system32\drivers\Null.sys
13:49:06.0401 0x06a4  Null - ok
13:49:06.0418 0x06a4  [ BED83E7AB1E5294B694FE2BB29F1789D, D4BD7D8B71E3EFA38E39CFB6CC58460F3E743BC2550AC6BBC79EDB0865D72413 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
13:49:06.0464 0x06a4  nvraid - ok
13:49:06.0480 0x06a4  [ 818D8E3EE673E953604B470D2174F34E, 22E29445DCC39ECBC1D792B5BCFCC2EA0CFA405CDE29B93793B13A8658B96FCA ] nvstor          C:\Windows\system32\drivers\nvstor.sys
13:49:06.0532 0x06a4  nvstor - ok
13:49:06.0561 0x06a4  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
13:49:06.0596 0x06a4  odserv - ok
13:49:06.0618 0x06a4  [ ABE4E24B7B1E84F9591377EE94646DFD, 63838AD4569B7C74908DFF4CF083C7D0360C58692AEDBF02D1EC88BC2CC2A134 ] OneSyncSvc      C:\Windows\System32\APHostService.dll
13:49:06.0673 0x06a4  OneSyncSvc - ok
13:49:06.0693 0x06a4  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:49:06.0718 0x06a4  ose - ok
13:49:06.0746 0x06a4  [ 3E6C5C05831A79A0891D14697D96805C, 34848FB4D6ED1BDCDF8C9DD2730E633EA24B85720BDE0A9F7984F25AA66579E1 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
13:49:06.0801 0x06a4  p2pimsvc - ok
13:49:06.0830 0x06a4  [ 4F27C92AEE3749BA64411E280CC9C0B2, D2A4272ED9E8ECACD2E9233453E44119029F160E7FAC94FAA0E986327D50F174 ] p2psvc          C:\Windows\system32\p2psvc.dll
13:49:06.0888 0x06a4  p2psvc - ok
13:49:06.0902 0x06a4  [ 102319D1AB9C8AE57ABF4542C15E46E5, BA259E25ED2750F003A895FF8CA87C06DF2A6E5BAFD5E7B6E31BF39A7315B87C ] Parport        C:\Windows\System32\drivers\parport.sys
13:49:06.0953 0x06a4  Parport - ok
13:49:06.0966 0x06a4  [ 42269F1CBE52927874351B1731733B22, 83EA42FF99AB16597232D9D155BEED6421EF31730CBA1B3BD5F577EAABC12E7A ] partmgr        C:\Windows\system32\drivers\partmgr.sys
13:49:07.0011 0x06a4  partmgr - ok
13:49:07.0026 0x06a4  [ 80DAAC28A277CCC83EA1385AED473355, 6EA1581DB1CE4615FF2ACAC771B8C6305C84B5A8BF2DC0CF2FF3202672FF897B ] Parvdm          C:\Windows\System32\drivers\parvdm.sys
13:49:07.0074 0x06a4  Parvdm - ok
13:49:07.0101 0x06a4  [ C83B47DEC66042DD97DDC3D41E538339, 8C9467074EA6A0FAF62BB5A99A657519B255C59A2B5BC6FF2D97C4B4D6FF18F2 ] PcaSvc          C:\Windows\System32\pcasvc.dll
13:49:07.0149 0x06a4  PcaSvc - ok
13:49:07.0171 0x06a4  [ C9C52D44D7B6AA975A61B4A8B5476BC0, CCCF40E0F4939CBEB0B8DB3FEDA1BDFEF8B3973D5524775C38D8055B810B5380 ] pci            C:\Windows\system32\drivers\pci.sys
13:49:07.0230 0x06a4  pci - ok
13:49:07.0241 0x06a4  [ 08E17B65E01DAAB8B2CC3F0614890724, 1338620701E772BE8712E99170403CFAE5B600BCF845BA4AA981F6DA2BCF33E8 ] pciide          C:\Windows\system32\drivers\pciide.sys
13:49:07.0279 0x06a4  pciide - ok
13:49:07.0290 0x06a4  [ 1FD051E1D86C1DB5291BD69D65077DA4, 5E7BCBA03331EE266963E3D5BC064DDF9FBAFD1CDE8211703DD97A5725A2E087 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
13:49:07.0335 0x06a4  pcmcia - ok
13:49:07.0346 0x06a4  [ D22AA1E0C19412A39E4B743BA5B43A78, F04ECD06C3123D07749AA4A04749EE920A8E15F5CF9C1FD17DC549D5CC146170 ] pcw            C:\Windows\system32\drivers\pcw.sys
13:49:07.0388 0x06a4  pcw - ok
13:49:07.0400 0x06a4  [ 0D1809586AB5D1155364357EF69A45AE, A3BC593607926CC03EC0904AB406041173F3CD60D72443C929157EF59579F52A ] pdc            C:\Windows\system32\drivers\pdc.sys
13:49:07.0444 0x06a4  pdc - ok
13:49:07.0485 0x06a4  [ D02A4B0D37D81280B7C448B73435FDDD, 3130B35ED73DD534B1763E16673F6AAF4F9F59FE075C5360F4886481BB8E71E2 ] PEAuth          C:\Windows\system32\drivers\peauth.sys
13:49:07.0588 0x06a4  PEAuth - ok
13:49:07.0653 0x06a4  [ 0A0D6BF8E93ADA8F8B8BE0ADB9CD20C6, F06AEE4A9787461254488A9E9AA3B08FFF99FE3299BB33D5A4D5D356E051771C ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
13:49:07.0781 0x06a4  PeerDistSvc - ok
13:49:07.0796 0x06a4  [ C2DBE18F68AA0C9508587FFACB794D8F, 39B75BF33DC2BF339EB3288AE1DD68B7220E0B0A29370706D7ADDB1B7A2EBAD2 ] percsas2i      C:\Windows\system32\drivers\percsas2i.sys
13:49:07.0835 0x06a4  percsas2i - ok
13:49:07.0846 0x06a4  [ 21E6E1D427806D971D553CC0DAF9BCA5, 59AA1690B99805DDD806FC818FD16EB8FDCE986E70882A5F3D2D075321DADF6C ] percsas3i      C:\Windows\system32\drivers\percsas3i.sys
13:49:07.0888 0x06a4  percsas3i - ok
13:49:07.0949 0x06a4  [ 985FDF6931077D696A162BB38E1ED25F, 866EE5F34A3F498BF939AD1F3ECEC2C7C3623BFEEF40EFA96B29B6DB490C7AEE ] PhoneSvc        C:\Windows\System32\PhoneService.dll
13:49:08.0026 0x06a4  PhoneSvc - ok
13:49:08.0043 0x06a4  [ EE804160B61FACC25D11C3CCB273B10C, 898B9DA62FDC038E828758DE958F93F839F1CD4406BDB89DBB5C85A565B1B03E ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
13:49:08.0093 0x06a4  PimIndexMaintenanceSvc - ok
13:49:08.0162 0x06a4  [ 0FAA756716218E68D46F9E2FEE624242, B564D84CBB5BC83379DE99DD0A85082238562B539E9B0E775E424EA8CB5BF512 ] pla            C:\Windows\system32\pla.dll
13:49:08.0285 0x06a4  pla - ok
13:49:08.0301 0x06a4  [ 0DF131F7F00E34B6C9DA053E55A80AA4, B3CA50986884B00B67EF1BB3910CA60FFEB4EA3AB9D08CBD6E82E792B650128B ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
13:49:08.0359 0x06a4  PlugPlay - ok
13:49:08.0369 0x06a4  [ 98C7DF7455A5F844EEFE0C0310CFC2DB, 67543EB480F7D1AB24E93CC5ACE40DD6ABC3BE63047F4DA64D5D682B2832AB99 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
13:49:08.0413 0x06a4  PNRPAutoReg - ok
13:49:08.0431 0x06a4  [ 3E6C5C05831A79A0891D14697D96805C, 34848FB4D6ED1BDCDF8C9DD2730E633EA24B85720BDE0A9F7984F25AA66579E1 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
13:49:08.0488 0x06a4  PNRPsvc - ok
13:49:08.0510 0x06a4  [ 7AF808286EDF23A486F1D8203EAA04DE, 41B95BD98176A2485E929E79829C5ABB6BAC55C90C55F677B1E5B6429970581C ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
13:49:08.0564 0x06a4  PolicyAgent - ok
13:49:08.0583 0x06a4  [ EFD8B7C6843CB9D4EE3485AAD1EFBF51, 9E8819BD2EAC1A210B0C1A20A7A2A38674BA9EC716C18C860DC930CB6D61FE7B ] Power          C:\Windows\system32\umpo.dll
13:49:08.0632 0x06a4  Power - ok
13:49:08.0644 0x06a4  [ D688353B3F783BFA1A4BC0FAD178271F, 2E7AB5076A8AB13F6430CACEB1DA1D21E0BC75DBF36049D51E8636C5DE8139F6 ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
13:49:08.0707 0x06a4  PptpMiniport - ok
13:49:08.0816 0x06a4  [ D0818657648366B03C7CB4AA2DCED253, 2AC0FB8B679F51C6EBF5346F75AC543797EA1617D1F69A2830F305823AB7B35D ] PrintNotify    C:\Windows\system32\spool\drivers\W32X86\3\PrintConfig.dll
13:49:08.0994 0x06a4  PrintNotify - ok
13:49:09.0016 0x06a4  [ 2ED95B75DB64C871A8C613144A0C3162, 9966B2E22BFAA94CFED092A0C929FF329C27156D2F746D225919406E15EF9CCE ] Processor      C:\Windows\System32\drivers\processr.sys
13:49:09.0072 0x06a4  Processor - ok
13:49:09.0092 0x06a4  [ CEF5388090C7BF568DC2F9F1EF3E0327, 8430198B92BCBB17620221039C202CE1C36EA4E597D17E401BD704AED8DAD5A5 ] ProfSvc        C:\Windows\system32\profsvc.dll
13:49:09.0148 0x06a4  ProfSvc - ok
13:49:09.0162 0x06a4  [ B825DF8604FD4491E85B2BAC084680FC, 9336CD2658B169A0797C79B9CD8FD96FA1DBB44CEEA3F4E79547BADF5E2DBDED ] Psched          C:\Windows\system32\drivers\pacer.sys
13:49:09.0210 0x06a4  Psched - ok
13:49:09.0228 0x06a4  [ C0C426DB80A332672B9648C595BD5D1D, FE00DADA570CF5DC827FA8A13DAFDC17B05EA06F203F2F535866072692D47D60 ] QWAVE          C:\Windows\system32\qwave.dll
13:49:09.0281 0x06a4  QWAVE - ok
13:49:09.0293 0x06a4  [ E418B13CA54FD910B731E6740C2D9890, C9DE1E03391987BB05EE99D846E9E06BBAD8E2D65AC611EECD73353AD63D0760 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
13:49:09.0342 0x06a4  QWAVEdrv - ok
13:49:09.0351 0x06a4  [ 63C90667A3D22FE239164EDC12B5C763, C216E004CD815DB346FF0199AE733787D6B156EA9EB68A03AC68D5C8933B7C55 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
13:49:09.0400 0x06a4  RasAcd - ok
13:49:09.0429 0x06a4  [ DD661FB42A6BE5AD95F1B37AF215F01E, 7B6A6FC72EE38BF318FB0787F117BBBEC189A25DFCC39C969C905F9924B0290B ] RasAgileVpn    C:\Windows\System32\drivers\AgileVpn.sys
13:49:09.0484 0x06a4  RasAgileVpn - ok
13:49:09.0496 0x06a4  [ FBFB61A337B298D1A9CA811F6E9EF038, D4D631CADA79F65D97108377772EC54BB7A4DE24B501656EF34647B485B7568B ] RasAuto        C:\Windows\System32\rasauto.dll
13:49:09.0541 0x06a4  RasAuto - ok
13:49:09.0554 0x06a4  [ 26F09741A8FF5EE03C66B33EB5C2A7D2, 82586D05A798BC7FBCCF144F0C0ACE7E430025E9B1BE8C5EC04A30C720DB15DB ] Rasl2tp        C:\Windows\System32\drivers\rasl2tp.sys
13:49:09.0614 0x06a4  Rasl2tp - ok
13:49:09.0643 0x06a4  [ F7C88EF77BDFD6B287930C87ECDCC161, 7BD1F41BBB4CBF9EE144933A15821CA70B316896C2B8330C5D00ED9CF835253B ] RasMan          C:\Windows\System32\rasmans.dll
13:49:09.0716 0x06a4  RasMan - ok
13:49:09.0730 0x06a4  [ CF3C50512A5F98DF406BAC8BFB3CF3EB, 463455E808AEAC658511B6A9A80B79B2C9921CAFEA16C7AF2ABED1FCE2B33269 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
13:49:09.0783 0x06a4  RasPppoe - ok
13:49:09.0795 0x06a4  [ 57E6CD6C4CB8418955402682EB13CD8C, 6252E6FB4B5A6DCDF6B81975D5E8F5598C642A83A4C95286A48A9E76EF674965 ] RasSstp        C:\Windows\System32\drivers\rassstp.sys
13:49:09.0853 0x06a4  RasSstp - ok
13:49:09.0876 0x06a4  [ 6764CDF0BF3B63387255A29999471BA8, 9226E93958146BCAB3177D141752F579C2FC3AEB5E1DF9887A038A487EC0496B ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
13:49:09.0933 0x06a4  rdbss - ok
13:49:09.0953 0x06a4  [ 3FF15051B75EA5D575690E6EAE00A484, D07ABD771418B287D760F5DFA8570100245AF2AEE79D47CC483BDA50D57F862F ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys

pingodoce 06.01.2017 14:13
Code:
13:49:10.0007 0x06a4  rdpbus - ok
13:49:10.0020 0x06a4  [ F064A9E33658E8A73280AE8AA5723C59, 7CA4992F2AC4470F9E08F2FA0A8F62211149AECDD6838885B97BD9DBF4702986 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
13:49:10.0077 0x06a4  RDPDR - ok
13:49:10.0097 0x06a4  [ AFB4D0A3BBD65FF57199C5FFBDC480B2, 152159102226F11EAA8BCDF1E19D76FE5B964F26ED2D35E7E210E61BFDD6BB22 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
13:49:10.0138 0x06a4  RdpVideoMiniport - ok
13:49:10.0154 0x06a4  [ 50BF0AB46CB3551294CBCF5798539785, 003C2552C5AAC0EC925E487572C484E2BCDC0EB951FD2A0B5D45230737CFB288 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
13:49:10.0210 0x06a4  rdyboost - ok
13:49:10.0246 0x06a4  [ 35BA17FF927B79EDDEE436ADEB98EF21, 7409F4FAA7641D6C7971027BDA848A50E273561C0F99ACC3DCD37DC51A779A82 ] RemoteAccess    C:\Windows\System32\mprdim.dll
13:49:10.0308 0x06a4  RemoteAccess - ok
13:49:10.0323 0x06a4  [ 0FBF0AA8506AF66C0EF191CB2D3F5BDA, 585C245D4263227972B7654EC5DB131E69D6D5967C005F3C07A73079B1F80D58 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
13:49:10.0380 0x06a4  RemoteRegistry - ok
13:49:10.0405 0x06a4  [ 120A37CB8639F0F89DD142826FB6E89D, 75688B8E706C71FB89EB743FC69904E1EAE2C1DB3A6AAA7ED64D12DE5DA66506 ] RetailDemo      C:\Windows\system32\RDXService.dll
13:49:10.0475 0x06a4  RetailDemo - ok
13:49:10.0489 0x06a4  [ AD8F8A14C13E35CF8C3150C61BF47492, 2AB8A19C58BC0D09A7CD88726C5512DAC6B7C62175928298841BE2164348FE33 ] RmSvc          C:\Windows\System32\RMapi.dll
13:49:10.0536 0x06a4  RmSvc - ok
13:49:10.0548 0x06a4  [ AF4D1F6CB8DF6C2146586951BAF49D04, A3DC9FC28CD54D5D920950268B3FD96F06F1FD5A4D121EE3D475B9BE3EA56996 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
13:49:10.0593 0x06a4  RpcEptMapper - ok
13:49:10.0604 0x06a4  [ B9B285FA98F1F2575FA6E4BDC2A80A06, 7193FB715B60AC83FA528316E5291477ABBC404996FE71133044A03D5ED14A88 ] RpcLocator      C:\Windows\system32\locator.exe
13:49:10.0668 0x06a4  RpcLocator - ok
13:49:10.0706 0x06a4  [ 16C4E1708C9574B5CC9A32324FCE51DE, A7D99F2A6B254B5E9532CE957BDDE339D6D2281290A4ABE6B8E497E9D4872D05 ] RpcSs          C:\Windows\system32\rpcss.dll
13:49:10.0801 0x06a4  RpcSs - ok
13:49:10.0816 0x06a4  [ F3D1D3148CE384C8143F05452A2FAC91, 15BB4412078B1BB428EF5864CDED360713709A540D1E1A5A2EE19F0D9307127F ] rspndr          C:\Windows\system32\drivers\rspndr.sys
13:49:10.0869 0x06a4  rspndr - ok
13:49:10.0878 0x06a4  [ 4C98A80A7C43B709376598F75D0AB704, 98E71FA3C71FEC6DBD253091DB4817500648A0E593D70E90576B855CB5E6365F ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
13:49:10.0927 0x06a4  s3cap - ok
13:49:10.0938 0x06a4  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] SamSs          C:\Windows\system32\lsass.exe
13:49:10.0971 0x06a4  SamSs - ok
13:49:10.0987 0x06a4  [ F97AE73A2A532FED0A018E437DB1B410, 2F4402357A83666245A9C66BA792C90D75A9CF272E366E3444933791628BE2FC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
13:49:11.0030 0x06a4  sbp2port - ok
13:49:11.0046 0x06a4  [ 9C634680E53ECE17B61472EA2D680208, FE0F599AB1E42E38E105009141A7F0DF08E0B8B2ACBA50AE15841E3DD6ED32AB ] SCardSvr        C:\Windows\System32\SCardSvr.dll
13:49:11.0104 0x06a4  SCardSvr - ok
13:49:11.0118 0x06a4  [ 2B5CAE7ABF1B2916EDC22A9BAC5B031E, 91C27DE8DF833C102D042087786DA231596E14A62E5682F9C06DA9F0950C4AF5 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
13:49:11.0170 0x06a4  ScDeviceEnum - ok
13:49:11.0182 0x06a4  [ C49723BB449D63A1C0BAB91CE5482DBC, 2C96C10E6C9287DA6393F9F684DF701402337CDE06ABFC9E1FC5283A5AAF4777 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
13:49:11.0238 0x06a4  scfilter - ok
13:49:11.0271 0x06a4  [ 959E10CACAC2208310C6EF595248DCC0, 82B423F83B90282B4023AB39FC1D1C0BABECDAE49E5459475C0D8046A4525ADE ] Schedule        C:\Windows\system32\schedsvc.dll
13:49:11.0357 0x06a4  Schedule - ok
13:49:11.0374 0x06a4  [ 1D6A243ECD54F7CC294B28946F6B5B33, 7A7F19ABD4B6D73121466B4D8649BBF375034B293FBDFE02A8982D09AA9E6393 ] SCPolicySvc    C:\Windows\System32\certprop.dll
13:49:11.0421 0x06a4  SCPolicySvc - ok
13:49:11.0435 0x06a4  [ 9790B97C403208C61198BB0C2A4DAABC, E2A3AC7FFF064B3849135E3771E7246845B84664147014A06265835D451DB07D ] SCR3XX2K        C:\Windows\system32\DRIVERS\SCR3XX2K.sys
13:49:11.0481 0x06a4  SCR3XX2K - ok
13:49:11.0498 0x06a4  [ 94AA0D516E1186B671FDB1F9A050309C, 01F2881DF3EC5C22469020E37875E1B37B96BCFCDDA9111DD756C52109F19A8D ] sdbus          C:\Windows\System32\drivers\sdbus.sys
13:49:11.0551 0x06a4  sdbus - ok
13:49:11.0567 0x06a4  [ 4607024D1E475A9E7E2E59FC7429C614, B014D41F88BE47FBBD2AF8EDA477E3630154F944F185C914B8934F1181CDF5C7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
13:49:11.0615 0x06a4  SDRSVC - ok
13:49:11.0626 0x06a4  [ 26C918084DA80A1E019FA54B57582289, 089D9D752492068FBCBD9DD27B4CEB9DDA082563BFE6B29ACC0484D7D9E12A57 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
13:49:11.0668 0x06a4  sdstor - ok
13:49:11.0684 0x06a4  [ EE331C415B3B184642A9FAA38954A93A, 211C25FFA407F1FF664C3CBE7C34F37A5FFE5E485ACD18985AE5512B7076C169 ] seclogon        C:\Windows\system32\seclogon.dll
13:49:11.0729 0x06a4  seclogon - ok
13:49:11.0741 0x06a4  [ EB32C35D4EB4D058C397A3EE92DB082C, 5BA376B64F202E1E82AE7386CCD1B81EE123780F6A75F17535EB9791C2DA82BB ] SENS            C:\Windows\System32\sens.dll
13:49:11.0788 0x06a4  SENS - ok
13:49:11.0859 0x06a4  [ FA3D960943CAD952FB2280E8BA183736, 32C2C086902139E4AF9793B75DDD061EC4BFFEFC04C75F08B806F1C79F1F3D00 ] Sense          C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe
13:49:11.0954 0x06a4  Sense - ok
13:49:12.0006 0x06a4  [ 19A4E4C9A4EF2904BCE49616DD50C03D, C14EE41A37DE3AEA3543D62D6F6234BB911D8958FEAB27C3E3BF38DDA2B20738 ] SensorDataService C:\Windows\System32\SensorDataService.exe
13:49:12.0094 0x06a4  SensorDataService - ok
13:49:12.0117 0x06a4  [ 238FEBCC332BED9E71ECDF2CD2A4FE70, 3A2220D2E08ADD98E201C0A6211B04D772C7747A1D4653EB1787DCF80B046142 ] SensorService  C:\Windows\system32\SensorService.dll
13:49:12.0174 0x06a4  SensorService - ok
13:49:12.0190 0x06a4  [ 24E024F7010DF54D232E5FEFD0E35076, 21A3BDA1C6F633611D508FFE2E3DB2190CCEAAC50FD3B70D4A08652BBC642AE5 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
13:49:12.0244 0x06a4  SensrSvc - ok
13:49:12.0260 0x06a4  [ 3AF853CC0C6690BEFD6645FBDB45CF39, 569706FA305BF3DFE70D341B46615802DE0EB117AF5CD278EEF5C94790BDE3A7 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
13:49:12.0303 0x06a4  SerCx - ok
13:49:12.0316 0x06a4  [ 4B7E7F5E4C4F585BB23BE0FE031DA2B4, DD5619C08A5792DA92F230052536E00B03249A12042DEC90700BD641CD82EB74 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
13:49:12.0362 0x06a4  SerCx2 - ok
13:49:12.0373 0x06a4  [ 87A300D27D76E281A0077020AA46B105, 906F0118D16F5A2997FBB5C95DBAA0382DF02F04DB033917E81CB9381C3E67CA ] Serenum        C:\Windows\System32\drivers\serenum.sys
13:49:12.0421 0x06a4  Serenum - ok
13:49:12.0433 0x06a4  [ F3635BECE1FA3BACAD12C93CDEE45A8B, 6F07C06FE5DC550BAD71175A354FC1E21D6A729DCF6BD3970A1D0D89597C64B2 ] Serial          C:\Windows\System32\drivers\serial.sys
13:49:12.0492 0x06a4  Serial - ok
13:49:12.0503 0x06a4  [ 3DD6073C72024027EDDDD41B7D1CDCAD, 3A5FD257774E78217195BC257DC29DEC25C20CE690928729554380722A9D52F9 ] sermouse        C:\Windows\System32\drivers\sermouse.sys
13:49:12.0552 0x06a4  sermouse - ok
13:49:12.0590 0x06a4  [ EB4F3BDE38ABF0AEECDFEA76E2CB1EFF, 94A3DC0F7A9D33B1BFA5F61FB21883A97BAE4A013B1CCAD7DC7A1C450708BEEE ] SessionEnv      C:\Windows\system32\sessenv.dll
13:49:12.0649 0x06a4  SessionEnv - ok
13:49:12.0659 0x06a4  [ 1B4A5247D0F167F8361C16A59478D5C8, A662312F63C0DA78D67907DE56954BB3D2AC7E1B84619BF32F625C7A564AF677 ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
13:49:12.0708 0x06a4  sfloppy - ok
13:49:12.0738 0x06a4  [ 01B428DA0C4EB6F97633B3E457B389B3, F5F8F237283A263AE3C08B81E000D5FA5A7D2274CAD3EAC736E07F3E76499E4D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
13:49:12.0802 0x06a4  SharedAccess - ok
13:49:12.0835 0x06a4  [ 25FD6DC3D4EC699E4EF5CFB91BFC6ECF, C396BD9E892146768AA6F63DFD28ECA57E3E5A16A5681595CCD08D7FB2F093D3 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:49:12.0914 0x06a4  ShellHWDetection - ok
13:49:12.0930 0x06a4  [ 48E8F5FAA0D397A555D39544B9471BAE, 3895678514051D11985107C70A6E57865C90BC5922AD36EDC28C37FDC7BCEFE2 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
13:49:12.0984 0x06a4  shpamsvc - ok
13:49:12.0998 0x06a4  [ E1A38396A6434446F265ECE72A375C5C, 2584661E9C784A07C14BCF0E1D79940C750E45480843DB949CE23467FA7480E6 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
13:49:13.0038 0x06a4  SiSRaid2 - ok
13:49:13.0050 0x06a4  [ 407A47319F097271CA1FF7ADFD13CD82, 7AFC9126AC85EBF6B17022AA95C62E09D9E033EFEB4AC1ACD63F72CA13443FF8 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
13:49:13.0092 0x06a4  SiSRaid4 - ok
13:49:13.0103 0x06a4  [ 71C635D7796D394138BFFBB8C2559CFB, 0A2D7B7720781C8A3A318C1E58B9F8D27BCA3E918E88C230F9F9EF5210B2344E ] smphost        C:\Windows\System32\smphost.dll
13:49:13.0147 0x06a4  smphost - ok
13:49:13.0170 0x06a4  [ 8512CFE5DDC918C31BADD397B8DCB703, 4810CA8155BECF1815963EC9C35BFF3029CB7CB1C28751123BEDF60F20A6AD1E ] SmsRouter      C:\Windows\system32\SmsRouterSvc.dll
13:49:13.0237 0x06a4  SmsRouter - ok
13:49:13.0261 0x06a4  [ 7D21A60C6BF71645B080B42C14FDF1B2, 0BF8EC8A347F1A12E91DE14489CFC2317612AD22CF234046A71E2C0E0AA83C1A ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
13:49:13.0306 0x06a4  SNMPTRAP - ok
13:49:13.0330 0x06a4  [ 8152DD698E377476C787B91F297A32BB, 1A7152C108BF465E2678F196B35D50BDF06C51C4040F2359642BEFA4749E672B ] spaceport      C:\Windows\system32\drivers\spaceport.sys
13:49:13.0395 0x06a4  spaceport - ok
13:49:13.0409 0x06a4  [ 0F36602CAE7758CD4086EEF6FF83D47D, 225BBCC3BF6B578EB395F2D28A21518CFB7FB4F687A43B8B1AECF5BCFB94E44A ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
13:49:13.0453 0x06a4  SpbCx - ok
13:49:13.0464 0x06a4  [ 3FA2E254BFBCE52B3C6F1BF23AAB6911, 1E94D4E6D903E98F60C240DC841DCACE5F9E8BBB0802E6648A49AB80C23318CB ] speedfan        C:\Windows\system32\speedfan.sys
13:49:13.0494 0x06a4  speedfan - ok
13:49:13.0521 0x06a4  [ 809A5855DD62DBA26E48C986B12B1860, 637D82140848CE6C7CB8AF216A8DEABB4D4B81F45229AE54FEB0D2179007B337 ] Spooler        C:\Windows\System32\spoolsv.exe
13:49:13.0590 0x06a4  Spooler - ok
13:49:13.0771 0x06a4  [ D3A29AF4ED4675630BE468D8AC1D1FC3, 1ACBF70E31D35FDA1B135EB091743A88464949C9B2AD6205C8251EA08CD31B53 ] sppsvc          C:\Windows\system32\sppsvc.exe
13:49:13.0993 0x06a4  sppsvc - ok
13:49:14.0033 0x06a4  [ 3091FC9281816A0AA9F4C0FBEA4449CB, EC0E87A4C52319C3FB643ADD525C5B478EFB35FC3069E68606D2F540987365F8 ] srv            C:\Windows\system32\DRIVERS\srv.sys
13:49:14.0102 0x06a4  srv - ok
13:49:14.0134 0x06a4  [ 9D7897177101D7D3CC76FDF0772E3000, 137A7D5EBABB345A194EB5346183CA2277DA103DA730EDDCB1EA8341D67EC401 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
13:49:14.0231 0x06a4  srv2 - ok
13:49:14.0254 0x06a4  [ 43182E4DEC2794B7CB5B944F2F04C2AC, 1ADE7DBC17D2FDE5A7059F8104CE240CD60F8940280384CE2571318A072D2F0F ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
13:49:14.0312 0x06a4  srvnet - ok
13:49:14.0329 0x06a4  [ 1D2163A2238D7003A775ECB3C89BB996, 0EC3AEFAA19C27E4BDD966DDFDD96DBD0B2D232CF443B857618D7CA0A46FAF9B ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
13:49:14.0380 0x06a4  SSDPSRV - ok
13:49:14.0396 0x06a4  [ 234194CD4BA69FAC3C0F87550316E55D, 45881DF6E8B5ED032BFC89931DA526BAA828AB5C5DBCC05484C251FD8A95F1E1 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
13:49:14.0449 0x06a4  SstpSvc - ok
13:49:14.0575 0x06a4  [ FE68CCE3D2985526FB00C692E92E0FE2, 7C514F45398296A96C14B2C3EA77DA36970635BE7568D0FA24DB0D870B36379D ] StateRepository C:\Windows\system32\windows.staterepository.dll
13:49:14.0792 0x06a4  StateRepository - ok
13:49:14.0812 0x06a4  [ EB59E7B245151F65A44408EC6518D0B1, 771106419A24A684F8AD006597DFAA8D350C16C677E1F574467C8F9D666AA4E5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
13:49:14.0853 0x06a4  stexstor - ok
13:49:14.0880 0x06a4  [ 68312F861BFA5CE2E02F23DB5F2669AA, 2DBC40B18F576004F4828275808473AA224400B342EB2D33D48CCB7231F7FACA ] StiSvc          C:\Windows\System32\wiaservc.dll
13:49:14.0950 0x06a4  StiSvc - ok
13:49:14.0965 0x06a4  [ 3471008FDDA7CC58AAF8F28B246D0953, A6DB9787159EF230A42929F69121E3E4E5FDE13BFD97CBDD450C9ED4668C30AC ] storahci        C:\Windows\system32\drivers\storahci.sys
13:49:15.0016 0x06a4  storahci - ok
13:49:15.0028 0x06a4  [ 42DCF1819631593A957C1F04E8198641, 72FB0FF762D59277DECFC0AE01CA120741098BA84971BE3669EB2E41B765A5A4 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
13:49:15.0073 0x06a4  storflt - ok
13:49:15.0084 0x06a4  [ F6BF76CC2EA03262838F2DE6975BECD4, 1560FEF2E9AF1FDFD9C8CA5DFCCCEA516CCF11B3C2066A07A0AD7A00A4762D1D ] stornvme        C:\Windows\system32\drivers\stornvme.sys
13:49:15.0128 0x06a4  stornvme - ok
13:49:15.0142 0x06a4  [ E7ED6F07B04B5886370691B39BA7761E, 97FF2621A4FF043ADCEB7740CDC647293300C4431277346F207061546FA3A54A ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
13:49:15.0202 0x06a4  storqosflt - ok
13:49:15.0222 0x06a4  [ A02F1DC0A416FDE7D6F98896592669F2, D3A212CF08E015F6FAD90EEAA2A7E513960FEE979117267006416F5A8B13E755 ] StorSvc        C:\Windows\system32\storsvc.dll
13:49:15.0282 0x06a4  StorSvc - ok
13:49:15.0295 0x06a4  [ F8C3E2482BA5D34BA24FAC60DEAD9A2F, 911BBEF6B02B5E0905450E0DDA731CCBCB1D3CC9B77B960555D976384700F744 ] storufs        C:\Windows\system32\drivers\storufs.sys
13:49:15.0334 0x06a4  storufs - ok
13:49:15.0345 0x06a4  [ 926CF05CE1AA19C0979C617B7E04EDC9, 75B13969070710CA7D3F32745362656612238CC6A53A0F80D4175968CEE7A389 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
13:49:15.0385 0x06a4  storvsc - ok
13:49:15.0395 0x06a4  [ D71C4D8DEBCDC19B1ABAB63E39BAEECE, 7B211911FA5E6D9F115519647E03C49404A7614225505630F74EF81B52AB3434 ] svsvc          C:\Windows\system32\svsvc.dll
13:49:15.0444 0x06a4  svsvc - ok
13:49:15.0455 0x06a4  [ 179A21FDBF70D7BBD1461CC0EE4AC553, AC5EAF8E870F49595CA1F6AA6AB487757860DBFB3A8AF5B1B4B44D283ADCA08D ] swenum          C:\Windows\System32\drivers\swenum.sys
13:49:15.0497 0x06a4  swenum - ok
13:49:15.0523 0x06a4  [ AD9F34D0BC67A4643BB217E8B6C8DAA0, 014F1927F79EF491C00C247278A856CE4125A7B26F871F74FC56FB7FC32FE3AC ] swprv          C:\Windows\System32\swprv.dll
13:49:15.0586 0x06a4  swprv - ok
13:49:15.0599 0x06a4  [ E642BE03D50EA1F13935588123513598, 83B7A29AF398285A688F5655CF1440993FDC3DC41C47A7E711CC7019135D0D8D ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
13:49:15.0650 0x06a4  Synth3dVsc - ok
13:49:15.0667 0x06a4  [ 3D6316279C3540AA268BF025F4621EF3, 042C268DD1A98BC91721DAB31F20AEC06EF086EF8AED2BB05CF138106ED0C7DB ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
13:49:15.0694 0x06a4  SynTP - ok
13:49:15.0730 0x06a4  [ B1031B316803002E68DFD56C9A70C355, ED34170782EDA25C72BECC37CE16F4D9E3CD580B59067F268AAEC28575E25FBB ] SysMain        C:\Windows\system32\sysmain.dll
13:49:15.0821 0x06a4  SysMain - ok
13:49:15.0844 0x06a4  [ C3E7921B1BD1057E50B893C90FED240C, F60DC85276D7CA35D7710047ECFCC4490D1F01DDBBCD3355FB9E971B7AD2AA93 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
13:49:15.0899 0x06a4  SystemEventsBroker - ok
13:49:15.0914 0x06a4  [ 731C95317C6D74A9956875BF248B6BE6, FDBB0B793AEB06A508B862B2E5EEEF5DEC1FAFBC60BEAE5B7E1F76EAAE8C9CF0 ] TabletInputService C:\Windows\System32\TabSvc.dll
13:49:15.0964 0x06a4  TabletInputService - ok
13:49:15.0982 0x06a4  [ 0CBA864DBB0E503101C746BEFC01BBDE, 33B61454E0EF068C903FCEB4D0682A394F6150B8ADB5C6568C29EDE8327B10BB ] TapiSrv        C:\Windows\System32\tapisrv.dll
13:49:16.0042 0x06a4  TapiSrv - ok
13:49:16.0119 0x06a4  [ 36E88DE70C5D3C7C35531A1F775FCFC2, 4B8054B6231CBEE26FF8F60D9DC0C273B2ABA52F9FA6D29E76DF5DBFBFE6C9E0 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
13:49:16.0270 0x06a4  Tcpip - ok
13:49:16.0352 0x06a4  [ 36E88DE70C5D3C7C35531A1F775FCFC2, 4B8054B6231CBEE26FF8F60D9DC0C273B2ABA52F9FA6D29E76DF5DBFBFE6C9E0 ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
13:49:16.0501 0x06a4  Tcpip6 - ok
13:49:16.0527 0x06a4  [ 1B443D953FA0C54CAB8DD0AFF0B12DA1, 640F755C10EA563D50407FB814BA96ADED52A2943BA4019FCDFECC3D8D73D3EB ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
13:49:16.0575 0x06a4  tcpipreg - ok
13:49:16.0593 0x06a4  [ E8DC8115AE2C912694ACB51BD48D417D, 4931107529CD77F535E7BA574A2CDBE4543DE0E8A68FBCBB0ED072A0FD84299D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
13:49:16.0637 0x06a4  tdx - ok
13:49:16.0649 0x06a4  [ 2DC0F2A9C15BC327D6812A62F895B022, 8CB51EBA9D5355B26BA470BC1C2C42741126ABBBA593F353807A36A72EDE9887 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
13:49:16.0692 0x06a4  terminpt - ok
13:49:16.0732 0x06a4  [ 8938289B183BE6473D502D94586377DE, 6E1F32F59B366058CB174A0E6D809527A95EA09EE7B23A51FCB63B478F8EE9F9 ] TermService    C:\Windows\System32\termsrv.dll
13:49:16.0821 0x06a4  TermService - ok
13:49:16.0835 0x06a4  [ 5413CAA38F5E5496AFFBE6270A2F2A92, 78EE27DCDC611198CC9D4BC8582F0FF4D36AB957D9882CF3DB4B2DF40581F27B ] Themes          C:\Windows\system32\themeservice.dll
13:49:16.0890 0x06a4  Themes - ok
13:49:16.0908 0x06a4  [ 70147D6F6BA11781FEC5EEC2B2CD183C, E8869BD655FDB2B363E47E7579860CCF1EE3AA603FF967874070B40C262F1957 ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
13:49:16.0968 0x06a4  TieringEngineService - ok
13:49:16.0986 0x06a4  [ C424F991494E5674F2E9B3CF9F5F55D1, CC799C9154431763D052AB8B41EFAE71A039EDD6EAC5E6D892E22C8BEF1D2BB5 ] tifm21          C:\Windows\system32\drivers\tifm21.sys
13:49:17.0055 0x06a4  tifm21 - ok
13:49:17.0081 0x06a4  [ B623B8DFFEAF4178029966DAB1556596, 9B79725A1AD4C76D1C41B8242664450A58414B1401DDBCF62DA90DD1B83E9FB2 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
13:49:17.0145 0x06a4  tiledatamodelsvc - ok
13:49:17.0160 0x06a4  [ 91D9BB3E2B956A8EB8843A4F9EA4E901, B0572EB3CA14372905C586CF7F7A52650DC0503278A4DFBAE2256B74636FB55F ] TimeBrokerSvc  C:\Windows\System32\TimeBrokerServer.dll
13:49:17.0208 0x06a4  TimeBrokerSvc - ok
13:49:17.0224 0x06a4  [ ABB71F0B6B1939FDF2CB1E1131530E70, EA0FB91DA733B9B32641F4CAB9966589C0291369182984B65487938993BDD8FB ] TPM            C:\Windows\System32\drivers\tpm.sys
13:49:17.0274 0x06a4  TPM - ok
13:49:17.0293 0x06a4  [ E3B4514D9CA7F9151F49D6217F27AF37, A4FB4DF7E75DB7E222E91357DD584614439C08CF39B1EBBFBC2EE854A31613F6 ] TrkWks          C:\Windows\System32\trkwks.dll
13:49:17.0340 0x06a4  TrkWks - ok
13:49:17.0351 0x06a4  [ 17A95C725623DB689E6AABE46B82EAD5, 729E6A37C533763B4ED31D5F5F940A12234EE0C8E674C6AF5C19C0C70F72010E ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:49:17.0405 0x06a4  TrustedInstaller - ok
13:49:17.0422 0x06a4  [ A3ECB86DB90D0F9A95ADB13686C7F680, D1A2F4841957EE45928E2178623982873A5E1C46F927F68F4F6660DAEB47127D ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
13:49:17.0480 0x06a4  TsUsbFlt - ok
13:49:17.0490 0x06a4  [ 38C939FB0B952054102B0E36FAF8B039, 339A39F90CAB5576EB7DD9F6673F1BBA0CC4BB5F5DE120BC61FEDBC7FD403981 ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
13:49:17.0546 0x06a4  TsUsbGD - ok
13:49:17.0560 0x06a4  [ EE5E794D067A096C246567D0CBB7BF77, 81969C49F50B8EA62367C11872AFA67E5D65391778D337CA6146EE47C4FEC8D3 ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
13:49:17.0615 0x06a4  tsusbhub - ok
13:49:17.0631 0x06a4  [ 9DB33E16FF4D5868EEC877E46A91A8A8, F37FC4F3A9DD4C90DEFD8B2812AF88A212C315C5CA6B5C47B54CC8B8B4BEECB8 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
13:49:17.0686 0x06a4  tunnel - ok
13:49:17.0704 0x06a4  [ B564A572014AE16153544B1104DF878E, 548B59C94DA03AF0034C6AC5A8EE7E4A5D9ACA5E60BBA321BA064BBFB4A3FB21 ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
13:49:17.0750 0x06a4  tzautoupdate - ok
13:49:17.0766 0x06a4  [ 59E4999207E82FDE73C2C084CB9BB942, 340AFF852A244E6C0CD3201130A0366FB7D5B151060814DD9CC3FBDE8B0321C0 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
13:49:17.0809 0x06a4  UASPStor - ok
13:49:17.0822 0x06a4  [ B77AA4582655163B5DB2D20CD8A339CD, 16B839C06091B447DD61EECBA93F79638DA26F21B6E6F9552ABC5EEE6C027E24 ] UcmCx0101      C:\Windows\system32\Drivers\UcmCx.sys
13:49:17.0874 0x06a4  UcmCx0101 - ok
13:49:17.0887 0x06a4  [ 32E88DC1104A3BC7CA4B0D9ABB59BAA8, D589DF17177C074B4CB92E1BC5A0561E7EDC2AAF8E5AD514A8C34D994E6B6DF8 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
13:49:17.0952 0x06a4  UcmTcpciCx0101 - ok
13:49:17.0962 0x06a4  [ 0887EED62FE7BCA5D5A004393127E250, A28C40B31E0121552389F3959E56CFFB4FF34F221457109BEAB6B4F0BC6A7AE8 ] UcmUcsi        C:\Windows\System32\drivers\UcmUcsi.sys
13:49:18.0014 0x06a4  UcmUcsi - ok
13:49:18.0031 0x06a4  [ 2063C0A85FF2EC5902F480B15EF91011, E7B28A45F0D3E2568872B9A38A46625A9F729DC250830E28CB45DC535FC293B6 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
13:49:18.0084 0x06a4  Ucx01000 - ok
13:49:18.0097 0x06a4  [ 5824FA518595A90F9215DBE1C51F91C8, CCAEA4B62BACECB5D09888F91C89A01CA89E552D4346437F850547809E84C341 ] UdeCx          C:\Windows\system32\drivers\udecx.sys
13:49:18.0148 0x06a4  UdeCx - ok
13:49:18.0167 0x06a4  [ 8947C71283391E0FE5527017A91D405B, E72441E0BF2FCF9BFC977EFD0755A812C02FA06CA4435A8AEAC23B5110164AE9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
13:49:18.0238 0x06a4  udfs - ok
13:49:18.0250 0x06a4  [ 06BA4A02C78D112E8CA886898B77EA68, 9351146962E02D85622B4178FA7FC1DDCD8E3724773F076496576BCF248E329A ] UEFI            C:\Windows\System32\drivers\UEFI.sys
13:49:18.0289 0x06a4  UEFI - ok
13:49:18.0300 0x06a4  [ 77491C8F08F6B3C2AE9ABA4DB3A6A1A0, 45046D7600E7CDFE177DC907CCEAE0FC0C048A95F16221866FD0A23B348E95A1 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
13:49:18.0341 0x06a4  UevAgentDriver - ok
13:49:18.0381 0x06a4  [ 3FC5416FE141F45F9182994FFFEA8FFE, 73BE66EA7032CF41421A7E49E47CF4282EBB625B93E16DA903FB1183CCB434CB ] UevAgentService C:\Windows\system32\AgentService.exe
13:49:18.0462 0x06a4  UevAgentService - ok
13:49:18.0480 0x06a4  [ B164D49099D0243474718049B29D4546, A5318D2711E859F0D968FF613463A0ED503EEE1B8B9691553EC0E482D1566FAF ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
13:49:18.0536 0x06a4  Ufx01000 - ok
13:49:18.0551 0x06a4  [ 34FBBDA1849B17F8E97772F8A58CDC22, 63A1ED6398F0FB34D8399403576A30DA2F87407BD692863CBB4831F55BE7C8F1 ] UfxChipidea    C:\Windows\System32\drivers\UfxChipidea.sys
13:49:18.0596 0x06a4  UfxChipidea - ok
13:49:18.0612 0x06a4  [ 8A7B7C41F7796220FE4B9D183403ABCA, 04D90D1858537125A9232F7312561A2F2F15532EAA3F6E027C8926E4F925A27B ] ufxsynopsys    C:\Windows\System32\drivers\ufxsynopsys.sys
13:49:18.0657 0x06a4  ufxsynopsys - ok
13:49:18.0684 0x06a4  [ D80204E8447B30550BC77C97565859E2, DB6BCBBDCDF203C726247EC06EC3E14D3C642222A1320341BC4E8319FE0B916A ] UI0Detect      C:\Windows\system32\UI0Detect.exe
13:49:18.0729 0x06a4  UI0Detect - ok
13:49:18.0740 0x06a4  [ 632C1E517ED21AD5C044205D177F7082, C35B3E6E87E7F2D182A037DC7B4F15824FB7A7DCCC0AC90F681DB774060BFFAF ] umbus          C:\Windows\System32\drivers\umbus.sys
13:49:18.0795 0x06a4  umbus - ok
13:49:18.0805 0x06a4  [ 49C06B189A5714DFD38378FA4059521E, D834D2C4EB34471928F38C0BC74855DD7F1783862DFD0FC986B8ABE17596FE2A ] UmPass          C:\Windows\System32\drivers\umpass.sys
13:49:18.0853 0x06a4  UmPass - ok
13:49:18.0872 0x06a4  [ DE544A44D74FAD98579FF6C6DC7D1684, 5C38B94479039A8921C5854BECA140DCD498E65AD76ABCB93B8EFBCF64E9CC7F ] UmRdpService    C:\Windows\System32\umrdp.dll
13:49:18.0925 0x06a4  UmRdpService - ok
13:49:18.0968 0x06a4  [ 58A2C2CC89D528DE8FE8D3EADC8FBAE4, D682EA1AF11D49B391ABB7AB83A9DFB321534D7A892B5CFD50637AD1C1AEF3E4 ] UnistoreSvc    C:\Windows\System32\unistore.dll
13:49:19.0061 0x06a4  UnistoreSvc - ok
13:49:19.0097 0x06a4  [ AC79703EBF464C6EA2AE2CC65E6878A0, 3DD888BE1189B824455D0F8F5DC91026AE18E3BECB95F68827FA4E659E0AFC4B ] upnphost        C:\Windows\System32\upnphost.dll
13:49:19.0163 0x06a4  upnphost - ok
13:49:19.0175 0x06a4  [ 5B121FF570059764F34C9C3F9E2D8AB5, E386458BF7DACE6BA452260BB8B2E3AFA8A4D21CCCD9931F6D97694871E428EF ] UrsChipidea    C:\Windows\System32\drivers\urschipidea.sys
13:49:19.0216 0x06a4  UrsChipidea - ok
13:49:19.0227 0x06a4  [ D4DC4C2C309053BB93A44F40560F9EBD, A69D950533467F83233CC4A71105E15EEBFA444EFC3B13DF21952E22515215B2 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
13:49:19.0270 0x06a4  UrsCx01000 - ok
13:49:19.0286 0x06a4  [ 6AC432C3C051AD5E99186E364F3A66B8, 9E48D06AF7061B329FE4E4D1F29D360F87ED3A661BA62CCF54C74CD3A358D1C2 ] UrsSynopsys    C:\Windows\System32\drivers\urssynopsys.sys
13:49:19.0329 0x06a4  UrsSynopsys - ok
13:49:19.0343 0x06a4  [ 10B85AC4C93EB71232A31C88E8EA3238, 73246DE85F7C098E34D6A8C607F796AED9D43A1DABD16437832E261259612CD8 ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
13:49:19.0388 0x06a4  usbccgp - ok
13:49:19.0401 0x06a4  [ C7E28A3297CB8C3BE938AFF4095F6EC5, AC0D5D860968ED96D9A24086F52018BC99463321942695D75C1D9712503CDB42 ] usbcir          C:\Windows\System32\drivers\usbcir.sys
13:49:19.0456 0x06a4  usbcir - ok
13:49:19.0468 0x06a4  [ AF30D171BED850525E6A56581B43D260, 56487740DCBAAF87E043A414AF1F1CB45B842FF4B7A6E5E9E5C748B6F1D1D177 ] usbehci        C:\Windows\System32\drivers\usbehci.sys
13:49:19.0512 0x06a4  usbehci - ok
13:49:19.0541 0x06a4  [ 5B15A1C6C27EA30E500E92C197410946, 9514D56B3AFB0B0973163AC06480E04E0AB4A1292EDE582D6CF34E4596A7E28F ] usbhub          C:\Windows\System32\drivers\usbhub.sys
13:49:19.0602 0x06a4  usbhub - ok
13:49:19.0630 0x06a4  [ AB7A95CCB00CBDC4CBB4E566DCCFDE97, 38F9CC1F2BD6BC049F50A85094FE9F36BC8EDB0FE939A1B6C590C86724D6C3DA ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
13:49:19.0694 0x06a4  USBHUB3 - ok
13:49:19.0706 0x06a4  [ B18BE03B2077BA681043BA628D43C55E, B8FF9A2ACEBE3D68D58B49873D4899B93705B1A44FBE146A01C9E4EF91959D80 ] usbohci        C:\Windows\System32\drivers\usbohci.sys
13:49:19.0753 0x06a4  usbohci - ok
13:49:19.0764 0x06a4  [ D8A438D6683D398CF844BD8B0F548243, 4034A459272325138581CCEDC39230A6A2A891854EE2B20DA7CCA5073A804EFE ] usbprint        C:\Windows\System32\drivers\usbprint.sys
13:49:19.0812 0x06a4  usbprint - ok
13:49:19.0830 0x06a4  [ BBBC806581BF4181A874CAB3A7D5D3B7, 401B437A09B057EF967233D34AD8F40B759C860563B97ECCE2A855D947CF0E7A ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
13:49:19.0879 0x06a4  usbscan - ok
13:49:19.0892 0x06a4  [ 147D2178C690782CF4CD175137961739, E940B5385CF92F007CDBC972CF3FF0BC19E0746F0B63F12518A21EC780BBBB36 ] usbser          C:\Windows\System32\drivers\usbser.sys
13:49:19.0946 0x06a4  usbser - ok
13:49:19.0959 0x06a4  [ BAE8E7603769E3A5DC9D14A6EAEBF438, C9E89BA93A24A5EBA59948CD52240C2A124C308946557F7DD9FC3589A7EDB9A5 ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
13:49:20.0003 0x06a4  USBSTOR - ok
13:49:20.0015 0x06a4  [ 011BBB3175DBBA3B2369B2FEBF76C596, 5161FDDF7D525F8E4F9AAE3BA42E618D7C9F1870C7CEF24F69303DE0A3D3AC7C ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
13:49:20.0063 0x06a4  usbuhci - ok
13:49:20.0086 0x06a4  [ 8A3035C326FFF5AF27B60D37218B8244, A07C975D8222891B1578A1279EB373A1CD8887B344324EE66306BEBE0BFBC6DB ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
13:49:20.0144 0x06a4  USBXHCI - ok
13:49:20.0200 0x06a4  [ 3CD3C6C375586AE73D7C5114D350A555, D7B9BB123E25628F7B34068DED16D460DD4B7398487FA6DCF4C48705CC8BB5C9 ] UserDataSvc    C:\Windows\System32\userdataservice.dll
13:49:20.0304 0x06a4  UserDataSvc - ok
13:49:20.0355 0x06a4  [ F4C4C45AB57A2DED6798A571C499BB67, 3B449245C96A7845C439276A371CBAA3FB0969DA579ED4F3A84B77E736A4F250 ] UserManager    C:\Windows\System32\usermgr.dll
13:49:20.0441 0x06a4  UserManager - ok
13:49:20.0468 0x06a4  [ 9AC80232F5A41903164FC69E2B505BFE, 73FB73F40F621382FA6B9C8CA19C10BA2D77CBCCEFE7C3573E8046400206FB03 ] UsoSvc          C:\Windows\system32\usocore.dll
13:49:20.0529 0x06a4  UsoSvc - ok
13:49:20.0544 0x06a4  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] VaultSvc        C:\Windows\system32\lsass.exe
13:49:20.0578 0x06a4  VaultSvc - ok
13:49:20.0595 0x06a4  [ 054BAE75AC02A04A2D49EE2D251DCFE2, B4F8A7C2AB5DAF6A2EA8E1069DD5A81CB5FAC28984299D0A74C1F3533D902762 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
13:49:20.0640 0x06a4  vdrvroot - ok
13:49:20.0669 0x06a4  [ E0081D34E432AE616CD2B40B43EFA9C8, 1E3D7E367AE3B1DE24C499833583ED244A9425BB321107758FFA233BD1AA5DAA ] vds            C:\Windows\System32\vds.exe
13:49:20.0746 0x06a4  vds - ok
13:49:20.0763 0x06a4  [ FE2B69C1FFBE1A51AB1E82B169030D96, 41C3EF746CA14092E3B90572B5CBD19AE3D96406A3D25386CC20860C55069322 ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
13:49:20.0811 0x06a4  VerifierExt - ok
13:49:20.0841 0x06a4  [ CDCD4AFBB61D4D6C2B263FC922B2D708, 977AF1E1B7A9EBAB677C1279A811F593B1844ADFCC2E6547F52A164F56845B82 ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
13:49:20.0911 0x06a4  vhdmp - ok
13:49:20.0925 0x06a4  [ C2A8ABA5BFC09E32489B79E28B2011AF, 92876EEE6AF26237F62E149B2AD10BE5EC52425A79A5EC1898EA807509CAC3BC ] vhf            C:\Windows\System32\drivers\vhf.sys
13:49:20.0978 0x06a4  vhf - ok
13:49:20.0992 0x06a4  [ D4BFDCC6EDAB8BBFAF4208F73C95F2D5, 2D05CD3056DE57F4144A1F169FE3656071A99E0BF6395BEAC60FB25EF634B5AA ] ViaC7          C:\Windows\System32\drivers\viac7.sys
13:49:21.0049 0x06a4  ViaC7 - ok
13:49:21.0061 0x06a4  [ 66317468ED907DF1AF053BB82A71B79E, 28C68377D51CCCFDAB46AE3E0CE4FBF3C3F785E35B0CEBF605A1B29139953683 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
13:49:21.0107 0x06a4  vmbus - ok
13:49:21.0120 0x06a4  [ CAACA09A933CD00E0B5793BF86A8C27D, 173F6ECEC53FACDF047EB586A634F1E95914766067AFFAED4853DD7BF53E91A0 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
13:49:21.0168 0x06a4  VMBusHID - ok
13:49:21.0177 0x06a4  [ E3FEA0FEE08EEBD39CC175824CEBCDEC, 6396624D3F4D8A94A067FFD3D1A1EB63B7BEDA3F834B8C75A5E805E063FF6A6C ] vmgid          C:\Windows\System32\drivers\vmgid.sys
13:49:21.0226 0x06a4  vmgid - ok
13:49:21.0243 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicguestinterface C:\Windows\System32\icsvc.dll
13:49:21.0293 0x06a4  vmicguestinterface - ok
13:49:21.0308 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicheartbeat  C:\Windows\System32\icsvc.dll
13:49:21.0360 0x06a4  vmicheartbeat - ok
13:49:21.0376 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmickvpexchange C:\Windows\System32\icsvc.dll
13:49:21.0423 0x06a4  vmickvpexchange - ok
13:49:21.0445 0x06a4  [ 4CDFD55654E4A7D54555E569A1A83D53, 372DBF5E2CA3B3F96B40B0188086ED9AB713170643AE425B3034E635A5C0FACC ] vmicrdv        C:\Windows\System32\icsvcext.dll
13:49:21.0496 0x06a4  vmicrdv - ok
13:49:21.0514 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicshutdown    C:\Windows\System32\icsvc.dll
13:49:21.0563 0x06a4  vmicshutdown - ok
13:49:21.0579 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmictimesync    C:\Windows\System32\icsvc.dll
13:49:21.0631 0x06a4  vmictimesync - ok
13:49:21.0647 0x06a4  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicvmsession  C:\Windows\System32\icsvc.dll
13:49:21.0695 0x06a4  vmicvmsession - ok
13:49:21.0715 0x06a4  [ 4CDFD55654E4A7D54555E569A1A83D53, 372DBF5E2CA3B3F96B40B0188086ED9AB713170643AE425B3034E635A5C0FACC ] vmicvss        C:\Windows\System32\icsvcext.dll
13:49:21.0766 0x06a4  vmicvss - ok
13:49:21.0780 0x06a4  [ BE964AE62A6D50974A55316DEF69024B, EA6AF0CDD8A5D8539430BA606B6E1715D2EB8260C468E9AE796B317E46FD166C ] volmgr          C:\Windows\system32\drivers\volmgr.sys
13:49:21.0823 0x06a4  volmgr - ok
13:49:21.0845 0x06a4  [ F298FFA396D2D080C037192B53EA50FD, 2ACE3483654B6B30016A61580AF2AB26AFA1E78D8ADE441A9B6DBAE16FFBC192 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
13:49:21.0901 0x06a4  volmgrx - ok
13:49:21.0927 0x06a4  [ 8FC38A2B3D7A58A69065F43479E848FA, 34799558BD16BCB69798C4F3B16E27B67F0FF42109592057620581AE2DFE4FD1 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
13:49:21.0989 0x06a4  volsnap - ok
13:49:22.0002 0x06a4  [ C70060C3A0A7F743A4B19BA15C547F3F, 713DFEB429AB2D581DE2BE8A296DB84BB8DCF3462400FC5C68A3378A3E3230A6 ] volume          C:\Windows\system32\drivers\volume.sys
13:49:22.0042 0x06a4  volume - ok
13:49:22.0056 0x06a4  [ 8DE15757A11F8EDD9F610C12C5F537CB, 85BDE61EC558D2E7BC7FC524D6CF69BC280DF4E332A9E0467DE83B2B084AF4A3 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
13:49:22.0108 0x06a4  vsmraid - ok
13:49:22.0161 0x06a4  [ 1E2A8C962D8A1FE95F04C94C1BEC0D85, ED8EE2575721D21501F3B00C2E5BD5F9997ED718376122217BEC720FC6349BC1 ] VSS            C:\Windows\system32\vssvc.exe
13:49:22.0263 0x06a4  VSS - ok
13:49:22.0284 0x06a4  [ 0EE3E25278FAEA3E90FE8CA6AE74F315, 89D596E9E8BED9039976E27D38E3DE3B9AF3D88F319312BA737C72A1E5E02459 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
13:49:22.0342 0x06a4  VSTXRAID - ok
13:49:22.0358 0x06a4  [ 2FF242A6A60A905A67DFB2506C492265, 6A530C168B19AB1B611C9FD821BAA43A20D67B7E88B9BAB968DDA15C6857B05D ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
13:49:22.0410 0x06a4  vwifibus - ok
13:49:22.0421 0x06a4  [ A6A334EE3B97813B92EA9C5E284CF6F7, 30FC86DDDA57F605D87E20A9DD6B8AF13EA2E67B14F6D97B09C61F47640EDB6F ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
13:49:22.0471 0x06a4  vwififlt - ok
13:49:22.0499 0x06a4  [ 1843F07FD89975B3837F270E2E24D349, DF6BABF77C84DD49D193A23745DF5AF1117AEF29B373FFB2CBB3A8B6817659A0 ] W32Time        C:\Windows\system32\w32time.dll
13:49:22.0562 0x06a4  W32Time - ok
13:49:22.0575 0x06a4  [ 7C69152B72D7DD0739AE8A1341E0F4CD, 83F8FBB8440D815E60D8CE31539E831034ADFD2FD17BFB5E5307CE7D95EC92D8 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
13:49:22.0626 0x06a4  WacomPen - ok
13:49:22.0652 0x06a4  [ 8F0CD0DBD02B69E572F8C25EB29E4F7D, 6F5C146A006D27E2D332AC432B4E204C8AF77C308946803CF1124760FFBB5969 ] WalletService  C:\Windows\system32\WalletService.dll
13:49:22.0712 0x06a4  WalletService - ok
13:49:22.0724 0x06a4  [ 14F0C0485643A73866C29CAE6139F453, F3D408B2BC841505B480CE2C232815203D2D5985F49BC3F0C22695B5ECCFBEAA ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
13:49:22.0784 0x06a4  wanarp - ok
13:49:22.0795 0x06a4  [ 14F0C0485643A73866C29CAE6139F453, F3D408B2BC841505B480CE2C232815203D2D5985F49BC3F0C22695B5ECCFBEAA ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
13:49:22.0852 0x06a4  wanarpv6 - ok
13:49:22.0908 0x06a4  [ 9BF5B67B8747DDD380BEC84915E6F4D5, 610BBB0AF28B5C93EBE34512EC35D45989C6F9EB33FD3BDCF0CD014174A1BFFF ] wbengine        C:\Windows\system32\wbengine.exe
13:49:23.0017 0x06a4  wbengine - ok
13:49:23.0050 0x06a4  [ DD073EA5AE9D9ACD88A3AC864C7CC611, 087E3768E7BDDC554568FFC8F8449440B8666CD3A373FCDAF1EB0E1FA337B27F ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
13:49:23.0119 0x06a4  WbioSrvc - ok
13:49:23.0140 0x06a4  [ 73A7F5CFAA063059A2CA99D3C0BBAC53, 34554A0CEEE46BAE124C60726B0C8F747357F2A7B5F69AB322860034312FC12E ] wcifs          C:\Windows\system32\drivers\wcifs.sys
13:49:23.0183 0x06a4  wcifs - ok
13:49:23.0214 0x06a4  [ ACEE8C0CD4F41A85E5506BAC810B5280, AAFC5137AD4E9337C6C6E2EDFAA2FC544E656A0239EBDC1BF4F3A68A443AFB43 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
13:49:23.0295 0x06a4  Wcmsvc - ok
13:49:23.0322 0x06a4  [ A9C5CDFB96F7E773BD08F98F6F67B178, 86447ED1A244702312316CA52BA646068F5864CDE3B627095104EB390B67729F ] wcncsvc        C:\Windows\System32\wcncsvc.dll
13:49:23.0385 0x06a4  wcncsvc - ok
13:49:23.0398 0x06a4  [ E135FE0A35B9ABF096DC359A8ACACF1F, 0180650A7664365FD2B5D3C0654DCF4ED612687E199585BCF7A6C6B89B739E75 ] wcnfs          C:\Windows\system32\drivers\wcnfs.sys
13:49:23.0447 0x06a4  wcnfs - ok
13:49:23.0461 0x06a4  [ 425B817D6F6F436F5C1F7A70A71CAC5F, 55583BE180F82F28B5C57B0F921F20DAAF126FCFC7271E96DBAF29F58FA8D89A ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
13:49:23.0503 0x06a4  WdBoot - ok
13:49:23.0533 0x06a4  [ B3ECCD6A9477D36AC7B2047BDE6E5B68, C894AEA1EDB76AD5C6B5E46EC493EC0BDC8D1D754CB0288D3D2A6F0604073C1B ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
13:49:23.0601 0x06a4  Wdf01000 - ok
13:49:23.0622 0x06a4  [ 827C5B8D98046934469E97F3E7E1839B, BC82D44C76B98E317116198AB5A758FB3B89D094BAB85FB243DE61CF93452FFA ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
13:49:23.0676 0x06a4  WdFilter - ok
13:49:23.0691 0x06a4  [ 2E63CA57869CFA25CB072BEFE64A2640, 7569BF5BF1A7783BC46F7157CA808CD91F9345B79A76EC408872F0380D1F08A9 ] WdiServiceHost  C:\Windows\system32\wdi.dll
13:49:23.0742 0x06a4  WdiServiceHost - ok
13:49:23.0753 0x06a4  [ 2E63CA57869CFA25CB072BEFE64A2640, 7569BF5BF1A7783BC46F7157CA808CD91F9345B79A76EC408872F0380D1F08A9 ] WdiSystemHost  C:\Windows\system32\wdi.dll
13:49:23.0806 0x06a4  WdiSystemHost - ok
13:49:23.0835 0x06a4  [ DF180E0BBC3D22E9B7E05C31265E5869, E287C1E2E122A6D6776AB7B57D9025BED9CDD15146EA10166091882866BEDDA9 ] wdiwifi        C:\Windows\system32\DRIVERS\wdiwifi.sys
13:49:23.0924 0x06a4  wdiwifi - ok
13:49:23.0943 0x06a4  [ DE385F0605E3B6E46EDC98253FFAD452, 8F62657541E2CEFBA7E2C4053B39C3B29E6D7FBCD96EEB571DE3F830B4933328 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
13:49:23.0987 0x06a4  WdNisDrv - ok
13:49:24.0005 0x06a4  [ 1DE903C9D0E9567F951212604462539B, 364D9A067F526C969177A4BD86C7C581D6494D1F509E0EF7B80A5A2931D92624 ] WdNisSvc        C:\Program Files\Windows Defender\NisSrv.exe
13:49:24.0041 0x06a4  WdNisSvc - ok
13:49:24.0059 0x06a4  [ DC496ECFC465280A610188C9B316DA21, C27274788811EDC28EEFBC391114A6930FC8FF81A806A7D8331E707493A7DFF8 ] WebClient      C:\Windows\System32\webclnt.dll
13:49:24.0118 0x06a4  WebClient - ok
13:49:24.0132 0x06a4  [ DCB16389E07EE11A4561641F19AE74BF, 2C97B8736A79C4435635EDA7808D05F90E59E17A53CBD62732109E4B3EC6294B ] Wecsvc          C:\Windows\system32\wecsvc.dll
13:49:24.0188 0x06a4  Wecsvc - ok
13:49:24.0199 0x06a4  [ 4E43223E27023C8D5585F494DB595513, ED5A28DB9325AE3A0E556F2B8BE1B28376EC263DEF0D5938E718107819C08A08 ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
13:49:24.0244 0x06a4  WEPHOSTSVC - ok
13:49:24.0257 0x06a4  [ 83D0F9807F16369DCE733B9F8474B146, 01E23E477D4B14FA517FDCEC72E281D9BD7A32833FA6C874AADDE08A1F9F3052 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
13:49:24.0312 0x06a4  wercplsupport - ok
13:49:24.0333 0x06a4  [ 9D466F2FAFE95EDA8A5A3B36FA66F1A1, 8D69E15F14508A232551A5AC6DA3B90A5F4258DFBD1E44C89FC1BAD4B0529667 ] WerSvc          C:\Windows\System32\WerSvc.dll
13:49:24.0384 0x06a4  WerSvc - ok
13:49:24.0401 0x06a4  [ 40C04E51FD65150677CB830A53DCB0FC, 82CDDA7ED826995C546FE89B550E81058F300DB7DC6D15DE51A87EBEFB396F98 ] WFPLWFS        C:\Windows\system32\drivers\wfplwfs.sys
13:49:24.0446 0x06a4  WFPLWFS - ok
13:49:24.0459 0x06a4  [ CDC1769844D191B0F655E6A5DC2F2F5E, 05B3C3F47C0D5F910973650CB3ED8C95849E4DB5C25831584716B130EBC04EE5 ] WiaRpc          C:\Windows\System32\wiarpc.dll
13:49:24.0505 0x06a4  WiaRpc - ok
13:49:24.0516 0x06a4  [ 9E321217D4D584FE9BF725F20C4CC294, 8852801F088F3C83D742B80F19D06A74CA4EAC496F0D1C45FDA51E3D1B423FA6 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
13:49:24.0557 0x06a4  WIMMount - ok
13:49:24.0568 0x06a4  [ 7D1F24D54137D7486005A5FB4A6F9F9A, 2379D517874A502C163DA09050E3BEE7ACB00EFF9E6DA91784DB0BA824A01EB8 ] WinDefend      C:\Program Files\Windows Defender\MsMpEng.exe
13:49:24.0596 0x06a4  WinDefend - ok
13:49:24.0626 0x06a4  [ 8DEBCBA33D27E86E66217346F84EA393, 78EA417276D13352E4CE42F23DFF125AA31616D073CCA044AB691EBE635F214B ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
13:49:24.0675 0x06a4  WindowsTrustedRT - ok
13:49:24.0687 0x06a4  [ 764A9285DFA402C04D11EA3BEE9FB851, E9DC8A75AF08727C699091526EED3D90803C00B428834B09B45495B54A4DAE2D ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
13:49:24.0728 0x06a4  WindowsTrustedRTProxy - ok
13:49:24.0761 0x06a4  [ DF51C1442A3DB8ADE2B78DCDEC2419FD, 3DB1ECADCEFAA924256022689B8D7B775C0961B2A22E39207229A98B63F32F27 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
13:49:24.0835 0x06a4  WinHttpAutoProxySvc - ok
13:49:24.0862 0x06a4  [ 85B8515170C41F40153CF428C45918B4, E566E4BF7E2E5FFE596A987F3362C65066E2EFB83C0CBB53E6BBB2D5F333E577 ] winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
13:49:24.0912 0x06a4  winmgmt - ok
13:49:25.0003 0x06a4  [ B124B6D66EE6FAB7B59FD114A633A1D1, 4192DFB5FF29A0B9F49FE8EFFBBF956B5460B0FD29FD4C420DBD436938FC96B4 ] WinRM          C:\Windows\system32\WsmSvc.dll
13:49:25.0174 0x06a4  WinRM - ok
13:49:25.0203 0x06a4  [ D45B4DDEAF7B8B753E35D3A7EF1ABBB5, F9ED1D758A437F37DFFF8009A499581D15F538336EC4E25B7D71452C182F8193 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
13:49:25.0259 0x06a4  WINUSB - ok
13:49:25.0286 0x06a4  [ 0542FEBA39BA33E01F129B4E039A4D0E, 035C4CB919CEF55561F455E456F65843DA886AB9164292C5803EF4F65A4ABD6F ] wisvc          C:\Windows\system32\flightsettings.dll
13:49:25.0349 0x06a4  wisvc - ok
13:49:25.0432 0x06a4  [ 85E6D93EEFAAEC8B73338A1246304AEF, 54B4D393820F25CE33BA13DCD7A666AD937D07DC2697424410BB80D6F1193249 ] Wlansvc        C:\Windows\System32\wlansvc.dll
13:49:25.0576 0x06a4  Wlansvc - ok
13:49:25.0647 0x06a4  [ 90A67E90454B62CC1177F4C8AA2A6539, A4F1CA1C587CE5A030669B5880107FCD0774AF30EEC8DCA58B4B26FD44812D85 ] wlidsvc        C:\Windows\system32\wlidsvc.dll
13:49:25.0774 0x06a4  wlidsvc - ok
13:49:25.0790 0x06a4  [ E50F32F363CFE38CAF704DBF88D6DA0F, 99224A21D01498DA92BF39690A2B6A3E37910A701C7DD1D1280A5007DA0CAA33 ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
13:49:25.0839 0x06a4  WmiAcpi - ok
13:49:25.0860 0x06a4  [ A6676784CCFCB5DA356919A536EA270B, 2C1867A359A6D284D8E4B37E3D92F39A2F2ED22BEB93C749CE86FBD5DDC32C50 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
13:49:25.0905 0x06a4  wmiApSrv - ok
13:49:25.0949 0x06a4  [ CA3A3E61D5F44D8FD276135A6D68C3B8, 2E94B8AB72E92E69A3BEA3DA00690229947F65C504FE8F0160A19E7BB61B1924 ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
13:49:26.0033 0x06a4  WMPNetworkSvc - ok
13:49:26.0052 0x06a4  [ BBAA859E8B0F5FB93E3437C4001B80B1, 5300E165917DE761F97C6FDAC854979CF48BD6FCDD06968F2A0C3F0B843AB6BE ] Wof            C:\Windows\system32\drivers\Wof.sys
13:49:26.0103 0x06a4  Wof - ok
13:49:26.0177 0x06a4  [ F2B8A725EFBC4C8200E246FABFFE33AF, 408D1549C20D32F29986D58240B3CBD45B9F1601764509AF8CD5C341FAA8ACB5 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
13:49:26.0293 0x06a4  workfolderssvc - ok
13:49:26.0310 0x06a4  [ 6F9118D0EFC0C409D3846517BFA9D898, 1B76926C8072DA37BB060E716A570425D169AD0D843E34DAB897A30D18AF0CBC ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
13:49:26.0358 0x06a4  WPDBusEnum - ok
13:49:26.0372 0x06a4  [ 35A1CD286CD4B9E0CD35FC21BFEC7C32, EB4BCC9797E56914DB773CAC7775DF852AC62362866F1AB3F1A4DBF67AFC92A7 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
13:49:26.0416 0x06a4  WpdUpFltr - ok
13:49:26.0437 0x06a4  [ 8B80FC74A784038DA57CDA49E7D2449F, 198B524F214632B648240BC270550F81498121B7E9B13B77227BBE41E046BB08 ] WpnService      C:\Windows\system32\WpnService.dll
13:49:26.0492 0x06a4  WpnService - ok
13:49:26.0504 0x06a4  [ 347865964017A38FAE32A03B671A77F8, 937184DB1EE1E9CE9ACA40BA4A80DFCF6A9EDA29BB106803FC4AAA3824C7CB17 ] WpnUserService  C:\Windows\System32\WpnUserService.dll
13:49:26.0550 0x06a4  WpnUserService - ok
13:49:26.0569 0x06a4  [ 3FC8AFC8059B341003BDCECC8BA93488, 6FBF64E439307D4E2E89EDA7E8FE5026462F72C9C96D0C300F0D186D4C418263 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
13:49:26.0619 0x06a4  ws2ifsl - ok
13:49:26.0635 0x06a4  [ A2B922E063D99F47906B4E9D3CEC4F74, 6E74D852ADFB9AED5EE601749D4D62B005F3FA9A9407421126E3944561AF5521 ] wscsvc          C:\Windows\System32\wscsvc.dll
13:49:26.0691 0x06a4  wscsvc - ok
13:49:26.0702 0x06a4  [ C5A42AA31E4859C33D168DC870898D38, 45FDE8D16D54FB0A8DD955352D3C5F2391339C6B0B3D74B77D1D1CA3DBBCD296 ] WSDPrintDevice  C:\Windows\System32\drivers\WSDPrint.sys
13:49:26.0750 0x06a4  WSDPrintDevice - ok
13:49:26.0760 0x06a4  WSearch - ok
13:49:26.0849 0x06a4  [ C1D0D50D405652C965D73DE67AA6528C, F2D34C56CE82CCA39215FF9F495C6287E6BD9BCBFD531F40F99CD9DABF9B0CAD ] wuauserv        C:\Windows\system32\wuaueng.dll
13:49:26.0992 0x06a4  wuauserv - ok
13:49:27.0015 0x06a4  [ A69B4FEC9A2FD5E700B145BEDCC953EC, 2B2DD7088C8991B9B05DCDCC25FC4C981FA82A159A548B94CAD6F0842307B5CF ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
13:49:27.0069 0x06a4  WudfPf - ok
13:49:27.0087 0x06a4  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
13:49:27.0148 0x06a4  WUDFRd - ok
13:49:27.0163 0x06a4  [ FB483547CFB8349D199E7945F8910AE0, 41E27B60E9358B0237E609DDCE46AE2AFBBC1FBA83A79F0509B7829259F3C3D3 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
13:49:27.0212 0x06a4  wudfsvc - ok
13:49:27.0228 0x06a4  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFWpdFs      C:\Windows\system32\DRIVERS\WUDFRd.sys
13:49:27.0288 0x06a4  WUDFWpdFs - ok
13:49:27.0302 0x06a4  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
13:49:27.0362 0x06a4  WUDFWpdMtp - ok
13:49:27.0409 0x06a4  [ CFB4DCA521797379DE850BC2E96B8154, 31EC580BF90E370307DD05BFC8A95046A349214F58BA36CDE5919C9F41BF9B1D ] WwanSvc        C:\Windows\System32\wwansvc.dll
13:49:27.0508 0x06a4  WwanSvc - ok
13:49:27.0556 0x06a4  [ 2BA581012300FA37E286F2A8A0025315, ACF784790F2C113A174ECF944CDD906CC806FF74D951E329853DF556E133D69E ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
13:49:27.0631 0x06a4  XblAuthManager - ok
13:49:27.0687 0x06a4  [ 2ADCF6881D83E44505D92629A5DE8400, 17A1579E7950060B0B18991A9CB2ED5997BE4466529053DA661D5DB17A33E8FF ] XblGameSave    C:\Windows\System32\XblGameSave.dll
13:49:27.0773 0x06a4  XblGameSave - ok
13:49:27.0793 0x06a4  [ EA4937052D0B96DBA4467689D17A8D8A, E13515C9C317C401345765E87D5B39AC63943007EDDD7497A0ED57DEDD4E41A8 ] xboxgip        C:\Windows\System32\drivers\xboxgip.sys
13:49:27.0874 0x06a4  xboxgip - ok
13:49:27.0918 0x06a4  [ BBB5285C89E9ACFC4966396F8BECDED9, 8F5CA758541901415C44E00F0E472342BCCFEFC00372A02636E5EB21D067DFD2 ] XboxNetApiSvc  C:\Windows\system32\XboxNetApiSvc.dll
13:49:28.0012 0x06a4  XboxNetApiSvc - ok
13:49:28.0028 0x06a4  [ 6EC0B4104D1CC029F527572E34C13111, F58030F4E53F893964D781DA707A0A9ED1360CAAD9C8299C4DB777072341D8DE ] xinputhid      C:\Windows\System32\drivers\xinputhid.sys
13:49:28.0079 0x06a4  xinputhid - ok
13:49:28.0085 0x06a4  ================ Scan global ===============================
13:49:28.0100 0x06a4  [ ED4E568A6E265034DF3C439F944AD42B, E95A6A756F1667F16617BF937BB25EE9798A2CF544D8ADF56DAA3FBCB13E59DB ] C:\Windows\system32\basesrv.dll
13:49:28.0115 0x06a4  [ FA428F4051AD21836F3B0F052C2FED22, 132AF940560E0B8E4239BE004CC70995485347E0E217DF06E72CBA51611EE9ED ] C:\Windows\system32\winsrv.dll
13:49:28.0137 0x06a4  [ D485674D247F8827EFEB92F8F4F111CC, 038D7963DD4D2605E3A1141BE8A858650F608C5763C389FC31906CB771E64DE1 ] C:\Windows\system32\sxssrv.dll
13:49:28.0165 0x06a4  [ F430DD178E518BF1C5D6199F473AE2AD, DD70653D5C68D2E8A1D46E33BD5FF026A6A253F31B1DADB63A2D801DF2E305D7 ] C:\Windows\system32\services.exe
13:49:28.0182 0x06a4  [ Global ] - ok
13:49:28.0183 0x06a4  ================ Scan MBR ==================================
13:49:28.0189 0x06a4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:49:28.0316 0x06a4  \Device\Harddisk0\DR0 - ok
13:49:28.0317 0x06a4  ================ Scan VBR ==================================
13:49:28.0322 0x06a4  [ B5AC3DED7BECAB9867BFDF3E4427EA04 ] \Device\Harddisk0\DR0\Partition1
13:49:28.0324 0x06a4  \Device\Harddisk0\DR0\Partition1 - ok
13:49:28.0331 0x06a4  [ 58377A2B790A468AC173DD930DE5B163 ] \Device\Harddisk0\DR0\Partition2
13:49:28.0332 0x06a4  \Device\Harddisk0\DR0\Partition2 - ok
13:49:28.0335 0x06a4  ================ Scan generic autorun ======================
13:49:28.0345 0x06a4  [ A3418E4D4A5EE636D44922DC2567FA18, 21F89584534A6A02284A6E1BD502A3530E372E6FCF1285BFD68DB074CCE655EA ] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
13:49:28.0385 0x06a4  SynTPStart - ok
13:49:28.0401 0x06a4  [ FE7CE849DB8C3986B2E721C6A3184FAA, 9879821AF51D13DB22EE2A8B351C5C8BB338408D325D9ACEC95237F3DE502069 ] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
13:49:28.0428 0x06a4  QlbCtrl.exe - ok
13:49:28.0751 0x06a4  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
13:49:29.0066 0x06a4  OneDriveSetup - ok
13:49:29.0404 0x06a4  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
13:49:29.0718 0x06a4  OneDriveSetup - ok
13:49:30.0051 0x06a4  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
13:49:30.0362 0x06a4  OneDriveSetup - ok
13:49:30.0411 0x06a4  [ FD9A7F99A09DB266D0C1361B0ACCBD7E, 579160BDACDFE39AE5DDD7B5C2964453E89BA8D933F3FB16C6E3897EA3BDED29 ] C:\Users\ms\AppData\Local\Microsoft\OneDrive\OneDrive.exe
13:49:30.0454 0x06a4  OneDrive - ok
13:49:30.0699 0x06a4  [ C2C9E42D6C51E99C1BAB44F108E8851C, F513A2FCE15AD1F7C4A8A4E67CA2C9613EE305FAAE8D674BC3019A96DEEDFF61 ] C:\Program Files\CCleaner\CCleaner.exe
13:49:30.0937 0x06a4  CCleaner Monitoring - ok
13:49:30.0962 0x06a4  VoipConnect - ok
13:49:30.0968 0x06a4  Waiting for KSN requests completion. In queue: 217
13:49:32.0001 0x06a4  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
13:49:32.0003 0x06a4  AV detected via SS2: Avast Antivirus, C:\Program Files\AVAST Software\Avast\wsc_proxy.exe ( 12.3.3154.0 ), 0x41000 ( enabled : updated )
13:49:32.0015 0x06a4  Win FW state via NFP2: enabled ( trusted )
13:49:32.0148 0x06a4  ============================================================
13:49:32.0148 0x06a4  Scan finished
13:49:32.0148 0x06a4  ============================================================
13:49:32.0165 0x1dc8  Detected object count: 0
13:49:32.0165 0x1dc8  Actual detected object count: 0
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.06.05
  rootkit: v2016.11.20.01

Windows 10 x86 NTFS
Internet Explorer 11.576.14393.0
ms :: DESKTOP-TGSB6RT [administrator]

06.01.2017 13:21:44
mbar-log-2017-01-06 (13-21-44).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 292489
Time elapsed: 10 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|shell (Hijack.ShellA.Gen) -> Data: explorer.exe,"C:\Users\ms\AppData\Roaming\assembliesbckp.exe" -> Delete on reboot. [b9f4bbbd773105313453466c7a88dc24]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\ms\AppData\Local\Temp\keygen.exe (RiskWare.Tool.CK) -> Delete on reboot. [e2cba6d2b9ef1b1b303bda4f44beeb15]
C:\Users\ms\AppData\Local\Temp\svhost.exe (RiskWare.HeuristicsReservedWordExploit) -> Delete on reboot. [affe99dfc6e252e4ba4b521273905ca4]

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.06.05
  rootkit: v2016.11.20.01

Windows 10 x86 NTFS
Internet Explorer 11.576.14393.0
ms :: DESKTOP-TGSB6RT [administrator]

06.01.2017 13:59:15
mbar-log-2017-01-06 (13-59-15).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 291512
Time elapsed: 10 minute(s), 45 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 06.01.2017 14:36
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


pingodoce 06.01.2017 15:25
...

JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Pro x86
Ran by ms (Administrator) on 06.01.2017 at 15:16:41,54
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.01.2017 at 15:17:49,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---

Code:
# AdwCleaner v6.041 - Bericht erstellt am 06/01/2017 um 14:55:50
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-05.2 [Server]
# Betriebssystem : Windows 10 Pro  (X86)
# Benutzername : ms - DESKTOP-TGSB6RT
# Gestartet von : C:\Users\ms\Downloads\AdwCleaner_6.041.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\ProgramData\Application Data\lavasoft\web companion


***** [ Dateien ] *****

[-] Datei gelöscht: C:\Windows\system32\lavasofttcpservice.dll
[-] Datei gelöscht: C:\Windows\system32\LavasoftTcpServiceOff.ini


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Lavasoft\Web Companion
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

cosinus 06.01.2017 15:30
adwcleaner Logfile ist unvollständig

pingodoce 06.01.2017 16:10
Code:
# AdwCleaner v6.041 - Bericht erstellt am 06/01/2017 um 14:53:50
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-05.2 [Server]
# Betriebssystem : Windows 10 Pro  (X86)
# Benutzername : ms - DESKTOP-TGSB6RT
# Gestartet von : C:\Users\ms\Downloads\AdwCleaner_6.041.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Keine schädlichen Dienste gefunden.


***** [ Ordner ] *****

Ordner Gefunden: C:\ProgramData\Application Data\lavasoft\web companion


***** [ Dateien ] *****

Datei Gefunden: C:\Windows\system32\lavasofttcpservice.dll
Datei Gefunden: C:\Windows\system32\LavasoftTcpServiceOff.ini


***** [ DLL ] *****

Keine infizierten DLLs gefunden.

cosinus 06.01.2017 16:21
Und wieder unvollständig. Und es wurde lt. dem letzten Log nichts gelöscht.

Wie wärs mal mit Anleitung richtig lesen??? :wtf: :p

pingodoce 06.01.2017 19:00
Code:
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-06.1 [Server]
# Betriebssystem : Windows 10 Pro  (X86)
# Benutzername : ms - DESKTOP-TGSB6RT
# Gestartet von : C:\Users\ms\Downloads\AdwCleaner_6.041.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Keine schädlichen Dienste gefunden.


***** [ Ordner ] *****

Keine schädlichen Ordner gefunden.


***** [ Dateien ] *****

Keine schädlichen Dateien gefunden.


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schädlichen Schlüssel gefunden.


***** [ Verknüpfungen ] *****

Keine infizierten Verknüpfungen gefunden.


***** [ Aufgabenplanung ] *****

Keine schädlichen Aufgaben gefunden.


***** [ Registrierungsdatenbank ] *****

Keine schädlichen Elemente in der Registrierungsdatenbank gefunden.


***** [ Internetbrowser ] *****

Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3021 Bytes] - [06/01/2017 14:55:50]
C:\AdwCleaner\AdwCleaner[S0].txt - [2954 Bytes] - [06/01/2017 14:53:50]
C:\AdwCleaner\AdwCleaner[S1].txt - [1335 Bytes] - [06/01/2017 18:30:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1408 Bytes] ##########
JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Pro x86
Ran by ms (Administrator) on 06.01.2017 at 18:35:55,60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.01.2017 at 18:37:02,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---

so ... ich habe die alles nach anleitung gemacht...
hier sind noch einmal die adaware und die jrt reports

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.06.07
  rootkit: v2016.11.20.01

Windows 10 x86 NTFS
Internet Explorer 11.576.14393.0
ms :: DESKTOP-TGSB6RT [administrator]

06.01.2017 18:41:30
mbar-log-2017-01-06 (18-41-30).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 291392
Time elapsed: 9 minute(s), 51 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
18:57:43.0542 0x0580  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
18:57:49.0718 0x0580  ============================================================
18:57:49.0718 0x0580  Current date / time: 2017/01/06 18:57:49.0718
18:57:49.0718 0x0580  SystemInfo:
18:57:49.0718 0x0580 
18:57:49.0718 0x0580  OS Version: 10.0.14393 ServicePack: 0.0
18:57:49.0718 0x0580  Product type: Workstation
18:57:49.0718 0x0580  ComputerName: DESKTOP-TGSB6RT
18:57:49.0718 0x0580  UserName: ms
18:57:49.0718 0x0580  Windows directory: C:\Windows
18:57:49.0718 0x0580  System windows directory: C:\Windows
18:57:49.0718 0x0580  Processor architecture: Intel x86
18:57:49.0718 0x0580  Number of processors: 2
18:57:49.0718 0x0580  Page size: 0x1000
18:57:49.0718 0x0580  Boot type: Normal boot
18:57:49.0718 0x0580  CodeIntegrityOptions = 0x00000000
18:57:49.0718 0x0580  ============================================================
18:57:49.0765 0x0580  KLMD registered as C:\Windows\system32\drivers\58609004.sys
18:57:49.0765 0x0580  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.576, osProperties = 0x18
18:57:49.0849 0x0580  System UUID: {C0033F47-12FB-D9F3-E5F6-DB9C98A71D76}
18:57:50.0336 0x0580  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
18:57:50.0351 0x0580  ============================================================
18:57:50.0351 0x0580  \Device\Harddisk0\DR0:
18:57:50.0351 0x0580  MBR partitions:
18:57:50.0351 0x0580  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1B56E41
18:57:50.0351 0x0580  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B57000, BlocksNum 0xC43D000
18:57:50.0351 0x0580  ============================================================
18:57:50.0351 0x0580  C: <-> \Device\Harddisk0\DR0\Partition2
18:57:50.0351 0x0580  D: <-> \Device\Harddisk0\DR0\Partition1
18:57:50.0351 0x0580  ============================================================
18:57:50.0367 0x0580  Initialize success
18:57:50.0367 0x0580  ============================================================
18:58:47.0614 0x1920  ============================================================
18:58:47.0614 0x1920  Scan started
18:58:47.0614 0x1920  Mode: Manual; SigCheck; TDLFS;
18:58:47.0614 0x1920  ============================================================
18:58:47.0614 0x1920  KSN ping started
18:58:47.0768 0x1920  KSN ping finished: true
18:58:48.0395 0x1920  ================ Scan system memory ========================
18:58:48.0395 0x1920  System memory - ok
18:58:48.0396 0x1920  ================ Scan services =============================
18:58:48.0483 0x1920  [ 03155454BC4709FC220B92360B7BBB20, 3C3EC5CFFB9EC28C2E7810CC536E8B560B6AD7B1245AD963D79A4DCA1E0A7C76 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
18:58:48.0643 0x1920  1394ohci - ok
18:58:48.0667 0x1920  [ 2809BD40414F0651BC84D55B7459E104, 223EF6EF3592796E962A7D8C2ABB0A27C2504B03A53BA5CF2A94DC06C1485385 ] 3ware          C:\Windows\system32\drivers\3ware.sys
18:58:48.0702 0x1920  3ware - ok
18:58:48.0715 0x1920  [ 943297AA998EA2B4A4E9E9DAA9954729, 6BC9E6557826A70B447443228DEFC0DF55C546DE1D6B4745CD78DDBD3605B4D1 ] Accelerometer  C:\Windows\system32\DRIVERS\Accelerometer.sys
18:58:48.0751 0x1920  Accelerometer - ok
18:58:48.0782 0x1920  [ 7A185EE3C8C42D5EA0AD695AA3756339, E3494959DAA76E5CA0E088C6F94B2C1A077B877C93B29D74F0E40C80AFDF5686 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:58:48.0836 0x1920  ACPI - ok
18:58:48.0847 0x1920  [ 0C970C83236D49A37EAA026AE33E1E13, 0773433CC55976C116E74AB5FB0F1076740699B2E2BDE9C6A174464A9EC64422 ] AcpiDev        C:\Windows\System32\drivers\AcpiDev.sys
18:58:48.0889 0x1920  AcpiDev - ok
18:58:48.0902 0x1920  [ 68BD81393B208AFACFEC59354D6ED4A5, 3FF394B2105F8AF3435B9E7D65F4788370F3C0DADBF9C221A3879616AC2A816B ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
18:58:48.0933 0x1920  acpiex - ok
18:58:48.0942 0x1920  [ 3A8A0B3D2EE12EC85DB725A923BC1E53, C34F941DA35F7270D2AF7E22ECDCF6D55CE01BF5F2759A902DF27D001AE64DD4 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
18:58:48.0991 0x1920  acpipagr - ok
18:58:49.0004 0x1920  [ 98D16BAF0AC99877C6EF5573B8F202BF, 1D9C170AFDDF698273E36BD23E1D52EE0038F62FC8C249FC6B3F41BE3C806876 ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
18:58:49.0046 0x1920  AcpiPmi - ok
18:58:49.0058 0x1920  [ 5B15A344A42AB5AD9E3D6236B2D8261A, F6C4660494B09658086671E4F8F737680CA55BBF679EB69BF6C74CE89025629A ] acpitime        C:\Windows\System32\drivers\acpitime.sys
18:58:49.0093 0x1920  acpitime - ok
18:58:49.0112 0x1920  [ FB9ECE3F7B8A03E474E611031AD4CD23, 32CDBC6D32DF5C711819A85FD147511AA2E8EE7609CE7D9D352E7755D2E964BB ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
18:58:49.0170 0x1920  ADIHdAudAddService - ok
18:58:49.0183 0x1920  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:58:49.0207 0x1920  AdobeARMservice - ok
18:58:49.0226 0x1920  [ B79750091FC0842182FE49D263791294, 32FC260A74C9C45CD1E8998523642C285866378FCD9478FEFD15A0CC42EC0E0B ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:58:49.0260 0x1920  AdobeFlashPlayerUpdateSvc - ok
18:58:49.0310 0x1920  [ 7E9D4FB10269A5DAF8DE9B012FED37B1, 6930F14AA6826946DA41FA11D370A9D76C948C5FB2CEC351FDA8DFAEFCC531AC ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
18:58:49.0386 0x1920  ADP80XX - ok
18:58:49.0406 0x1920  [ 12D23758621B00B8D3134095EC3325FD, 30DC1C40539FF6E14D9D692870FD6D511455F2D86DB1BF505B2500F953A611C4 ] AEADIFilters    C:\Windows\system32\AEADISRV.EXE
18:58:49.0445 0x1920  AEADIFilters - ok
18:58:49.0470 0x1920  [ 3B5BE5B3D3CE8D9834C2C9B325AC6A29, 86D221CFF168D61C7359425A20C0A413E6EF8B023806BBB84E5F26E4E997D74A ] AFD            C:\Windows\system32\drivers\afd.sys
18:58:49.0519 0x1920  AFD - ok
18:58:49.0565 0x1920  [ 7E10E3BB9B258AD8A9300F91214D67B9, CE5FAD7BF78234B64EAADF64DB23F3C342AADB9C5E3B0168E57863F494F30318 ] AgereSoftModem  C:\Windows\system32\DRIVERS\AGRSM.sys
18:58:49.0664 0x1920  AgereSoftModem - ok
18:58:49.0683 0x1920  [ 266739048C6ADCC52050D057EE7B7FC4, C5CDCD14071917110A206DD99548BF1D41C1028F1CEF24F2488197B786B8978C ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
18:58:49.0731 0x1920  ahcache - ok
18:58:49.0740 0x1920  [ BE415E130B5598C355FD781CE36838A7, 0C0E010459E2485950F9F1B0363436ADD111DF8532360D927A5113E8A24F7D10 ] AJRouter        C:\Windows\System32\AJRouter.dll
18:58:49.0777 0x1920  AJRouter - ok
18:58:49.0791 0x1920  [ 0E3981D2FACC626692D3974A3BCA375A, DDB2F31CC7A8CCBCE62C23311004A60B0DE67BFC10020F1037581062C7A59381 ] ALG            C:\Windows\System32\alg.exe
18:58:49.0833 0x1920  ALG - ok
18:58:49.0845 0x1920  [ 3CD02476635113FD49D420ADF18F3187, AF38701C875D01939B43A27C26E6DE04601566C4FE1ED74FA4ABA48885264121 ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
18:58:49.0887 0x1920  AmdK8 - ok
18:58:49.0901 0x1920  [ EC40FB47E51F4ED05A5A3E1FBB7A3323, 9307BEE98A161291B4094099E3DA351A65FE6DB6E3222B2F1A0861BCB38491AD ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
18:58:49.0941 0x1920  AmdPPM - ok
18:58:49.0952 0x1920  [ 859393BF40B714092A20561146401E48, 7F46EA0CE27971CEB6961BF3AA2AFC23A53BCA59BDC5525A8F217C15F7C2B809 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
18:58:49.0981 0x1920  amdsata - ok
18:58:50.0001 0x1920  [ 976A5D0F41721613177C352B90B330AE, 7060FF655AE3B396AC104C159BF0982329AB7307D69E5F5BB9B92A4A1E0AF5B9 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
18:58:50.0035 0x1920  amdsbs - ok
18:58:50.0045 0x1920  [ D41974D87F5C44902DA797BF13142AE9, 3CDD9C999316E91046B7E9D89E3BD65C6A96E2759E4E55D37980927D04E19879 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
18:58:50.0072 0x1920  amdxata - ok
18:58:50.0088 0x1920  [ 01999F61F9A20E1548A0872C0A9AAAC1, D2FE98CB692A76B52AA742A07ECCB1A03206FF7F85A052E5A32219F3770F6CF7 ] AppID          C:\Windows\system32\drivers\appid.sys
18:58:50.0123 0x1920  AppID - ok
18:58:50.0135 0x1920  [ 86183D1D11EBCF8E7D92CD089A74A606, 4F80A74A96EBFFBDE6B74A5457C0D50E669D36027A6E84E1A1F7BAE2331095EA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
18:58:50.0184 0x1920  AppIDSvc - ok
18:58:50.0196 0x1920  [ 49C0FBF00247C7DC48ED6085E2F4C391, F6F4FED838473B120175128809CFB3DFCBECE925BD23FD46FFEC3300CA4A0CCE ] Appinfo        C:\Windows\System32\appinfo.dll
18:58:50.0241 0x1920  Appinfo - ok
18:58:50.0249 0x1920  [ 9DCCF6510C13B29D5542E80E78670507, B43B4B4E957105CB49C39897B7CE7B6AAD17945CA2FE59970C39A69E6557C150 ] applockerfltr  C:\Windows\system32\drivers\applockerfltr.sys
18:58:50.0301 0x1920  applockerfltr - ok
18:58:50.0318 0x1920  [ 964B3242103F4CBC5174A301B6F2ED0F, 17732F02835910C7A301FC1D467148CAEF4A4ED05D2A8B47D7A1C7E0916A00C7 ] AppMgmt        C:\Windows\System32\appmgmts.dll
18:58:50.0366 0x1920  AppMgmt - ok
18:58:50.0398 0x1920  [ 503A049594590BFCCBA89E2D50D24EB3, C0426DF54F9D4237F446A1E85D2F106DAECD0CFC9E95A86CCB24791A0B40D7B6 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
18:58:50.0464 0x1920  AppReadiness - ok
18:58:50.0494 0x1920  [ FB4AC4CD756432034439082724697BF8, 0B37555972713DB8B9A71326B30519024395C65B7188B35B84EF851AF44CEEDE ] AppVClient      C:\Windows\system32\AppVClient.exe
18:58:50.0552 0x1920  AppVClient - ok
18:58:50.0566 0x1920  [ 2B80ADDDB8E2F07987C056C2D2E6C41C, F76A4872593C4A2F8A961E7B8B9C931C5A476A2266E5F9BA19C7E60A603B5557 ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
18:58:50.0596 0x1920  AppvStrm - ok
18:58:50.0609 0x1920  [ C3A3693B495AAECBA08CA10380F68A28, A1EEC75DEBA3C0DA76CCD6F4A95EFB9644665416D62002F8D5C2C66EDBC4533B ] AppvVemgr      C:\Windows\system32\drivers\AppvVemgr.sys
18:58:50.0642 0x1920  AppvVemgr - ok
18:58:50.0654 0x1920  [ FE3BAA1D877589FA101FFE06937E8287, F93440A682B040D163CC4D6618E386AF5936782E47CC0AF628420DE9E5678438 ] AppvVfs        C:\Windows\system32\drivers\AppvVfs.sys
18:58:50.0687 0x1920  AppvVfs - ok
18:58:50.0765 0x1920  [ FDC4207AD1583C38D1AD68C6FC146E7A, 5CC2467B44CFE111297E1F09965BD15973C7141FE51592E4AAE3E8138C1464E6 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
18:58:50.0921 0x1920  AppXSvc - ok
18:58:50.0940 0x1920  [ 976AFA23533862271F28DDA23DF9FC3B, D988693278554079F778AE52AC6FB8F580F26DF3778EE78445082970321A17C4 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
18:58:50.0972 0x1920  arcsas - ok
18:58:50.0983 0x1920  [ ACE407AF9DCE214772E04894C18BC18B, 5D54569C791520125ED472FFEBC6F5471DFA1D2C0274E488DAEC20824972246C ] aswHwid        C:\Windows\system32\drivers\aswHwid.sys
18:58:51.0009 0x1920  aswHwid - ok
18:58:51.0018 0x1920  [ 7393DE24CAE720E128FE61CC1A7632E3, 20EA724AB746973A53FF387F36F7CA445126C006A06858CA329654BED1E7CE6E ] aswKbd          C:\Windows\system32\drivers\aswKbd.sys
18:58:51.0040 0x1920  aswKbd - ok
18:58:51.0052 0x1920  [ 9A3BCD9CB36311EC1DB686010CE2E793, 66A9A6B3D23CA2D0D86887223AB4D8EC4F28426CFC950BAFECA9597834FBB915 ] aswMonFlt      C:\Windows\system32\drivers\aswMonFlt.sys
18:58:51.0076 0x1920  aswMonFlt - ok
18:58:51.0088 0x1920  [ 411E8CF998E01C3247DE094376E3CB3B, 27A430466EB8E655D03B29BFB994DE657CE3878CF1D90EB51A39521BF7767954 ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
18:58:51.0112 0x1920  aswRdr - ok
18:58:51.0122 0x1920  [ 39445B2AA5CD7711DA5572E816D5DC86, A63DF762A316CB69B3FD7731197EABDCDFB6BB21F840504A50B4363751EC909E ] aswRvrt        C:\Windows\system32\drivers\aswRvrt.sys
18:58:51.0149 0x1920  aswRvrt - ok
18:58:51.0188 0x1920  [ 03AD952FC1287D5623763E310CE081BA, BACCBDE6E1B98E9502B0ABDA5BBEC2FFDA50820085E08CFC50F81B5C728D843A ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
18:58:51.0240 0x1920  aswSnx - ok
18:58:51.0271 0x1920  [ E061C8C09103BBE429D9DB222ED7F4C3, 78C5DDB5BE25DED9BB58A4E12C2E3DDD3E798CFF5AC0F87D1BE615FAEC896B0E ] aswSP          C:\Windows\system32\drivers\aswSP.sys
18:58:51.0309 0x1920  aswSP - ok
18:58:51.0323 0x1920  [ A084E7BEA9EA4D0BE94357BFE8E987D7, C006EE86A0E6BBDFC6EC1F2708C32722AB571FC64879D6EA1FB6A230E13444B9 ] aswStm          C:\Windows\system32\drivers\aswStm.sys
18:58:51.0349 0x1920  aswStm - ok
18:58:51.0365 0x1920  [ 8CA850403483A9373406707E8144EB5C, 58C33AFFB6CA2F52BE2534D3099E6F76134484657413E9B4F8A58CB3F08F8FC8 ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
18:58:51.0395 0x1920  aswVmm - ok
18:58:51.0413 0x1920  [ D8B54F3B0714F425A1E750930F2959B7, 6926B7249E7D6506D084E00212E00E2C3CD79D556CEC4B0489459D1030163A08 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
18:58:51.0453 0x1920  AsyncMac - ok
18:58:51.0464 0x1920  [ 1D8B6976EC75698485A195A06B2DEBAC, 750281084F24190DD77CD2DE23EE8E8B46A942F30C8CCDDA2073F80B4EC01B3A ] atapi          C:\Windows\system32\drivers\atapi.sys
18:58:51.0490 0x1920  atapi - ok
18:58:51.0516 0x1920  [ 1EC637725AEBE586508626BA50AF3324, 8D3D873D96BAB9DA82AED3E898690BB03AD7E0108D45C3EB0B165BE52A0ADCE0 ] ATSwpWDF        C:\Windows\system32\DRIVERS\ATSwpWDF.sys
18:58:51.0555 0x1920  ATSwpWDF - ok
18:58:51.0575 0x1920  [ 9086C5B04CE8C611043B80A52B4E5482, 231D2F05EAA2FE105195F24F0EE1FE97105BB20D970831220B232FC637AF2C21 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
18:58:51.0631 0x1920  AudioEndpointBuilder - ok
18:58:51.0669 0x1920  [ 18590E6DF36EF89A2A1E9BBA0429CEA1, E9401391A7DF497BCF7F92147BF823F873343BF1FBAC88A204C62827CCD56973 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
18:58:51.0750 0x1920  Audiosrv - ok
18:58:51.0767 0x1920  [ F4E0580B5789474385E7ACB189C4AF2C, DB5BE2C852AC102AB8EB186362E582E250B843BA52B3B71AF08A5FDA8A6F91AF ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:58:51.0797 0x1920  avast! Antivirus - ok
18:58:51.0817 0x1920  [ 24CB11F0C843ACF345AF4B6ABCC88627, B5F6F7CD21250ACE9F63691ACBECEDCE69693B2BFDCEB2C3151BC59927B7458E ] AxInstSV        C:\Windows\System32\AxInstSV.dll
18:58:51.0860 0x1920  AxInstSV - ok
18:58:51.0883 0x1920  [ 49EF8E38514DB9AFFC696876D3540A52, F9E088FE3F0ABCA329C20424080F4527EAADAB2A5460C188735901F581F1DAB8 ] b57nd60x        C:\Windows\System32\drivers\b57nd60x.sys
18:58:51.0946 0x1920  b57nd60x - ok
18:58:51.0957 0x1920  [ F777221219ED35095E903F69B058C42E, 379471A9F84B648212CEA31E9F9AA791F702CE000B59CF6ABAD13AE3AC3CA1F4 ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
18:58:51.0999 0x1920  BasicDisplay - ok
18:58:52.0011 0x1920  [ D68ED76646F49C52D65006FC4C596A26, 4CAC90A72DF1E6112BC1AB2607E9D51AFBA96C291FE4F6767B3F303A212028BD ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
18:58:52.0047 0x1920  BasicRender - ok
18:58:52.0061 0x1920  [ 045ED769BF5396D346FA7493F47DF811, D0A57A040E3B18AC3A5ED56BF2D26E334DA0381AB686CC3F0517953EC3F7B46D ] bcmfn          C:\Windows\System32\drivers\bcmfn.sys
18:58:52.0100 0x1920  bcmfn - ok
18:58:52.0108 0x1920  [ E4D6B5E5E5CD2606391220B156235692, 4633C60BDA9FCB892054D4F338323A4C9E35915D1BF7571A38AC25D51C1BFBE5 ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
18:58:52.0144 0x1920  bcmfn2 - ok
18:58:52.0165 0x1920  [ 1F602D94A1DB47003B373DB0F14AAAF1, 964D37C4605E0A312E51C38C94E72C6E2F4D576C5D7416EF0D3C28F275DCC4DC ] BDESVC          C:\Windows\System32\bdesvc.dll
18:58:52.0221 0x1920  BDESVC - ok
18:58:52.0233 0x1920  [ 47DC23ACA8BEEE31FBA52E6657767E8F, A145DF855E70020AE96BF6D9852033E79E218F91998BE57B86E27083F8E86B1B ] Beep            C:\Windows\system32\drivers\Beep.sys
18:58:52.0276 0x1920  Beep - ok
18:58:52.0302 0x1920  [ AFD903C0CA3AB3F70E1E6DC09E1F7C97, 30A79F603BC6828AB6EA9AA992CC5C5CBEFC3741A7FD0A58B4D6C71501255742 ] BFE            C:\Windows\System32\bfe.dll
18:58:52.0369 0x1920  BFE - ok
18:58:52.0407 0x1920  [ 1605DDADAF3CC89E8F803F5955C82747, 480BCA04DA5DFBFD2FB4804113806013BD43DE0E64652B63310A16F7D959ACBD ] BITS            C:\Windows\System32\qmgr.dll
18:58:52.0495 0x1920  BITS - ok
18:58:52.0509 0x1920  [ EB4E94E3A66E19470176972A549A5A9C, 417E34B4004DB2187483E6AF2F9811373C2D57F7773BF04E5F9145FE78CC29AB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
18:58:52.0550 0x1920  bowser - ok
18:58:52.0580 0x1920  [ 2DBE710FC2592023F550A0A6D5E35AEA, 651BC87E88F335642BF1DFE3C729991E288EFC8ACA889CD7219C9459A7C7B6D3 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
18:58:52.0651 0x1920  BrokerInfrastructure - ok
18:58:52.0668 0x1920  [ 47AFBA90CD451D64352C90851761DF66, 54A6B66B1BFABD7968D4C641067E7199B0077EA3510C0D03837FB2B36FB4DD15 ] Browser        C:\Windows\System32\browser.dll
18:58:52.0715 0x1920  Browser - ok
18:58:52.0724 0x1920  [ AE0FB0E7C275AFAF60F822415DC6748C, C62CC0799A6DC4F4290B1FF15F95A988FF86D47D90AAFCEDA1F5752D311366A5 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
18:58:52.0766 0x1920  BthAvrcpTg - ok
18:58:52.0780 0x1920  [ D7CF5255298D8377812ED2E072E889A9, 6700C39D7413B5D948C01B7E90408BFA05C6EE0C5767841D32FC27234628DA09 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
18:58:52.0818 0x1920  BthHFEnum - ok
18:58:52.0827 0x1920  [ 36C5FB26B23A686EF24F7BF8E0FF2731, E7FAFEFE8184EFF66CA1BFCA55069F7B4FA2F4FAD70973448445A1DBE6043886 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
18:58:52.0862 0x1920  bthhfhid - ok
18:58:52.0879 0x1920  [ E6D7B2DC8DEDD9851CEBF4AD748DB651, D2A63D3E0F38B4D30E0D653E35F30AD2B2EC5440D41132CDAE4772846AA5ED03 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
18:58:52.0930 0x1920  BthHFSrv - ok
18:58:52.0940 0x1920  [ 946F5FAC425C4C616AD4B347FAA2A8C5, 5D56A9129F4ECF9A1B180E5987C9C57D2934FADFBAD2C5FCAD887DFC1649983C ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
18:58:52.0980 0x1920  BTHMODEM - ok
18:58:52.0996 0x1920  [ 64C79FE4EBE17BADD43E7945C3231FF6, AD4A53F594E9D23B23D71D42825DD4F1BE94D6BC03AFABE9A40E9027C55761FE ] bthserv        C:\Windows\system32\bthserv.dll
18:58:53.0039 0x1920  bthserv - ok
18:58:53.0051 0x1920  [ 1611E3AD41DD64FA2666BC25D3AEB6F8, 0A8E5B1B7E8235BE9516CDE477DED11EC88037AE8B2894A04F18598A33036F67 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
18:58:53.0088 0x1920  buttonconverter - ok
18:58:53.0105 0x1920  [ 4B51E183CB0460ACCCB08826B82BA2A5, 1B9F45AAED054EC5CA0C91CF888F7458F423609EDA4A8481BBF1D968CACEEA4A ] CapImg          C:\Windows\System32\drivers\capimg.sys
18:58:53.0147 0x1920  CapImg - ok
18:58:53.0159 0x1920  [ 9577B2171AD8DBC6A8BAAD75232CBF38, F939BDDB99A3A3A090A4A2728FB75E89ACFF72CB5C4BD74F00C7DA3A7028374D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
18:58:53.0206 0x1920  cdfs - ok
18:58:53.0224 0x1920  [ D7D8E3DC85C585EAE0A24BB78B718054, DA774648F3786FD2D31FCA8CE9C1B2DFAD79D49B9F7DA1078A663C4A37C610D1 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
18:58:53.0278 0x1920  CDPSvc - ok
18:58:53.0298 0x1920  [ 00677D7D4770A93AFDDFD59C97C5DB02, BB51DA44C4AA86BC4FBD39CB10B9E5047441C1130DFA6F720D9E346C28F27A50 ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
18:58:53.0349 0x1920  CDPUserSvc - ok
18:58:53.0366 0x1920  [ 67B188419B7018D7956A38C89EFCC70A, C37C1BBA25D9AE35649BE3ED2D829008F72EA92A3ADCC7A9038D1E47928513D1 ] cdrom          C:\Windows\System32\drivers\cdrom.sys
18:58:53.0407 0x1920  cdrom - ok
18:58:53.0424 0x1920  [ 1D6A243ECD54F7CC294B28946F6B5B33, 7A7F19ABD4B6D73121466B4D8649BBF375034B293FBDFE02A8982D09AA9E6393 ] CertPropSvc    C:\Windows\System32\certprop.dll
18:58:53.0473 0x1920  CertPropSvc - ok
18:58:53.0483 0x1920  [ 3B93FFBBBD36E1DD8335CA18E8432F7C, 4C1B712BB5A60C0B275B345712265BF5C9ADB80A5295155A76F4259F89E0F1AF ] circlass        C:\Windows\System32\drivers\circlass.sys
18:58:53.0520 0x1920  circlass - ok
18:58:53.0541 0x1920  [ C86D5336F7EBE40E8B69CE8515283DC8, CA084894BCD3ABAA2FF61DD72BD70071B828DF03079E9F4E746D29EF0DDEB7A9 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
18:58:53.0579 0x1920  CLFS - ok
18:58:53.0610 0x1920  [ 45DBAD9665B07032CADF149B8CEEF24B, 2D311D62C84EDFD55C39152AC0C84359B92C056137AB9EECAA46E7862F16254F ] ClipSVC        C:\Windows\System32\ClipSVC.dll
18:58:53.0663 0x1920  ClipSVC - ok
18:58:53.0676 0x1920  [ 95E1EFBF28F5B071DC763D54E8A302E2, 47609CF571F29A02E94BF64D0158E0D894EC4FD42BE38970EA20202474FB9DBD ] clreg          C:\Windows\System32\drivers\registry.sys
18:58:53.0716 0x1920  clreg - ok
18:58:53.0733 0x1920  [ 2DE5CAA56A2BE62470E65E5B0A438821, 2BF3B3186712803E351398215190336BF22A6AA1C892E7707CB50D67BC130E56 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
18:58:53.0769 0x1920  CmBatt - ok
18:58:53.0801 0x1920  [ 8AD8C91D90F656948650BCAECF13448C, 30B3BF8F7855894D546149DFF81ECD3838D718511019C02DBA0D5F0DE07822A7 ] CNG            C:\Windows\system32\Drivers\cng.sys
18:58:53.0856 0x1920  CNG - ok
18:58:53.0870 0x1920  [ 2BC3F67E62E85D19348A3882B923E343, 6C87C1EB6FCAF65E88088EA673972EC15F7B6EBCBE961FC9008D41C280314BC1 ] cnghwassist    C:\Windows\system32\DRIVERS\cnghwassist.sys
18:58:53.0897 0x1920  cnghwassist - ok
18:58:53.0912 0x1920  [ C7A0E61D5714AC20DE52D4F66EC773B8, 53F0C91FD62E6787221EFB4BFDB087C2087CACD6B0C0605F58FC391F546EBA7A ] Com4QLBEx      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
18:58:53.0941 0x1920  Com4QLBEx - ok
18:58:53.0967 0x1920  [ A647E88E5949450EB06DF2A7738043AF, D8CF5626115285E8793C6DAA7011598C86F821F934BBD5FBDE6A0E5EE7642C8E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_x86_ed148199964e21c5\CompositeBus.sys
18:58:54.0005 0x1920  CompositeBus - ok
18:58:54.0013 0x1920  COMSysApp - ok
18:58:54.0029 0x1920  [ 9F17B6403B954A9C7C24C70F6F90792A, E242A073742E092CF51E99AD5B9484F596A0D0CA080AEE7AB5CD1B1EE8767245 ] condrv          C:\Windows\system32\drivers\condrv.sys
18:58:54.0056 0x1920  condrv - ok
18:58:54.0085 0x1920  [ 2A2C56D4EE5B54D2BAAA39AE88EA0EEA, E03C3E7B802698397EAC802E6789A92D1E62626A3D0AE4FC96EAC6DFFE1783C7 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
18:58:54.0140 0x1920  CoreMessagingRegistrar - ok
18:58:54.0162 0x1920  [ 2AD3EF1C870850E1C7D8F07078006555, 6B37FB025F5F7E3E6E550EEF3DE06B73744F78152057FC2D7EC1FCF2519459B1 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
18:58:54.0214 0x1920  CryptSvc - ok
18:58:54.0237 0x1920  [ DB8B45AF1B7F27FCCC28BDA6DB8D8312, C1B08606F533D16E58D1D13B35367595B1C1F66618B6D2E06E27A6D3926F4CF7 ] CSC            C:\Windows\system32\drivers\csc.sys
18:58:54.0297 0x1920  CSC - ok
18:58:54.0329 0x1920  [ 3CE212F62B56993010B181F914875315, E6FBAE019BA37B7D4117179341B19352FB14E3A6884261E15E3D02ECC75BB1C5 ] CscService      C:\Windows\System32\cscsvc.dll
18:58:54.0399 0x1920  CscService - ok
18:58:54.0412 0x1920  [ 1253A07702253E23A6D31A7EA8F0152C, 36E670C661999FFF62FD5AA3EF19465189EDBE1B212A883081B186A26F7BE5A0 ] dam            C:\Windows\system32\drivers\dam.sys
18:58:54.0442 0x1920  dam - ok
18:58:54.0477 0x1920  [ 16C4E1708C9574B5CC9A32324FCE51DE, A7D99F2A6B254B5E9532CE957BDDE339D6D2281290A4ABE6B8E497E9D4872D05 ] DcomLaunch      C:\Windows\system32\rpcss.dll
18:58:54.0559 0x1920  DcomLaunch - ok
18:58:54.0576 0x1920  [ E32C822C524D7C72EB27A778FEE532D2, 641BF41A9364EBDABCE2576DB423171A4048850BC61F6C20534AB13933814E63 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
18:58:54.0627 0x1920  DcpSvc - ok
18:58:54.0649 0x1920  [ 6B8D6B334672A0ED29CCA41369888431, F63EF65651E113446B528AF927F0417BC909996F3DDAC639F164933A3FF022A4 ] defragsvc      C:\Windows\System32\defragsvc.dll
18:58:54.0717 0x1920  defragsvc - ok
18:58:54.0741 0x1920  [ 234BAFE8BC6930A22290FB4BD42575BE, 5E6955EE67AEA5E6A61101A892EB65A10D5F31199660C5C12206DD1BEBD94BC3 ] DeviceAssociationService C:\Windows\system32\das.dll
18:58:54.0798 0x1920  DeviceAssociationService - ok
18:58:54.0813 0x1920  [ 0DF131F7F00E34B6C9DA053E55A80AA4, B3CA50986884B00B67EF1BB3910CA60FFEB4EA3AB9D08CBD6E82E792B650128B ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
18:58:54.0866 0x1920  DeviceInstall - ok
18:58:54.0875 0x1920  [ AFD78D3A35662205B8E3BF50F5FC0A70, CB50A1B5645922DF1338BDFE733E9846B89AA2F8F2AE127314A971DC12EF6702 ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
18:58:54.0913 0x1920  DevQueryBroker - ok
18:58:54.0928 0x1920  [ 9C24695688530F014821E30FC8FFD3C9, 72EAAC4F21826F5198F313421B82484A1D3FEAD4AEF4F4DC45A22C4FF3B59D20 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
18:58:54.0979 0x1920  Dfsc - ok
18:58:54.0997 0x1920  [ E0201A4BB639042959A11457A52DD627, CA05AE303DC32347C87B512078F4CCD9E821271D8E54A18023D1DCB1F5D0C2B6 ] Dhcp            C:\Windows\system32\dhcpcore.dll
18:58:55.0052 0x1920  Dhcp - ok
18:58:55.0064 0x1920  [ 06BFFF10377726EE09E9CD38E187EF16, 51E4875DE91309D86FD24744356E70BE2E0CB3E7BE0CC9321F65544A68ADAC1B ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
18:58:55.0109 0x1920  diagnosticshub.standardcollector.service - ok
18:58:55.0169 0x1920  [ E16FC9748D4D9CC1B5037B78DC738F7F, 1A01B81C0AF4F4B9EEFA515CBC14D5B3E9D8DAC5B9CD5B3D771F111BAD9EA6B3 ] DiagTrack      C:\Windows\system32\diagtrack.dll
18:58:55.0293 0x1920  DiagTrack - ok
18:58:55.0309 0x1920  [ F2BBF4C89BE9D8A5338955CC660C9308, 95039E5786F00949D1C375FD23EA2D1AD1BD86CE01270473955D470BCCE4D9D3 ] disk            C:\Windows\system32\drivers\disk.sys
18:58:55.0340 0x1920  disk - ok
18:58:55.0359 0x1920  [ A185BCC083628A702D61F384B2D37DE3, 1DFD17D0E6C7C31D8330C15F33F1C6F22808A4170935C3C087BEBC9CCB3225D3 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
18:58:55.0420 0x1920  DmEnrollmentSvc - ok
18:58:55.0430 0x1920  [ 22C192B3FC5DD7068BA6D56D8755948E, 0D16516710C7EE7CA32AC45B5BC83E6B8AF352B18C6ED4663689B7AB74DBD0D6 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
18:58:55.0475 0x1920  dmvsc - ok
18:58:55.0485 0x1920  [ 98B56EE8E60A517DB651F79A10FD937B, 9B5F4CD835E441F3835BAB4D1D74C082ADA8B07B046CA77517155C74C98B3FD4 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
18:58:55.0537 0x1920  dmwappushservice - ok
18:58:55.0552 0x1920  [ F3F9449C3F466434912D06E0FBA59FBD, 46BD399D7707E238E440AC8E68D7BED58E4C2D8031EF19F951796EE969956CBC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
18:58:55.0603 0x1920  Dnscache - ok
18:58:55.0625 0x1920  [ 29B816D498BB00B46328887131943ECF, 350152ECAC1693B3F66052CCC0E673827220F7B6CB960B979B1A970E68E86BB9 ] dot3svc        C:\Windows\System32\dot3svc.dll
18:58:55.0674 0x1920  dot3svc - ok
18:58:55.0688 0x1920  [ 3A46434BC8319CDDC44E02664D67CA26, 74C26F8E17FA08E70F2A103C7DD032A41AD39D1564C3EEE4E30CAF557678FE24 ] DPS            C:\Windows\system32\dps.dll
18:58:55.0734 0x1920  DPS - ok
18:58:55.0743 0x1920  [ 065F7A30FDCFC86E850BA76C8AC3C8F8, 692D47A6231AEF32E554F43823855B4AF449B5881AF956B5E9E4F01A04D57D58 ] drmkaud        C:\Windows\system32\DRIVERS\drmkaud.sys
18:58:55.0771 0x1920  drmkaud - ok
18:58:55.0784 0x1920  [ 122C70C18BFABCF509F683A1D739264D, 88A29F225A5B136EAA6DFA2F03BA2CBF86B484EA32A331590216F48408F05364 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
18:58:55.0837 0x1920  DsmSvc - ok
18:58:55.0850 0x1920  [ 2C8B7475888EAA31315F5960DA2019B2, F5C4E6C54C3C339CCBF025FE847BF9B5C5EAE485A7707D2BF24E7174ABB260DD ] DsSvc          C:\Windows\System32\DsSvc.dll
18:58:55.0898 0x1920  DsSvc - ok
18:58:55.0970 0x1920  [ 26D7D93C95E514606D2470445DCB3AE4, EBC5A0619B10BB6DAC1F8A5CD32A58984C080A94D128917B8487646E40A55093 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
18:58:56.0081 0x1920  DXGKrnl - ok
18:58:56.0100 0x1920  [ 6E1E91144E0058039E2D5C0FAFF52783, A3D143A9F0B3385471449683985A3803085480DC27F811F471AC6B59EBA8F918 ] Eaphost        C:\Windows\System32\eapsvc.dll
18:58:56.0150 0x1920  Eaphost - ok
18:58:56.0159 0x1920  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] EFS            C:\Windows\System32\lsass.exe
18:58:56.0192 0x1920  EFS - ok
18:58:56.0205 0x1920  [ 13919673FB7CD6EA50B65D0A780C6668, 2F1C32B9E2F013A0F83A449FCA3CD886289E8F073A79522AA6515183613A9B0B ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
18:58:56.0235 0x1920  EhStorClass - ok
18:58:56.0248 0x1920  [ 985743134FA3EFCCE29420C78899C04D, 8F1DA5CC155FF315D93AF17781F0E1BC8BCCF1D649686B0C0502026E2ABCDAB1 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
18:58:56.0281 0x1920  EhStorTcgDrv - ok
18:58:56.0289 0x1920  ElbyVCD - ok
18:58:56.0303 0x1920  [ 7BBC217388D13405B20B6DB2D2B149C2, 02CB05C0914A8D96F729B9FBF96E09855E06EC2624A5B3C7CE8DB6141BAB8351 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
18:58:56.0352 0x1920  embeddedmode - ok
18:58:56.0372 0x1920  [ 17641F7E9BC7EEC02420747962D9D106, B2999FBBBCD708917AD9D6FC7053632C06089D0BD2564D3F68C6F87C8E11A845 ] EntAppSvc      C:\Windows\system32\EnterpriseAppMgmtSvc.dll
18:58:56.0426 0x1920  EntAppSvc - ok
18:58:56.0434 0x1920  [ D7136B01DC15851F82F1ED40A3889CA0, F7744A5EADBB2CA55E7525E64AAA7301F7B749019E8146992B2B8EF7DC02A201 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
18:58:56.0470 0x1920  ErrDev - ok
18:58:56.0494 0x1920  [ A8CE54F53E76FDB5EDA357083369F06D, 648AA6B2521C861E63F1A0108C2201AEA7B9971DC216DF54FED5D6D66601E2FC ] ESProtectionDriver C:\Windows\system32\drivers\mbae.sys
18:58:56.0521 0x1920  ESProtectionDriver - ok
18:58:56.0546 0x1920  [ 297BFCA82AA994CE9B95706146764FBC, 9850D39254033EAA3FEE7ED25286CCF85608AA81D04112264A6F2C41CF153148 ] EventSystem    C:\Windows\system32\es.dll
18:58:56.0604 0x1920  EventSystem - ok
18:58:56.0622 0x1920  [ 0AD112D64CBE7CD0CC56BCC51A96C244, 872B791C97C3404AC056F231A436DC5FEA0AFAFDBA8843B7B0F345E551647A56 ] exfat          C:\Windows\system32\drivers\exfat.sys
18:58:56.0678 0x1920  exfat - ok
18:58:56.0696 0x1920  [ D2FC572D6B71CF1EB30370617AF46C4B, 416236FB42B91D435BB3613026E8CAB9E26642AD32BE69CB109C1BF6697E6F99 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
18:58:56.0739 0x1920  fastfat - ok
18:58:56.0766 0x1920  [ 0DA3553D2D52F8529B67C38D6DD0E15A, A6D590BCE75E0D70A175C115D48FC483452458B04078394C1B3829E6BF75810D ] Fax            C:\Windows\system32\fxssvc.exe
18:58:56.0834 0x1920  Fax - ok
18:58:56.0845 0x1920  [ A0126E7A898BB9D2903DE9F403920DE5, 6794087F2E0D9DF0A16138689A2D908D4B85C79AFE684E917121A242F21B2114 ] fdc            C:\Windows\System32\drivers\fdc.sys
18:58:56.0882 0x1920  fdc - ok
18:58:56.0891 0x1920  [ DC3775810E822B01FFA7F2495247D253, DB59321E07BEDD011BACC0797A41BC924384A1EA8A07905A801785603D9B687C ] fdPHost        C:\Windows\system32\fdPHost.dll
18:58:56.0933 0x1920  fdPHost - ok
18:58:56.0942 0x1920  [ BDEFD67A4F1BBC713BC25E8B1A6EC531, CD80EFE7BEF14894BA81028F5E303ABDB2BCD51ADF397F3D035BC11D007121ED ] FDResPub        C:\Windows\system32\fdrespub.dll
18:58:56.0987 0x1920  FDResPub - ok
18:58:57.0007 0x1920  [ CB1D954A95C06BE11AD1342FB118C781, 78187C52714B2A69EB3323261B64FB3239FCC861109C5057529D132B78390130 ] fhsvc          C:\Windows\system32\fhsvc.dll
18:58:57.0054 0x1920  fhsvc - ok
18:58:57.0066 0x1920  [ B1CBAE1E28CDC943C15A84071F458B68, BED9F204C32334204B22B6756C47692131F1A330ECC58A31BE9533DD4A6C358F ] FileCrypt      C:\Windows\system32\drivers\filecrypt.sys
18:58:57.0107 0x1920  FileCrypt - ok
18:58:57.0117 0x1920  [ 3FB44718D1EEAF86084E3DB63C2CCE35, BE1985D12738F1AF7367C0CA0086CD7216E989159BB880C0BDAFACB499186ECC ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
18:58:57.0146 0x1920  FileInfo - ok
18:58:57.0155 0x1920  [ D83A9B254CD6F8DA9F088B11549F7079, 34A8E248B7A66075C8EA5AA5FA180E6E2FF7A5CE8BAE09F0144EC1D23B01E87B ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
18:58:57.0197 0x1920  Filetrace - ok
18:58:57.0206 0x1920  [ 89D636A10C1D074B3CC4DA34F106728F, C836D780A4848BB2F093125390FEE2D885F80DDDB6E68AFB2D85B2672B6E4DC8 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
18:58:57.0248 0x1920  flpydisk - ok
18:58:57.0269 0x1920  [ 79C58738E216A568216ACE46CEEA9C21, 585A1C5426D13F009940CA84C41623C7FDDF9660C58F1B211BC744BE8AE566C7 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
18:58:57.0309 0x1920  FltMgr - ok
18:58:57.0371 0x1920  [ 51B108F8123250BCD617B628F4FF4785, DBEF8A3AF4539CD27DA596B78CD2D3AB0B0071C13FE98D634ADB75ACD34DF88C ] FontCache      C:\Windows\system32\FntCache.dll
18:58:57.0505 0x1920  FontCache - ok
18:58:57.0519 0x1920  [ C9427725CB6DDFA911F30D5F4E369581, 03ABCDEE3C5AF02B1D9A3E686ACA7C8E71F1E93FA26F126EA424B40E1D5DEEA4 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:58:57.0549 0x1920  FontCache3.0.0.0 - ok
18:58:57.0574 0x1920  [ F596DF5D4C4F4135658C41FC03931076, 56D6751E418A4D30DFB9A3B9FE72F2969CE5A47AD91B568720E0B42419195189 ] FrameServer    C:\Windows\system32\FrameServer.dll
18:58:57.0640 0x1920  FrameServer - ok
18:58:57.0651 0x1920  [ A5B6ECA47256E837FE15937D2BDAB1CA, C5D4BC3CEB145A2130F22C27779BB19573861B0F08CB1B5E2C02C82F7FBF8BB3 ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
18:58:57.0679 0x1920  FsDepends - ok
18:58:57.0691 0x1920  [ 6D729037BFBBBB21BA8F1ADC4888C254, 92FB100060B01503D880D1F150D361ABA32D839643620EFE93BAC96ADA7E9C2C ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
18:58:57.0720 0x1920  Fs_Rec - ok
18:58:57.0749 0x1920  [ 37159C90791F2D07EECA46137E021CB3, A0E14B280563B1C714B9AB03CFE2C51E283160503DA060CB5EBA0FB7EBCE9928 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
18:58:57.0801 0x1920  fvevol - ok
18:58:57.0813 0x1920  [ 55D0AB364EC299911365D85DFDDF9E53, 3673F08B233FC62B0DF464B0B310D3301A34424A5B2D1C737488A8E2FD9347DD ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
18:58:57.0853 0x1920  gencounter - ok
18:58:57.0862 0x1920  [ 813721B1164B29FC94711E94ED5948D5, 91A10E0CF09AB1C10045B2BA73247511312DD374938211C6E3649B8E01FB1E31 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
18:58:57.0901 0x1920  genericusbfn - ok
18:58:57.0910 0x1920  [ 77EBF3E9386DAA51551AF429052D88D0, 94C3294BB9E14B07448734AE65B37801D3FF15BEC987D182A929A017FEF7B276 ] giveio          C:\Windows\system32\giveio.sys
18:58:57.0932 0x1920  giveio - detected UnsignedFile.Multi.Generic ( 1 )
18:58:58.0976 0x1920  Detect skipped due to KSN trusted
18:58:58.0976 0x1920  giveio - ok
18:58:58.0988 0x1920  [ 73EFE8A2747BB87F66B5646AA2262AE4, 368AAFA38F214D474206B914A4258B3679CB0B1C9080D32DFB3BF890BD5611A8 ] GPIO            C:\Windows\System32\drivers\iaiogpio.sys
18:58:59.0026 0x1920  GPIO - ok
18:58:59.0042 0x1920  [ 3B76B2A4EA0461434706F6F9E51F570A, 479AEB84BDBC6133E1D7CF3880D175C99C64F37D46686B06942798EBBAE3BE5F ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
18:58:59.0074 0x1920  GPIOClx0101 - ok
18:58:59.0122 0x1920  [ 477F552C63B73DF010E603A7515609CD, 7D488AB5C14A0F35A9CB5922FDC2028E201C2CC699FBDC58DD3CA5D910A2654C ] gpsvc          C:\Windows\System32\gpsvc.dll
18:58:59.0230 0x1920  gpsvc - ok
18:58:59.0248 0x1920  [ F6C07AD956D1FEE95D6A8D21CFA024A9, C23F7DAED98CDF1C128A5CB012CC916BE5FD5B9494B84F93761279505B842871 ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
18:58:59.0284 0x1920  GpuEnergyDrv - ok
18:58:59.0295 0x1920  [ CEA72AC01892B12514D15E21EF1BC75D, A44B9493C31479F9EB6C82FFDD6DBF0E6EA98336E6996116CD1A926C7A591214 ] GTIPCI21        C:\Windows\system32\DRIVERS\gtipci21.sys
18:58:59.0335 0x1920  GTIPCI21 - ok
18:58:59.0344 0x1920  [ C172F0D0329E46513B09E1FC60A27B9D, 05DE0544C8A29B2C6028D2B97F81EACED5B99B571DE507A18CE856BD30DF7D56 ] HBtnKey        C:\Windows\system32\DRIVERS\cpqbttn.sys
18:58:59.0361 0x1920  HBtnKey - ok
18:58:59.0382 0x1920  [ 1243DF3886454DBC0CE10F50809FEB94, 72205060CCD3E40B94A2331FDDDF2CBB248B1B9EB4B7FD7EA79263EEDFC7DB51 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
18:58:59.0448 0x1920  HdAudAddService - ok
18:58:59.0459 0x1920  [ E67AAF24F03D9D1B7616C0F5663556CA, 009345F574B3A061EE2A814378151FFE682F1F6011AC4D1C39185629BCED1615 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
18:58:59.0512 0x1920  HDAudBus - ok
18:58:59.0521 0x1920  [ DC0EE7188ECB1DC81329242ADC9AA866, 03DCCD6A4DB164025B7048EC2D75C2EFB7C2C59AF86CFF17C8445A7B11DCC5F4 ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
18:58:59.0549 0x1920  HidBatt - ok
18:58:59.0560 0x1920  [ B48564703C7EADF54E98BD37DAC977FF, 3DA211BCF0CAAE4723B77EA29EA8C1931CAF68BB9B2106482109871CF0BD47C0 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
18:58:59.0600 0x1920  HidBth - ok
18:58:59.0612 0x1920  [ 06717AF4BA807B54C79B9769815F1853, D4757F51F6F1DF9C3B2D0254E1C50C3AD509D1AEF825338C834A1E368EC664E4 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
18:58:59.0654 0x1920  hidi2c - ok
18:58:59.0663 0x1920  [ 886742395F435F565CBE3623E2EBB7E4, CC6666929DB21B70F2FF6DC8E0E1245B3518DF5A00612E8B5D96B9CF96F2E37D ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
18:58:59.0691 0x1920  hidinterrupt - ok
18:58:59.0700 0x1920  [ E1BD3175634178556EBD4EE4711BD7AF, 9EB96D3D9E92476E51FA70ADDAEEBD15DBF65C7D307793FDA68CE7DBE8AC138A ] HidIr          C:\Windows\System32\drivers\hidir.sys
18:58:59.0738 0x1920  HidIr - ok
18:58:59.0752 0x1920  [ BE6A279ED7023652DD94FA19E9B27882, A5A0E3AF6121BF2122C7652CB0232651FFBADB9CE2B04580C8112886686191A2 ] hidserv        C:\Windows\system32\hidserv.dll
18:58:59.0792 0x1920  hidserv - ok
18:58:59.0805 0x1920  [ 5E0186347B8E9A868EFAC611BE88206B, 1AEFF85613248DAF5724BE99A7CAD9115505CAF4807A2D5D391DB3AC6C6EF4C0 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
18:58:59.0842 0x1920  HidUsb - ok
18:58:59.0861 0x1920  [ 6098A3A34FB7709E5542BD772AC65261, 37E001A413D9669323F4887569F08A58A5C485707D0695466F25E2DF86E1FD67 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:58:59.0913 0x1920  HomeGroupListener - ok
18:58:59.0935 0x1920  [ E5D081908B6DD64BDFC125A56428AEA5, 751E9EA2168C475690C1A081FBDEC80F2BD140D77C61C9CD4C9ECA338D2A99F3 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:58:59.0999 0x1920  HomeGroupProvider - ok
18:59:00.0013 0x1920  [ 91AB80156F5DF5B1495A687E5047961B, 3F6F91200553A2DC907D12903C3EE9EE36BDC82521628515C6AFDA09789F8DC6 ] hpdskflt        C:\Windows\system32\DRIVERS\hpdskflt.sys
18:59:00.0032 0x1920  hpdskflt - ok
18:59:00.0043 0x1920  [ 1210960FF8928950D2A786895B0C424A, 22C8785E024CFDD3A43FAEAAA96B8332C37E9B6C765AB7AFBCD3DAA2DC9EFFC7 ] HpqKbFiltr      C:\Windows\System32\drivers\HpqKbFiltr.sys
18:59:00.0088 0x1920  HpqKbFiltr - ok
18:59:00.0102 0x1920  [ FDF273A845F1FFCCEADF363AAF47582F, 9BB99346A977225EF77261CD3CF4219A238EB06FFE2DB91D00A0037BDCFECEF1 ] hpqwmiex        C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
18:59:00.0128 0x1920  hpqwmiex - ok
18:59:00.0139 0x1920  [ 4823026B825C419071EF342EAA02AC25, 313EDCA453777A1888EB3B2BD14F5F3266F265C6B829DF37E8EBFD5D74C9415F ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
18:59:00.0168 0x1920  HpSAMD - ok
18:59:00.0176 0x1920  [ 361069D78E96F27647EA99A5A5789DC3, 771E790C304BB159094C4AA24A1F20C92DBD9D41917B59EEE8AFA3A88558048C ] hpsrv          C:\Windows\system32\Hpservice.exe
18:59:00.0199 0x1920  hpsrv - ok
18:59:00.0235 0x1920  [ 4C448A376B2830E04C479526EBDBB5C2, F697191DE2A2A6D72CC6766204A11B757C503AB21B622736E39BBA357E167C5F ] HTTP            C:\Windows\system32\drivers\HTTP.sys
18:59:00.0298 0x1920  HTTP - ok
18:59:00.0313 0x1920  [ 87DD07FD11E223C6F3322C242818E35B, A13F5E957926F441F899AF82C1CF72C425569B049DB32B06D8712A48A8132C57 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
18:59:00.0339 0x1920  hwpolicy - ok
18:59:00.0348 0x1920  [ 13757A2431D14C7E9E4221D7E4E49266, 6BD7A6CBC6606380153EE7DCC1A8A0F0AC9E74BCF9665E64BA8123BE63813E2C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
18:59:00.0383 0x1920  hyperkbd - ok
18:59:00.0396 0x1920  [ 7D889F2D2464940C2DA8A218F5282F21, 06A8CE55D30EEADD3BCDBCD66F2CADA074D32E60B474BBE18759CB5A4318BD89 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
18:59:00.0437 0x1920  i8042prt - ok
18:59:00.0446 0x1920  [ 9FD2F64E54C2B4B2EC0F0C7BF9997C34, 659417B7005DF6716231A66D2BA947A3F12957B5A9801826DF7808B2C8AAE2C7 ] iagpio          C:\Windows\System32\drivers\iagpio.sys
18:59:00.0483 0x1920  iagpio - ok
18:59:00.0497 0x1920  [ A0D5587F43A9824840A8D1EE4BDB184E, B7A7557BBB4E8C25883FE39070F5C71C0AFC080EEF72CFADD563C3572ECE0314 ] iai2c          C:\Windows\System32\drivers\iai2c.sys
18:59:00.0542 0x1920  iai2c - ok
18:59:00.0552 0x1920  [ 646D3B416BC970C3CD2F53844FD156A5, 045CBA642382B33DB1E222302B14DD46838895A73CE50426FD180B4CA918253A ] iaioi2c        C:\Windows\System32\drivers\iaioi2c.sys
18:59:00.0604 0x1920  iaioi2c - ok
18:59:00.0632 0x1920  [ 679359487C5ED5DD1FBF357749EBB020, C53A8D79E019E889C6B1B956CCC39F6B6D0F88FD71BD092FBC5DC64D5E8192DD ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
18:59:00.0682 0x1920  iaStorAV - ok
18:59:00.0704 0x1920  [ 9B62A8511B3D9154F4B2A47C7EECBBA5, C04681055B84A4BD75F4AA405CF40EDCA3DEA77D4BADB37A441BC687E7A5EF18 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
18:59:00.0746 0x1920  iaStorV - ok
18:59:00.0764 0x1920  [ C44E3058903C80EB48205919E887CAB4, 0EF5C7625EE3BE52DFDF44804CA4CF9C7F5FEE22315AF1BBA4213C888025B4A0 ] icssvc          C:\Windows\System32\tetheringservice.dll
18:59:00.0816 0x1920  icssvc - ok
18:59:00.0989 0x1920  [ 35CBB5A4A91DA63C8EE6F36FE9B1FDB5, C0055E3D904F79A1C3810381F3383FD276DBE4D75357E45C21ED0C8842BF77B0 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
18:59:01.0311 0x1920  igfx - ok
18:59:01.0359 0x1920  [ D0A86D037E8FC3584FBF882F0232B194, 2A002A0FAB09A4544C6363DC4132E3138D9D776D208FEB25B8626916BECF2BDC ] IKEEXT          C:\Windows\System32\ikeext.dll
18:59:01.0438 0x1920  IKEEXT - ok
18:59:01.0454 0x1920  [ 7C28B5FF1A83FAD4EB2964A6769DB972, AD0B0F7BDFE6DC3411D3D0168F286E2F7A7215DAE6B6704D772F3A79C3CA7913 ] IndirectKmd    C:\Windows\System32\drivers\IndirectKmd.sys
18:59:01.0494 0x1920  IndirectKmd - ok
18:59:01.0511 0x1920  [ FF01147A374A06FEAB1BFAC93287C8C7, 62384B44EE90A019A07594B761D3E645E31F8FE3B52A7E99654D1468450A76CF ] intelide        C:\Windows\system32\drivers\intelide.sys
18:59:01.0539 0x1920  intelide - ok
18:59:01.0550 0x1920  [ 8CA679CF6CC09754F8398AE18242503B, 63004515749D468AC29A109F76028AAC2BA6C8B0246A26F6901C4308BA81AE29 ] intelpep        C:\Windows\system32\drivers\intelpep.sys
18:59:01.0579 0x1920  intelpep - ok
18:59:01.0591 0x1920  [ 27242FBDF64B9B1C29A8555279DD47E2, 5B055E2652B87EE98CAE9834EAF58207AA417BD64E581FA3313F52644E505685 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
18:59:01.0630 0x1920  intelppm - ok
18:59:01.0641 0x1920  [ 061B3A4E1FC4EA13225D9C4830733172, E43F6A7962B1E6A1CBBC90A68BD3497ECB5A0F4E25FD2A522890CEB1380DAF9A ] iorate          C:\Windows\system32\drivers\iorate.sys
18:59:01.0669 0x1920  iorate - ok
18:59:01.0678 0x1920  [ 0936FE04B833C852CAADE4A4EF7520FD, 6B69D2E2AFC30E6D759BB0DA1573DD090FF3C9C7E2E542C4598B401C2249085B ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:59:01.0720 0x1920  IpFilterDriver - ok
18:59:01.0760 0x1920  [ 2A1F3BF1C239647775E41F8020F93629, 4C7EA6753BC98F82D32765C55C4295077DA1D91978FAE3AC947C77FDF789EE21 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
18:59:01.0847 0x1920  iphlpsvc - ok
18:59:01.0860 0x1920  [ 3CE14CA8BE8E6738657EF6A2BEA8BC51, 19696986B1A01B8A656F52BF4E2107FB07F88B3BD4217F16C6374330E23EAC4B ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
18:59:01.0890 0x1920  IPMIDRV - ok
18:59:01.0908 0x1920  [ 3FDB0E7AC49A78D21B470863CDA5E342, 0439E9EBD40FD1E293CD0676F4029617E03AABF7A1B668C38D2EAED4DF2A836C ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
18:59:01.0951 0x1920  IPNAT - ok
18:59:01.0965 0x1920  [ 100935549DB97F99CC9DB141B10E4AA7, 3E591D073202A901695BF3A8EB1E9D48391D4E5387E3CC86B9CDB365A2076C06 ] irda            C:\Windows\system32\drivers\irda.sys
18:59:02.0008 0x1920  irda - ok
18:59:02.0018 0x1920  [ D428B631C883610C92A83DCA0A813D76, 59F3F4FACD2671BD97A4D0DA67CA2B02EFB8B01E2E66AA9D937E99AB88BF462B ] IRENUM          C:\Windows\system32\drivers\irenum.sys
18:59:02.0058 0x1920  IRENUM - ok
18:59:02.0067 0x1920  [ 51CF322AE4D5C752FA3977B419341ABB, 2DA9ADBAF91E57DF41EFB389C21EB0F9D34B9F5A705AE2E4B5113189BB2FCB24 ] irmon          C:\Windows\System32\irmon.dll
18:59:02.0107 0x1920  irmon - ok
18:59:02.0117 0x1920  [ 15DD238B3E280A3E31E2F5BB29630B98, 57F37172410C74DB5DEBC10FD9DB55D2D959F45E5AEA51FAEA900B119A34FD80 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
18:59:02.0146 0x1920  isapnp - ok
18:59:02.0166 0x1920  [ 3AE6DA207A27333CBD71B132B695BBBD, 0BD58DAFAD2199AB9312B020315628153A8DC1EDBE6FD7C48F18F785349BB7FA ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
18:59:02.0205 0x1920  iScsiPrt - ok
18:59:02.0214 0x1920  [ D09509545F6E0B1D5895129DA5255FB4, E0FC5F564A134DE6030C1561D253056B7E449F56402D3119A82EA4B158A5D17A ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
18:59:02.0243 0x1920  kbdclass - ok
18:59:02.0256 0x1920  [ 12A96DA887C835D83D492CF12FF3E098, A8E48F341D1478C2A81AB8175404CB1949510DCCC658FE66682C770BDB1BF3E1 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
18:59:02.0293 0x1920  kbdhid - ok
18:59:02.0302 0x1920  [ A6B39C3BA2D85BF7D640EBE81995DD64, 4A72D372CDA0F862505C640EF43C0F0C01E0E0533E4CC4439FDAE6D20F4ADE72 ] kdnic          C:\Windows\System32\drivers\kdnic.sys
18:59:02.0339 0x1920  kdnic - ok
18:59:02.0352 0x1920  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] KeyIso          C:\Windows\system32\lsass.exe
18:59:02.0383 0x1920  KeyIso - ok
18:59:02.0395 0x1920  [ D1030A854286D7A2171C239D8FCE5C02, 24475DA6F6ED2CCAECB5E0C11748EF509B86991A49F1887196F96BC2A804BA42 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
18:59:02.0425 0x1920  KSecDD - ok
18:59:02.0438 0x1920  [ 755F5B189F8B92B10A0DF2175B064C63, 9F0FDAAD5C3D1BEABA18EA9B1C3A34AE9614DE67DFA7222A8B16BA17AE619DCE ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
18:59:02.0474 0x1920  KSecPkg - ok
18:59:02.0494 0x1920  [ FC5E079DD7EEAE9EEC0F441459FCE8D7, 5D8B26EE0520227CC4AD0D5D3AC8291531807628EC9917372EA1D819EFBB7427 ] KtmRm          C:\Windows\system32\msdtckrm.dll
18:59:02.0553 0x1920  KtmRm - ok
18:59:02.0569 0x1920  [ 258661013CC98B51218CCEF4ED7F0834, 1432FCFAB25F4965C3E3E7A964AE076CC9420980FBC33D2BAC0BBD04F3A351EA ] LanmanServer    C:\Windows\system32\srvsvc.dll
18:59:02.0624 0x1920  LanmanServer - ok
18:59:02.0642 0x1920  [ 64C3883E74D12CB08C4091874C8B8DEA, 84C84E6CBD9223912CAF0FCE69BAE2036FEC3F414CCCB44FE6452BAAF8BD20A0 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:59:02.0697 0x1920  LanmanWorkstation - ok
18:59:02.0711 0x1920  [ 1C9CAD178A37A3C7047BDA51FF39D454, 5ADD6AB911D2AF6E94E39286D94EEAF5462AA719FBE977FAFF7717E09608C1B0 ] lfsvc          C:\Windows\System32\lfsvc.dll
18:59:02.0752 0x1920  lfsvc - ok
18:59:02.0765 0x1920  [ 9D43EA3F9CB70E07486378D2D61D0770, 40C7DBF2DF77D7A290059C464F918BFA60F4586A25B4B9ED67900A3BEC7FDE64 ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
18:59:02.0811 0x1920  LicenseManager - ok
18:59:02.0820 0x1920  [ 1A8B2F55C261A041A4F9D684FBB2DFFD, 3A8D24A46DEB1841D5644594953426A371109DA11D7CC2E0C49B28697D715B26 ] lltdio          C:\Windows\system32\drivers\lltdio.sys
18:59:02.0858 0x1920  lltdio - ok
18:59:02.0873 0x1920  [ 5DCBC3F45B9070DAB1A4413284F3DFB1, 210B33442B102C1BBEB5B85AEFD35E8B4B3B81DF36C8A2AD6DC21F2BC2FE57AA ] lltdsvc        C:\Windows\System32\lltdsvc.dll
18:59:02.0922 0x1920  lltdsvc - ok
18:59:02.0930 0x1920  [ BE7615B2C86641644525E5FD448CBE4C, 72435837BBED624442A25C88685F0D09636ABDCF0CEFCDEEB66C6DEAF01E36AA ] lmhosts        C:\Windows\System32\lmhsvc.dll
18:59:02.0972 0x1920  lmhosts - ok
18:59:02.0990 0x1920  [ 08947A02B42C4AE496E9E0AFF99D0059, C3FC294220F77C8756E670420F766E092CBA41055143A6A8E38B5F42BF8C5B6E ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
18:59:03.0021 0x1920  LSI_SAS - ok
18:59:03.0036 0x1920  [ 083C404C6CF4578AE46AB28F72DA4B1E, 6E2C868B87F742CF20B0AAC752AA067B7D6378B59A563310FB4CF927507CC305 ] LSI_SAS2i      C:\Windows\system32\drivers\lsi_sas2i.sys
18:59:03.0067 0x1920  LSI_SAS2i - ok
18:59:03.0078 0x1920  [ D0F4EC4718F7EB222C8AD76BC3B5E013, 90B161571A5EE8E880198A978B7022E7A43A9D1D756EB198A7DB65C8A91843E2 ] LSI_SAS3i      C:\Windows\system32\drivers\lsi_sas3i.sys
18:59:03.0110 0x1920  LSI_SAS3i - ok
18:59:03.0121 0x1920  [ 0BAB30365711E81D11311BF1C30F9F75, C2C3A0090E43B6BBC504F9EA0A4CD31D48B125A7B689F0D5815B78B961E308ED ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
18:59:03.0150 0x1920  LSI_SSS - ok
18:59:03.0180 0x1920  [ 35754BFDE1F707A3202ECADC7F369A56, D297B8868A88BE8F3B13ED82166AD2255046B2A9BFABD20F5CA041AEA0772170 ] LSM            C:\Windows\System32\lsm.dll
18:59:03.0254 0x1920  LSM - ok
18:59:03.0267 0x1920  [ 32A1009A6933E75BB0BB85DE9AEE84FE, 8C2ECD0C3EFB9C91B71769A72D9229D8047E876E28237EC75C6C3E1490802536 ] luafv          C:\Windows\system32\drivers\luafv.sys
18:59:03.0314 0x1920  luafv - ok
18:59:03.0328 0x1920  [ 599D0CB2A9EB7F07BAD948D852083FCB, 5BA77A5DCDF5D9A295AE160C05E5212EE933898456ECC016B0CA4895CD82369F ] MapsBroker      C:\Windows\System32\moshost.dll
18:59:03.0373 0x1920  MapsBroker - ok
18:59:03.0389 0x1920  [ 7023B5835A1D6E5C69518AB6FED7DD0C, FD073393FA572EC098F640AF80997E8EFEE2837699384D95350F1C719FE71863 ] MBAMChameleon  C:\Windows\system32\drivers\MBAMChameleon.sys
18:59:03.0415 0x1920  MBAMChameleon - ok
18:59:03.0428 0x1920  [ D9351F554ED0784764DB0564186906AE, C7DC59A8D528A9A2FCF592D20C20B40D4315B1C09E82A4C1D0B5C6807E8E7338 ] MBAMProtection  C:\Windows\system32\drivers\mbam.sys
18:59:03.0453 0x1920  MBAMProtection - ok
18:59:03.0574 0x1920  [ 28D7A3DEC41EB05A80BAF58697B54E98, 8C87C56396C4922C225F9B7F92888434DA9C6CC467FA643107CE11F8D51A329B ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
18:59:03.0733 0x1920  MBAMService - ok
18:59:03.0762 0x1920  [ BF7D701D9EDDA9737DF8A39C1C0B8210, A4F5B4B411CFB3939CABC7F5DE2CAE97F023A51D877AD0CEC3123E0B7E708FAE ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
18:59:03.0792 0x1920  MBAMSwissArmy - ok
18:59:03.0805 0x1920  [ D98E46A7173656E4B92C9D1C4943BFA7, 2B62183553530DE58AC29ADB0CFE210C51F1F62A910F2E4F39BE846A24FE9056 ] megasas        C:\Windows\system32\drivers\megasas.sys
18:59:03.0833 0x1920  megasas - ok
18:59:03.0843 0x1920  [ BC14937F97BF810850FDC0D30D916334, 289AFE9C61C9EA8749773A16CB7670ED040EF12DFA042F9FDD6E6CC2C7CA68C2 ] megasas2i      C:\Windows\system32\drivers\MegaSas2i.sys
18:59:03.0872 0x1920  megasas2i - ok
18:59:03.0898 0x1920  [ 31DBF4F3D492A056A40C97E089D7B8D7, A87A40FF9713EE18146F1C239DCF8E8044C7ED3667AE0A5854458285038C831E ] megasr          C:\Windows\system32\drivers\megasr.sys
18:59:03.0944 0x1920  megasr - ok
18:59:03.0956 0x1920  [ 6C031C152D14E2A92E0A8EC779F90E1E, C7C1CC6E4987C88A2516B794216ECA60B9624FB991721629EF3311CE8D90BDD9 ] MessagingService C:\Windows\System32\MessagingService.dll
18:59:03.0999 0x1920  MessagingService - ok
18:59:04.0018 0x1920  [ F0EFB8F9E7F30641FADDBAB4EFD00C19, 77109E6E967AF41F16026C325F6D3FAF071FBDDEA2D49A515D611777CA372954 ] MMCSS          C:\Windows\system32\drivers\mmcss.sys
18:59:04.0062 0x1920  MMCSS - ok
18:59:04.0071 0x1920  [ 5573DCE55EFAD536FAEF3A35952D5CCA, 615E5DAF92697A3494247640A04BEF4CCDD0215A4E97ED8931CBC50C67202D44 ] Modem          C:\Windows\system32\drivers\modem.sys
18:59:04.0109 0x1920  Modem - ok
18:59:04.0118 0x1920  [ 53D96D67E61A57577E3F682117E7053B, C4F426B1C3D39A3A60FF361BA136DFD1EFCBAD79777CC612EB0EF1096D14A8D0 ] monitor        C:\Windows\System32\drivers\monitor.sys
18:59:04.0155 0x1920  monitor - ok
18:59:04.0164 0x1920  [ 3437EA58173F7E5D3D704B3A6ACA642B, 877D0F9A6C696835220E8FB9C4A527E93CD3FCB19615D4A36AA2829915A0C29F ] mouclass        C:\Windows\System32\drivers\mouclass.sys
18:59:04.0193 0x1920  mouclass - ok
18:59:04.0203 0x1920  [ 14E01A66D7F55A5086A22E92B5D1D482, 7691E660C7C952A2B7148D9CAB83EC4F52AB7845FF769B517903C8BDDD9F4784 ] mouhid          C:\Windows\System32\drivers\mouhid.sys
18:59:04.0241 0x1920  mouhid - ok

pingodoce 06.01.2017 19:02
Code:
18:59:04.0254 0x1920  [ D086985BBC9463ABD18B04A701CF5AA0, F189D83C3BE2977F777F01ABD79113FC00D09359C52C60457B5A1F3EEBBA8CD2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
18:59:04.0289 0x1920  mountmgr - ok
18:59:04.0307 0x1920  [ E464A0A92E2E354D07DDA713D3E10DE4, D5CF213F03DF54EF9933027A7A7D4413371C1ECBFF61E4DE818D50FA72C8C5FC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:59:04.0335 0x1920  MozillaMaintenance - ok
18:59:04.0348 0x1920  [ CCDDE4B4962A7F5BE0A754B48D9E6BCA, C10EF4C3653259B3BB61ED6BDCE0A2D65AC59F1D611B80A31A297C0D0B38C93F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
18:59:04.0386 0x1920  mpsdrv - ok
18:59:04.0422 0x1920  [ D1F7B4D73964AC2156732C772EBDC10A, 2519B250D4647FB0E16A12066E7797609E8F11A1AB4F4C740E503CD686159A63 ] MpsSvc          C:\Windows\system32\mpssvc.dll
18:59:04.0500 0x1920  MpsSvc - ok
18:59:04.0515 0x1920  [ E24D4FDF59F925D277D481B22D05BF3A, 6FF00B015C405C81C287C609E4260C686450F68C6C677E4D2C6F8D1B7540B3BB ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
18:59:04.0558 0x1920  MRxDAV - ok
18:59:04.0583 0x1920  [ 9549298C64834EF719F81C272ED03CD3, 63269DA24C7798AB3F34D15E427EBC7A86CBD65091C9973482B3FD4B26846B6C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
18:59:04.0628 0x1920  mrxsmb - ok
18:59:04.0645 0x1920  [ F3887F36C197E14C4DDA517EFFE6A9E1, 21667D8FC73445C9741BC825BFCAE4D7FE19A76143F84BD8184D5D30CC05359B ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:59:04.0693 0x1920  mrxsmb10 - ok
18:59:04.0706 0x1920  [ 6F9697BFCC9EF7714CC69E99FEA52D14, CE30F63CA38CB381AE5AFD60B9B8F25627A784620E687D2B792EDF0C9D317E90 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:59:04.0741 0x1920  mrxsmb20 - ok
18:59:04.0752 0x1920  [ B518C756312C1C383B18CF0C924AF732, BAE81F81C683AD97C31BDAF25F701B4C212AC93B8F62B18F05C0E48951E1D9A6 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
18:59:04.0793 0x1920  MsBridge - ok
18:59:04.0806 0x1920  [ 8C5C7992443917AD41C04C1FB6208315, 16F330EF061B8D8F3052A67C559154F60A5BE87C4AA92BD0FEB9410C60FF6A61 ] MSDTC          C:\Windows\System32\msdtc.exe
18:59:04.0853 0x1920  MSDTC - ok
18:59:04.0870 0x1920  [ CC0842323F6A55DFF24BA7ED03E24872, E34C6743F2C29FBD0416BB8CD3172A597DB9903F7AFE89648AB02967A46BBECA ] Msfs            C:\Windows\system32\drivers\Msfs.sys
18:59:04.0909 0x1920  Msfs - ok
18:59:04.0918 0x1920  [ 8510450FD3647F2F495D76E26DEAA3C7, B6F333BB1C65921841FCDC98C5CB3D658C0588774B113D38CE4FF1944968FE84 ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
18:59:04.0946 0x1920  msgpiowin32 - ok
18:59:04.0958 0x1920  [ 0642FFFD9A66D4BF539142D2EA3B7107, 48A6B9461D8599FC07053066933F5B0B22071F691525E239B874494C80BD2E99 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
18:59:04.0999 0x1920  mshidkmdf - ok
18:59:05.0007 0x1920  [ B57054E2DEFDF633509358E1CFF702E6, 713B76B3AB861C22206F1C30CDFBCB8104B06EB5C98B499293CA56175C71A191 ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
18:59:05.0043 0x1920  mshidumdf - ok
18:59:05.0054 0x1920  [ 4217EA4A2D4DE7642507BD9598F5C3E8, EF1336CE44A5A0055C7C2015D55EAFBEA3EEA39D19B9DD6256E509F9E91828D5 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
18:59:05.0081 0x1920  msisadrv - ok
18:59:05.0096 0x1920  [ 04F6E3444A431FDF50D1498929024E19, 395784475091267E25563FC28E787AF97B309FE3AF6A706D5B0A40723AE4FFB5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
18:59:05.0142 0x1920  MSiSCSI - ok
18:59:05.0149 0x1920  msiserver - ok
18:59:05.0159 0x1920  [ 92D051C41C29C366B1FB7CA07045E56B, 31FA43550595654776358735D87DB67E7496D23B58CE6C7A1E415EFB3F6999CD ] MSKSSRV        C:\Windows\system32\DRIVERS\MSKSSRV.sys
18:59:05.0210 0x1920  MSKSSRV - ok
18:59:05.0220 0x1920  [ 4DE3058B79BFB48F79654B46970A02DE, C19CFB2EFAD2D55223B18889B5DDDDAD00778727720A2FCB5BA243E3ABDC4D67 ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
18:59:05.0265 0x1920  MsLldp - ok
18:59:05.0276 0x1920  [ 093D83C03E1A1A9947B951234A4C0C9D, 83A824016F33A51BF3390E86AC39E7F380F3C59A107A12BAEE4C32225821D3B2 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys
18:59:05.0326 0x1920  MSPCLOCK - ok
18:59:05.0334 0x1920  [ 4699BEC54D996CB5FCCCAC24A3ECCBBE, B0028067036C5C8B922E2AFC4202B4C3EB145DFEA8AAF2CFF215A46399AC356A ] MSPQM          C:\Windows\system32\DRIVERS\MSPQM.sys
18:59:05.0380 0x1920  MSPQM - ok
18:59:05.0398 0x1920  [ EF426772B40A5F8B8832D81D948F76EE, F57B57F2954A1617DF2432ECEFFE27E4C6D16660169465D6EA8B32CD5642525C ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
18:59:05.0432 0x1920  MsRPC - ok
18:59:05.0449 0x1920  [ E3B9AE489707AE178BF20D94A252BBF2, FEFC61D8BC1ADC0B7B3AAC12F15411B037E1E434057627FBCF3B373DE7EB90FE ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
18:59:05.0483 0x1920  MsSecFlt - ok
18:59:05.0496 0x1920  [ B657BE9141A1507B7E3B8A0B3F0EA329, 2FEB56C95D979CC9967A25623B3B2D3896846769212E7E657BCD0AA7EA85F7D0 ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
18:59:05.0524 0x1920  mssmbios - ok
18:59:05.0536 0x1920  [ 6FED2BF0C76FBD0178F70E7A5A30ED70, C86FAA9BA4D6B0817B5098F120BB77D00064CC1FBFDF03C6BFEDDFCBE8CA81D8 ] MSTEE          C:\Windows\system32\DRIVERS\MSTEE.sys
18:59:05.0585 0x1920  MSTEE - ok
18:59:05.0601 0x1920  [ DA767F51E37113713D660138254A4E3F, CCC80CFD211F69F4D84951F66D94D92C345F72F7B9F56A4BC86F2CB6D7C817D7 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
18:59:05.0636 0x1920  MTConfig - ok
18:59:05.0648 0x1920  [ 9CFA4FF187394C636007FB81E15D2E5E, 63295423B7942E53E0946BBE5936F0A0C48FF8B8C7A5B5DF41A383A9339C56A8 ] Mup            C:\Windows\system32\Drivers\mup.sys
18:59:05.0678 0x1920  Mup - ok
18:59:05.0690 0x1920  [ 97D7E6AED8F0F70613D4661FEB717AF7, 51152A9B891D0A308505FCC2AE00BBAB89290A1E6E785A311886734BA93F0869 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
18:59:05.0718 0x1920  mvumis - ok
18:59:05.0745 0x1920  [ 6CADBF41FC06B6370256C4CD5771B9BA, 9254A2F39E23957323D3CF09D98A4C2423112AF7234FCA76CC447E9DB2B31335 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
18:59:05.0809 0x1920  NativeWifiP - ok
18:59:05.0826 0x1920  [ 8AEE13EBE7FFC98C45B0C04C5C6F29B3, E84D2CD5DD0024212A3814D575D384FA1AA34DDDF3AD2506FA33DEE53C0AD662 ] NcaSvc          C:\Windows\System32\ncasvc.dll
18:59:05.0873 0x1920  NcaSvc - ok
18:59:05.0894 0x1920  [ C8A80E6C483826A7AF941C86C958B2D7, 28941336B062E0B19A355A47B4BDD376E88F85700ADAECC959ECA016627FD46F ] NcbService      C:\Windows\System32\ncbservice.dll
18:59:05.0950 0x1920  NcbService - ok
18:59:05.0962 0x1920  [ A919B5FBFE50A7C1D0C4661E00C2C7AE, 991124BBA769FD2B8F1480290DAA81A5436E6D36989DDE293E265B4B182733B1 ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
18:59:06.0022 0x1920  NcdAutoSetup - ok
18:59:06.0065 0x1920  [ F7A91BC77A4DDAAAD4062747B593EA27, DF931F4A901641750C4A950111A59CDD7FF2D196B976FD561714585F2F46AFE3 ] NDIS            C:\Windows\system32\drivers\ndis.sys
18:59:06.0133 0x1920  NDIS - ok
18:59:06.0147 0x1920  [ 166C2C9834BE1ED431CEF7E29D50DDEE, 2ACB97C4B50866C8B310355575A14FDFE288477AA17862692621E373880A6BCD ] NdisCap        C:\Windows\system32\drivers\ndiscap.sys
18:59:06.0185 0x1920  NdisCap - ok
18:59:06.0196 0x1920  [ F636C9239528DD57CCA634D8AA7EA39C, BEA1328C4B4ED9BFDECE05BB9B4EC69A2DF2CA620DF89DDB5C5A93D7C8ED38FD ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
18:59:06.0244 0x1920  NdisImPlatform - ok
18:59:06.0253 0x1920  [ 119553FA6C6820362F49C6F99957B8AE, 37B733F87AE0A9AF78BC5B97D0026094EC06D5CDB370F3D65522E1E68A4117A8 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
18:59:06.0297 0x1920  NdisTapi - ok
18:59:06.0306 0x1920  [ 0F196ACC070C0AFEAB38F1562E984814, 735747A8D526F7E1FF7BCF1CF189D9BC16A9D22728CE6F6E41C25C384F276A8D ] Ndisuio        C:\Windows\system32\drivers\ndisuio.sys
18:59:06.0346 0x1920  Ndisuio - ok
18:59:06.0354 0x1920  [ 8C4619BFE8F2B59AB9CD61B7C7F1EBF6, 3AE5FD177DCA4EE2BB100CB916DF07B0FC25E76C198EFADD6C831A9644716153 ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
18:59:06.0391 0x1920  NdisVirtualBus - ok
18:59:06.0405 0x1920  [ 4D0B4130FA4489E565238693BF08C7EF, D450E272F7F23475506252A77A8750D1184538BABD62FFC6408B0C0ED45C071D ] NdisWan        C:\Windows\System32\drivers\ndiswan.sys
18:59:06.0456 0x1920  NdisWan - ok
18:59:06.0469 0x1920  [ 4D0B4130FA4489E565238693BF08C7EF, D450E272F7F23475506252A77A8750D1184538BABD62FFC6408B0C0ED45C071D ] ndiswanlegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
18:59:06.0519 0x1920  ndiswanlegacy - ok
18:59:06.0530 0x1920  [ C5EDAC2BF6B08F2C0613A0997728AFA0, A3FD738EDE1859C53CF567FB87FA33E8D80BFCC1CB1E33F2F2603D225C6F3106 ] ndproxy        C:\Windows\system32\DRIVERS\NDProxy.sys
18:59:06.0580 0x1920  ndproxy - ok
18:59:06.0593 0x1920  [ 8A74EC3B7EFD422572909D54EE510DCF, 00E66FC076E4BCDCF5E5C8E3328ACA2986815A818C64A3450263AA4B78EEC02F ] Ndu            C:\Windows\system32\drivers\Ndu.sys
18:59:06.0641 0x1920  Ndu - ok
18:59:06.0653 0x1920  [ 63D8BC59B39D3C5CF79638BBEF173190, 8F2831A2267D8C4B95D521914F72476B3F69BC928E1BEF2427C7B873E192D13C ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
18:59:06.0692 0x1920  NetAdapterCx - ok
18:59:06.0705 0x1920  [ 538984DAB17A517155E1914621C0DEFD, 710C3EEA56B4A1B613EA72B2188A445F9BB1269729076D64DEEFA78643906304 ] NetBIOS        C:\Windows\system32\drivers\netbios.sys
18:59:06.0734 0x1920  NetBIOS - ok
18:59:06.0758 0x1920  [ 19B3776EE853B95924BAEDEF14702135, 7E39B01AB275641A5F4938CB3AE8BDF5140E829CFE28849CDBBF6083C4D62A0F ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
18:59:06.0805 0x1920  NetBT - ok
18:59:06.0815 0x1920  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] Netlogon        C:\Windows\system32\lsass.exe
18:59:06.0849 0x1920  Netlogon - ok
18:59:06.0864 0x1920  [ EE495A358221B1378EF3F061BFA0E957, 3252DA2B7B959400EF66B39F340021567BF0D05245695F8DDE3C270666417DAB ] Netman          C:\Windows\System32\netman.dll
18:59:06.0915 0x1920  Netman - ok
18:59:06.0942 0x1920  [ F14FE8786CE58E62F3B9D75D41934EF5, 6031B883066F6311F6B36588AE7C9A7003DD23E82022444494CFD4D8C5C03AEB ] netprofm        C:\Windows\System32\netprofmsvc.dll
18:59:07.0006 0x1920  netprofm - ok
18:59:07.0023 0x1920  [ B35F1AA2507385B77764BDC569622430, 1ACB22773E56FAC77F398E3FCD7F2552599E5B5BCD4D6AB69AD606556CA42069 ] NetSetupSvc    C:\Windows\System32\NetSetupSvc.dll
18:59:07.0073 0x1920  NetSetupSvc - ok
18:59:07.0091 0x1920  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:59:07.0121 0x1920  NetTcpPortSharing - ok
18:59:07.0365 0x1920  [ 2D8BE96190FBE41B27FEC87C63F4CDD4, D3A1D37331027CE286B093B9535A2D353EFF4F068055186C2C3FB3048C12A786 ] netwlv32        C:\Windows\System32\drivers\netwlv32.sys
18:59:07.0794 0x1920  netwlv32 - ok
18:59:07.0833 0x1920  [ BA532E5655D46193C068EFB59668948A, F9C42557C1A867A9A78930D3B587A7D8307E6202D89365EF3663A8E8C95AD746 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
18:59:07.0887 0x1920  NgcCtnrSvc - ok
18:59:07.0921 0x1920  [ 5F46471A72497B6FCF9F8044F3A8F383, 2FE35A8A60F01BA5C8D1B9BF2AACA3D8F5BBBE857AF432CCB93095E38814E8F0 ] NgcSvc          C:\Windows\system32\ngcsvc.dll
18:59:08.0005 0x1920  NgcSvc - ok
18:59:08.0025 0x1920  [ F8E8E13C15D503A445AD07C6F9660A0B, DFC5E44A0F796C886A8792D736BFAC2A8BADF8F67AD23AD569B8B3A0E268F13F ] NlaSvc          C:\Windows\System32\nlasvc.dll
18:59:08.0083 0x1920  NlaSvc - ok
18:59:08.0095 0x1920  [ C404AC553CABF90F1EB327AC1CA91614, E36F0420E904D6F8F8FEABCCF555E0B43ED4ECA1006A86C625F986B719C5016C ] Npfs            C:\Windows\system32\drivers\Npfs.sys
18:59:08.0132 0x1920  Npfs - ok
18:59:08.0141 0x1920  [ D538DBD5654E98804B1AC997B0562A2D, 2D39E0BB9FFDE0FFE1F4D5947739FA459C5E1282DB99A24F82216CF86C44CE76 ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
18:59:08.0177 0x1920  npsvctrig - ok
18:59:08.0186 0x1920  [ 80101B43A747AA905A42BDA6CD62B380, 67B3A8ACF1C86F3BFF7BB037D8DE262AB3FFDD32A5CB31D1E66470814DFDE99A ] nsi            C:\Windows\system32\nsisvc.dll
18:59:08.0235 0x1920  nsi - ok
18:59:08.0244 0x1920  [ 73CD0852308102CA33AB6C362F786AF7, 98D69243174B0E6F11AF488849A74BDBA52A36C9959E2C7BD468A7F9C44E08BA ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
18:59:08.0279 0x1920  nsiproxy - ok
18:59:08.0359 0x1920  [ 08EFFF2FFD9E85CEDBC103B1C514EDBD, 3E61E66CFD378CF6D3062DD27F20992B65BBE64FD93E3D4441DC8E67063D420D ] NTFS            C:\Windows\system32\drivers\NTFS.sys
18:59:08.0477 0x1920  NTFS - ok
18:59:08.0494 0x1920  [ 63F0747EBCEA98247EB874051A0C9488, C67F74E1504C18E64E719C5C6828E3716C0120FB8B4844D6B83A1585E7EA5D73 ] Null            C:\Windows\system32\drivers\Null.sys
18:59:08.0534 0x1920  Null - ok
18:59:08.0546 0x1920  [ BED83E7AB1E5294B694FE2BB29F1789D, D4BD7D8B71E3EFA38E39CFB6CC58460F3E743BC2550AC6BBC79EDB0865D72413 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
18:59:08.0579 0x1920  nvraid - ok
18:59:08.0595 0x1920  [ 818D8E3EE673E953604B470D2174F34E, 22E29445DCC39ECBC1D792B5BCFCC2EA0CFA405CDE29B93793B13A8658B96FCA ] nvstor          C:\Windows\system32\drivers\nvstor.sys
18:59:08.0628 0x1920  nvstor - ok
18:59:08.0661 0x1920  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:59:08.0700 0x1920  odserv - ok
18:59:08.0720 0x1920  [ ABE4E24B7B1E84F9591377EE94646DFD, 63838AD4569B7C74908DFF4CF083C7D0360C58692AEDBF02D1EC88BC2CC2A134 ] OneSyncSvc      C:\Windows\System32\APHostService.dll
18:59:08.0773 0x1920  OneSyncSvc - ok
18:59:08.0789 0x1920  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:59:08.0814 0x1920  ose - ok
18:59:08.0841 0x1920  [ 3E6C5C05831A79A0891D14697D96805C, 34848FB4D6ED1BDCDF8C9DD2730E633EA24B85720BDE0A9F7984F25AA66579E1 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
18:59:08.0897 0x1920  p2pimsvc - ok
18:59:08.0925 0x1920  [ 4F27C92AEE3749BA64411E280CC9C0B2, D2A4272ED9E8ECACD2E9233453E44119029F160E7FAC94FAA0E986327D50F174 ] p2psvc          C:\Windows\system32\p2psvc.dll
18:59:08.0984 0x1920  p2psvc - ok
18:59:08.0996 0x1920  [ 102319D1AB9C8AE57ABF4542C15E46E5, BA259E25ED2750F003A895FF8CA87C06DF2A6E5BAFD5E7B6E31BF39A7315B87C ] Parport        C:\Windows\System32\drivers\parport.sys
18:59:09.0035 0x1920  Parport - ok
18:59:09.0048 0x1920  [ 42269F1CBE52927874351B1731733B22, 83EA42FF99AB16597232D9D155BEED6421EF31730CBA1B3BD5F577EAABC12E7A ] partmgr        C:\Windows\system32\drivers\partmgr.sys
18:59:09.0078 0x1920  partmgr - ok
18:59:09.0087 0x1920  [ 80DAAC28A277CCC83EA1385AED473355, 6EA1581DB1CE4615FF2ACAC771B8C6305C84B5A8BF2DC0CF2FF3202672FF897B ] Parvdm          C:\Windows\System32\drivers\parvdm.sys
18:59:09.0122 0x1920  Parvdm - ok
18:59:09.0145 0x1920  [ C83B47DEC66042DD97DDC3D41E538339, 8C9467074EA6A0FAF62BB5A99A657519B255C59A2B5BC6FF2D97C4B4D6FF18F2 ] PcaSvc          C:\Windows\System32\pcasvc.dll
18:59:09.0194 0x1920  PcaSvc - ok
18:59:09.0212 0x1920  [ C9C52D44D7B6AA975A61B4A8B5476BC0, CCCF40E0F4939CBEB0B8DB3FEDA1BDFEF8B3973D5524775C38D8055B810B5380 ] pci            C:\Windows\system32\drivers\pci.sys
18:59:09.0250 0x1920  pci - ok
18:59:09.0263 0x1920  [ 08E17B65E01DAAB8B2CC3F0614890724, 1338620701E772BE8712E99170403CFAE5B600BCF845BA4AA981F6DA2BCF33E8 ] pciide          C:\Windows\system32\drivers\pciide.sys
18:59:09.0290 0x1920  pciide - ok
18:59:09.0301 0x1920  [ 1FD051E1D86C1DB5291BD69D65077DA4, 5E7BCBA03331EE266963E3D5BC064DDF9FBAFD1CDE8211703DD97A5725A2E087 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
18:59:09.0333 0x1920  pcmcia - ok
18:59:09.0343 0x1920  [ D22AA1E0C19412A39E4B743BA5B43A78, F04ECD06C3123D07749AA4A04749EE920A8E15F5CF9C1FD17DC549D5CC146170 ] pcw            C:\Windows\system32\drivers\pcw.sys
18:59:09.0372 0x1920  pcw - ok
18:59:09.0383 0x1920  [ 0D1809586AB5D1155364357EF69A45AE, A3BC593607926CC03EC0904AB406041173F3CD60D72443C929157EF59579F52A ] pdc            C:\Windows\system32\drivers\pdc.sys
18:59:09.0414 0x1920  pdc - ok
18:59:09.0447 0x1920  [ D02A4B0D37D81280B7C448B73435FDDD, 3130B35ED73DD534B1763E16673F6AAF4F9F59FE075C5360F4886481BB8E71E2 ] PEAuth          C:\Windows\system32\drivers\peauth.sys
18:59:09.0531 0x1920  PEAuth - ok
18:59:09.0598 0x1920  [ 0A0D6BF8E93ADA8F8B8BE0ADB9CD20C6, F06AEE4A9787461254488A9E9AA3B08FFF99FE3299BB33D5A4D5D356E051771C ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
18:59:09.0734 0x1920  PeerDistSvc - ok
18:59:09.0750 0x1920  [ C2DBE18F68AA0C9508587FFACB794D8F, 39B75BF33DC2BF339EB3288AE1DD68B7220E0B0A29370706D7ADDB1B7A2EBAD2 ] percsas2i      C:\Windows\system32\drivers\percsas2i.sys
18:59:09.0779 0x1920  percsas2i - ok
18:59:09.0792 0x1920  [ 21E6E1D427806D971D553CC0DAF9BCA5, 59AA1690B99805DDD806FC818FD16EB8FDCE986E70882A5F3D2D075321DADF6C ] percsas3i      C:\Windows\system32\drivers\percsas3i.sys
18:59:09.0821 0x1920  percsas3i - ok
18:59:09.0880 0x1920  [ 985FDF6931077D696A162BB38E1ED25F, 866EE5F34A3F498BF939AD1F3ECEC2C7C3623BFEEF40EFA96B29B6DB490C7AEE ] PhoneSvc        C:\Windows\System32\PhoneService.dll
18:59:09.0958 0x1920  PhoneSvc - ok
18:59:09.0976 0x1920  [ EE804160B61FACC25D11C3CCB273B10C, 898B9DA62FDC038E828758DE958F93F839F1CD4406BDB89DBB5C85A565B1B03E ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
18:59:10.0026 0x1920  PimIndexMaintenanceSvc - ok
18:59:10.0090 0x1920  [ 0FAA756716218E68D46F9E2FEE624242, B564D84CBB5BC83379DE99DD0A85082238562B539E9B0E775E424EA8CB5BF512 ] pla            C:\Windows\system32\pla.dll
18:59:10.0224 0x1920  pla - ok
18:59:10.0244 0x1920  [ 0DF131F7F00E34B6C9DA053E55A80AA4, B3CA50986884B00B67EF1BB3910CA60FFEB4EA3AB9D08CBD6E82E792B650128B ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
18:59:10.0297 0x1920  PlugPlay - ok
18:59:10.0308 0x1920  [ 98C7DF7455A5F844EEFE0C0310CFC2DB, 67543EB480F7D1AB24E93CC5ACE40DD6ABC3BE63047F4DA64D5D682B2832AB99 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
18:59:10.0349 0x1920  PNRPAutoReg - ok
18:59:10.0370 0x1920  [ 3E6C5C05831A79A0891D14697D96805C, 34848FB4D6ED1BDCDF8C9DD2730E633EA24B85720BDE0A9F7984F25AA66579E1 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
18:59:10.0422 0x1920  PNRPsvc - ok
18:59:10.0444 0x1920  [ 7AF808286EDF23A486F1D8203EAA04DE, 41B95BD98176A2485E929E79829C5ABB6BAC55C90C55F677B1E5B6429970581C ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
18:59:10.0500 0x1920  PolicyAgent - ok
18:59:10.0521 0x1920  [ EFD8B7C6843CB9D4EE3485AAD1EFBF51, 9E8819BD2EAC1A210B0C1A20A7A2A38674BA9EC716C18C860DC930CB6D61FE7B ] Power          C:\Windows\system32\umpo.dll
18:59:10.0573 0x1920  Power - ok
18:59:10.0584 0x1920  [ D688353B3F783BFA1A4BC0FAD178271F, 2E7AB5076A8AB13F6430CACEB1DA1D21E0BC75DBF36049D51E8636C5DE8139F6 ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
18:59:10.0633 0x1920  PptpMiniport - ok
18:59:10.0744 0x1920  [ D0818657648366B03C7CB4AA2DCED253, 2AC0FB8B679F51C6EBF5346F75AC543797EA1617D1F69A2830F305823AB7B35D ] PrintNotify    C:\Windows\system32\spool\drivers\W32X86\3\PrintConfig.dll
18:59:10.0964 0x1920  PrintNotify - ok
18:59:10.0985 0x1920  [ 2ED95B75DB64C871A8C613144A0C3162, 9966B2E22BFAA94CFED092A0C929FF329C27156D2F746D225919406E15EF9CCE ] Processor      C:\Windows\System32\drivers\processr.sys
18:59:11.0025 0x1920  Processor - ok
18:59:11.0043 0x1920  [ CEF5388090C7BF568DC2F9F1EF3E0327, 8430198B92BCBB17620221039C202CE1C36EA4E597D17E401BD704AED8DAD5A5 ] ProfSvc        C:\Windows\system32\profsvc.dll
18:59:11.0100 0x1920  ProfSvc - ok
18:59:11.0114 0x1920  [ B825DF8604FD4491E85B2BAC084680FC, 9336CD2658B169A0797C79B9CD8FD96FA1DBB44CEEA3F4E79547BADF5E2DBDED ] Psched          C:\Windows\system32\drivers\pacer.sys
18:59:11.0147 0x1920  Psched - ok
18:59:11.0163 0x1920  [ C0C426DB80A332672B9648C595BD5D1D, FE00DADA570CF5DC827FA8A13DAFDC17B05EA06F203F2F535866072692D47D60 ] QWAVE          C:\Windows\system32\qwave.dll
18:59:11.0216 0x1920  QWAVE - ok
18:59:11.0227 0x1920  [ E418B13CA54FD910B731E6740C2D9890, C9DE1E03391987BB05EE99D846E9E06BBAD8E2D65AC611EECD73353AD63D0760 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
18:59:11.0265 0x1920  QWAVEdrv - ok
18:59:11.0277 0x1920  [ 63C90667A3D22FE239164EDC12B5C763, C216E004CD815DB346FF0199AE733787D6B156EA9EB68A03AC68D5C8933B7C55 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
18:59:11.0314 0x1920  RasAcd - ok
18:59:11.0328 0x1920  [ DD661FB42A6BE5AD95F1B37AF215F01E, 7B6A6FC72EE38BF318FB0787F117BBBEC189A25DFCC39C969C905F9924B0290B ] RasAgileVpn    C:\Windows\System32\drivers\AgileVpn.sys
18:59:11.0371 0x1920  RasAgileVpn - ok
18:59:11.0387 0x1920  [ FBFB61A337B298D1A9CA811F6E9EF038, D4D631CADA79F65D97108377772EC54BB7A4DE24B501656EF34647B485B7568B ] RasAuto        C:\Windows\System32\rasauto.dll
18:59:11.0434 0x1920  RasAuto - ok
18:59:11.0448 0x1920  [ 26F09741A8FF5EE03C66B33EB5C2A7D2, 82586D05A798BC7FBCCF144F0C0ACE7E430025E9B1BE8C5EC04A30C720DB15DB ] Rasl2tp        C:\Windows\System32\drivers\rasl2tp.sys
18:59:11.0494 0x1920  Rasl2tp - ok
18:59:11.0522 0x1920  [ F7C88EF77BDFD6B287930C87ECDCC161, 7BD1F41BBB4CBF9EE144933A15821CA70B316896C2B8330C5D00ED9CF835253B ] RasMan          C:\Windows\System32\rasmans.dll
18:59:11.0595 0x1920  RasMan - ok
18:59:11.0609 0x1920  [ CF3C50512A5F98DF406BAC8BFB3CF3EB, 463455E808AEAC658511B6A9A80B79B2C9921CAFEA16C7AF2ABED1FCE2B33269 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
18:59:11.0648 0x1920  RasPppoe - ok
18:59:11.0660 0x1920  [ 57E6CD6C4CB8418955402682EB13CD8C, 6252E6FB4B5A6DCDF6B81975D5E8F5598C642A83A4C95286A48A9E76EF674965 ] RasSstp        C:\Windows\System32\drivers\rassstp.sys
18:59:11.0710 0x1920  RasSstp - ok
18:59:11.0732 0x1920  [ 6764CDF0BF3B63387255A29999471BA8, 9226E93958146BCAB3177D141752F579C2FC3AEB5E1DF9887A038A487EC0496B ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
18:59:11.0774 0x1920  rdbss - ok
18:59:11.0791 0x1920  [ 3FF15051B75EA5D575690E6EAE00A484, D07ABD771418B287D760F5DFA8570100245AF2AEE79D47CC483BDA50D57F862F ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
18:59:11.0830 0x1920  rdpbus - ok
18:59:11.0844 0x1920  [ F064A9E33658E8A73280AE8AA5723C59, 7CA4992F2AC4470F9E08F2FA0A8F62211149AECDD6838885B97BD9DBF4702986 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
18:59:11.0888 0x1920  RDPDR - ok
18:59:11.0915 0x1920  [ AFB4D0A3BBD65FF57199C5FFBDC480B2, 152159102226F11EAA8BCDF1E19D76FE5B964F26ED2D35E7E210E61BFDD6BB22 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
18:59:11.0945 0x1920  RdpVideoMiniport - ok
18:59:11.0961 0x1920  [ 50BF0AB46CB3551294CBCF5798539785, 003C2552C5AAC0EC925E487572C484E2BCDC0EB951FD2A0B5D45230737CFB288 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
18:59:11.0997 0x1920  rdyboost - ok
18:59:12.0031 0x1920  [ 35BA17FF927B79EDDEE436ADEB98EF21, 7409F4FAA7641D6C7971027BDA848A50E273561C0F99ACC3DCD37DC51A779A82 ] RemoteAccess    C:\Windows\System32\mprdim.dll
18:59:12.0096 0x1920  RemoteAccess - ok
18:59:12.0109 0x1920  [ 0FBF0AA8506AF66C0EF191CB2D3F5BDA, 585C245D4263227972B7654EC5DB131E69D6D5967C005F3C07A73079B1F80D58 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
18:59:12.0175 0x1920  RemoteRegistry - ok
18:59:12.0202 0x1920  [ 120A37CB8639F0F89DD142826FB6E89D, 75688B8E706C71FB89EB743FC69904E1EAE2C1DB3A6AAA7ED64D12DE5DA66506 ] RetailDemo      C:\Windows\system32\RDXService.dll
18:59:12.0269 0x1920  RetailDemo - ok
18:59:12.0282 0x1920  [ AD8F8A14C13E35CF8C3150C61BF47492, 2AB8A19C58BC0D09A7CD88726C5512DAC6B7C62175928298841BE2164348FE33 ] RmSvc          C:\Windows\System32\RMapi.dll
18:59:12.0329 0x1920  RmSvc - ok
18:59:12.0340 0x1920  [ AF4D1F6CB8DF6C2146586951BAF49D04, A3DC9FC28CD54D5D920950268B3FD96F06F1FD5A4D121EE3D475B9BE3EA56996 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
18:59:12.0384 0x1920  RpcEptMapper - ok
18:59:12.0397 0x1920  [ B9B285FA98F1F2575FA6E4BDC2A80A06, 7193FB715B60AC83FA528316E5291477ABBC404996FE71133044A03D5ED14A88 ] RpcLocator      C:\Windows\system32\locator.exe
18:59:12.0443 0x1920  RpcLocator - ok
18:59:12.0476 0x1920  [ 16C4E1708C9574B5CC9A32324FCE51DE, A7D99F2A6B254B5E9532CE957BDDE339D6D2281290A4ABE6B8E497E9D4872D05 ] RpcSs          C:\Windows\system32\rpcss.dll
18:59:12.0551 0x1920  RpcSs - ok
18:59:12.0566 0x1920  [ F3D1D3148CE384C8143F05452A2FAC91, 15BB4412078B1BB428EF5864CDED360713709A540D1E1A5A2EE19F0D9307127F ] rspndr          C:\Windows\system32\drivers\rspndr.sys
18:59:12.0606 0x1920  rspndr - ok
18:59:12.0615 0x1920  [ 4C98A80A7C43B709376598F75D0AB704, 98E71FA3C71FEC6DBD253091DB4817500648A0E593D70E90576B855CB5E6365F ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
18:59:12.0658 0x1920  s3cap - ok
18:59:12.0668 0x1920  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] SamSs          C:\Windows\system32\lsass.exe
18:59:12.0702 0x1920  SamSs - ok
18:59:12.0714 0x1920  [ F97AE73A2A532FED0A018E437DB1B410, 2F4402357A83666245A9C66BA792C90D75A9CF272E366E3444933791628BE2FC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
18:59:12.0744 0x1920  sbp2port - ok
18:59:12.0759 0x1920  [ 9C634680E53ECE17B61472EA2D680208, FE0F599AB1E42E38E105009141A7F0DF08E0B8B2ACBA50AE15841E3DD6ED32AB ] SCardSvr        C:\Windows\System32\SCardSvr.dll
18:59:12.0815 0x1920  SCardSvr - ok
18:59:12.0831 0x1920  [ 2B5CAE7ABF1B2916EDC22A9BAC5B031E, 91C27DE8DF833C102D042087786DA231596E14A62E5682F9C06DA9F0950C4AF5 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
18:59:12.0879 0x1920  ScDeviceEnum - ok
18:59:12.0891 0x1920  [ C49723BB449D63A1C0BAB91CE5482DBC, 2C96C10E6C9287DA6393F9F684DF701402337CDE06ABFC9E1FC5283A5AAF4777 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
18:59:12.0929 0x1920  scfilter - ok
18:59:12.0965 0x1920  [ 959E10CACAC2208310C6EF595248DCC0, 82B423F83B90282B4023AB39FC1D1C0BABECDAE49E5459475C0D8046A4525ADE ] Schedule        C:\Windows\system32\schedsvc.dll
18:59:13.0056 0x1920  Schedule - ok
18:59:13.0073 0x1920  [ 1D6A243ECD54F7CC294B28946F6B5B33, 7A7F19ABD4B6D73121466B4D8649BBF375034B293FBDFE02A8982D09AA9E6393 ] SCPolicySvc    C:\Windows\System32\certprop.dll
18:59:13.0121 0x1920  SCPolicySvc - ok
18:59:13.0134 0x1920  [ 9790B97C403208C61198BB0C2A4DAABC, E2A3AC7FFF064B3849135E3771E7246845B84664147014A06265835D451DB07D ] SCR3XX2K        C:\Windows\system32\DRIVERS\SCR3XX2K.sys
18:59:13.0182 0x1920  SCR3XX2K - ok
18:59:13.0201 0x1920  [ 94AA0D516E1186B671FDB1F9A050309C, 01F2881DF3EC5C22469020E37875E1B37B96BCFCDDA9111DD756C52109F19A8D ] sdbus          C:\Windows\System32\drivers\sdbus.sys
18:59:13.0237 0x1920  sdbus - ok
18:59:13.0260 0x1920  [ 4607024D1E475A9E7E2E59FC7429C614, B014D41F88BE47FBBD2AF8EDA477E3630154F944F185C914B8934F1181CDF5C7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
18:59:13.0327 0x1920  SDRSVC - ok
18:59:13.0341 0x1920  [ 26C918084DA80A1E019FA54B57582289, 089D9D752492068FBCBD9DD27B4CEB9DDA082563BFE6B29ACC0484D7D9E12A57 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
18:59:13.0372 0x1920  sdstor - ok
18:59:13.0383 0x1920  [ EE331C415B3B184642A9FAA38954A93A, 211C25FFA407F1FF664C3CBE7C34F37A5FFE5E485ACD18985AE5512B7076C169 ] seclogon        C:\Windows\system32\seclogon.dll
18:59:13.0432 0x1920  seclogon - ok
18:59:13.0444 0x1920  [ EB32C35D4EB4D058C397A3EE92DB082C, 5BA376B64F202E1E82AE7386CCD1B81EE123780F6A75F17535EB9791C2DA82BB ] SENS            C:\Windows\System32\sens.dll
18:59:13.0490 0x1920  SENS - ok
18:59:13.0563 0x1920  [ FA3D960943CAD952FB2280E8BA183736, 32C2C086902139E4AF9793B75DDD061EC4BFFEFC04C75F08B806F1C79F1F3D00 ] Sense          C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe
18:59:13.0673 0x1920  Sense - ok
18:59:13.0720 0x1920  [ 19A4E4C9A4EF2904BCE49616DD50C03D, C14EE41A37DE3AEA3543D62D6F6234BB911D8958FEAB27C3E3BF38DDA2B20738 ] SensorDataService C:\Windows\System32\SensorDataService.exe
18:59:13.0813 0x1920  SensorDataService - ok
18:59:13.0836 0x1920  [ 238FEBCC332BED9E71ECDF2CD2A4FE70, 3A2220D2E08ADD98E201C0A6211B04D772C7747A1D4653EB1787DCF80B046142 ] SensorService  C:\Windows\system32\SensorService.dll
18:59:13.0894 0x1920  SensorService - ok
18:59:13.0911 0x1920  [ 24E024F7010DF54D232E5FEFD0E35076, 21A3BDA1C6F633611D508FFE2E3DB2190CCEAAC50FD3B70D4A08652BBC642AE5 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
18:59:13.0971 0x1920  SensrSvc - ok
18:59:13.0982 0x1920  [ 3AF853CC0C6690BEFD6645FBDB45CF39, 569706FA305BF3DFE70D341B46615802DE0EB117AF5CD278EEF5C94790BDE3A7 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
18:59:14.0011 0x1920  SerCx - ok
18:59:14.0025 0x1920  [ 4B7E7F5E4C4F585BB23BE0FE031DA2B4, DD5619C08A5792DA92F230052536E00B03249A12042DEC90700BD641CD82EB74 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
18:59:14.0057 0x1920  SerCx2 - ok
18:59:14.0066 0x1920  [ 87A300D27D76E281A0077020AA46B105, 906F0118D16F5A2997FBB5C95DBAA0382DF02F04DB033917E81CB9381C3E67CA ] Serenum        C:\Windows\System32\drivers\serenum.sys
18:59:14.0114 0x1920  Serenum - ok
18:59:14.0125 0x1920  [ F3635BECE1FA3BACAD12C93CDEE45A8B, 6F07C06FE5DC550BAD71175A354FC1E21D6A729DCF6BD3970A1D0D89597C64B2 ] Serial          C:\Windows\System32\drivers\serial.sys
18:59:14.0176 0x1920  Serial - ok
18:59:14.0194 0x1920  [ 3DD6073C72024027EDDDD41B7D1CDCAD, 3A5FD257774E78217195BC257DC29DEC25C20CE690928729554380722A9D52F9 ] sermouse        C:\Windows\System32\drivers\sermouse.sys
18:59:14.0229 0x1920  sermouse - ok
18:59:14.0281 0x1920  [ EB4F3BDE38ABF0AEECDFEA76E2CB1EFF, 94A3DC0F7A9D33B1BFA5F61FB21883A97BAE4A013B1CCAD7DC7A1C450708BEEE ] SessionEnv      C:\Windows\system32\sessenv.dll
18:59:14.0340 0x1920  SessionEnv - ok
18:59:14.0353 0x1920  [ 1B4A5247D0F167F8361C16A59478D5C8, A662312F63C0DA78D67907DE56954BB3D2AC7E1B84619BF32F625C7A564AF677 ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
18:59:14.0391 0x1920  sfloppy - ok
18:59:14.0417 0x1920  [ 01B428DA0C4EB6F97633B3E457B389B3, F5F8F237283A263AE3C08B81E000D5FA5A7D2274CAD3EAC736E07F3E76499E4D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
18:59:14.0483 0x1920  SharedAccess - ok
18:59:14.0519 0x1920  [ 25FD6DC3D4EC699E4EF5CFB91BFC6ECF, C396BD9E892146768AA6F63DFD28ECA57E3E5A16A5681595CCD08D7FB2F093D3 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:59:14.0602 0x1920  ShellHWDetection - ok
18:59:14.0617 0x1920  [ 48E8F5FAA0D397A555D39544B9471BAE, 3895678514051D11985107C70A6E57865C90BC5922AD36EDC28C37FDC7BCEFE2 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
18:59:14.0666 0x1920  shpamsvc - ok
18:59:14.0676 0x1920  [ E1A38396A6434446F265ECE72A375C5C, 2584661E9C784A07C14BCF0E1D79940C750E45480843DB949CE23467FA7480E6 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
18:59:14.0705 0x1920  SiSRaid2 - ok
18:59:14.0715 0x1920  [ 407A47319F097271CA1FF7ADFD13CD82, 7AFC9126AC85EBF6B17022AA95C62E09D9E033EFEB4AC1ACD63F72CA13443FF8 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
18:59:14.0746 0x1920  SiSRaid4 - ok
18:59:14.0757 0x1920  [ 71C635D7796D394138BFFBB8C2559CFB, 0A2D7B7720781C8A3A318C1E58B9F8D27BCA3E918E88C230F9F9EF5210B2344E ] smphost        C:\Windows\System32\smphost.dll
18:59:14.0798 0x1920  smphost - ok
18:59:14.0822 0x1920  [ 8512CFE5DDC918C31BADD397B8DCB703, 4810CA8155BECF1815963EC9C35BFF3029CB7CB1C28751123BEDF60F20A6AD1E ] SmsRouter      C:\Windows\system32\SmsRouterSvc.dll
18:59:14.0889 0x1920  SmsRouter - ok
18:59:14.0907 0x1920  [ 7D21A60C6BF71645B080B42C14FDF1B2, 0BF8EC8A347F1A12E91DE14489CFC2317612AD22CF234046A71E2C0E0AA83C1A ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
18:59:14.0958 0x1920  SNMPTRAP - ok
18:59:14.0984 0x1920  [ 8152DD698E377476C787B91F297A32BB, 1A7152C108BF465E2678F196B35D50BDF06C51C4040F2359642BEFA4749E672B ] spaceport      C:\Windows\system32\drivers\spaceport.sys
18:59:15.0030 0x1920  spaceport - ok
18:59:15.0041 0x1920  [ 0F36602CAE7758CD4086EEF6FF83D47D, 225BBCC3BF6B578EB395F2D28A21518CFB7FB4F687A43B8B1AECF5BCFB94E44A ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
18:59:15.0072 0x1920  SpbCx - ok
18:59:15.0101 0x1920  [ 3FA2E254BFBCE52B3C6F1BF23AAB6911, 1E94D4E6D903E98F60C240DC841DCACE5F9E8BBB0802E6648A49AB80C23318CB ] speedfan        C:\Windows\system32\speedfan.sys
18:59:15.0126 0x1920  speedfan - ok
18:59:15.0152 0x1920  [ 809A5855DD62DBA26E48C986B12B1860, 637D82140848CE6C7CB8AF216A8DEABB4D4B81F45229AE54FEB0D2179007B337 ] Spooler        C:\Windows\System32\spoolsv.exe
18:59:15.0232 0x1920  Spooler - ok
18:59:15.0408 0x1920  [ D3A29AF4ED4675630BE468D8AC1D1FC3, 1ACBF70E31D35FDA1B135EB091743A88464949C9B2AD6205C8251EA08CD31B53 ] sppsvc          C:\Windows\system32\sppsvc.exe
18:59:15.0675 0x1920  sppsvc - ok
18:59:15.0722 0x1920  [ 3091FC9281816A0AA9F4C0FBEA4449CB, EC0E87A4C52319C3FB643ADD525C5B478EFB35FC3069E68606D2F540987365F8 ] srv            C:\Windows\system32\DRIVERS\srv.sys
18:59:15.0777 0x1920  srv - ok
18:59:15.0809 0x1920  [ 9D7897177101D7D3CC76FDF0772E3000, 137A7D5EBABB345A194EB5346183CA2277DA103DA730EDDCB1EA8341D67EC401 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
18:59:15.0879 0x1920  srv2 - ok
18:59:15.0896 0x1920  [ 43182E4DEC2794B7CB5B944F2F04C2AC, 1ADE7DBC17D2FDE5A7059F8104CE240CD60F8940280384CE2571318A072D2F0F ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
18:59:15.0941 0x1920  srvnet - ok
18:59:15.0960 0x1920  [ 1D2163A2238D7003A775ECB3C89BB996, 0EC3AEFAA19C27E4BDD966DDFDD96DBD0B2D232CF443B857618D7CA0A46FAF9B ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
18:59:16.0011 0x1920  SSDPSRV - ok
18:59:16.0027 0x1920  [ 234194CD4BA69FAC3C0F87550316E55D, 45881DF6E8B5ED032BFC89931DA526BAA828AB5C5DBCC05484C251FD8A95F1E1 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
18:59:16.0080 0x1920  SstpSvc - ok
18:59:16.0204 0x1920  [ FE68CCE3D2985526FB00C692E92E0FE2, 7C514F45398296A96C14B2C3EA77DA36970635BE7568D0FA24DB0D870B36379D ] StateRepository C:\Windows\system32\windows.staterepository.dll
18:59:16.0450 0x1920  StateRepository - ok
18:59:16.0470 0x1920  [ EB59E7B245151F65A44408EC6518D0B1, 771106419A24A684F8AD006597DFAA8D350C16C677E1F574467C8F9D666AA4E5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
18:59:16.0499 0x1920  stexstor - ok
18:59:16.0525 0x1920  [ 68312F861BFA5CE2E02F23DB5F2669AA, 2DBC40B18F576004F4828275808473AA224400B342EB2D33D48CCB7231F7FACA ] StiSvc          C:\Windows\System32\wiaservc.dll
18:59:16.0600 0x1920  StiSvc - ok
18:59:16.0613 0x1920  [ 3471008FDDA7CC58AAF8F28B246D0953, A6DB9787159EF230A42929F69121E3E4E5FDE13BFD97CBDD450C9ED4668C30AC ] storahci        C:\Windows\system32\drivers\storahci.sys
18:59:16.0646 0x1920  storahci - ok
18:59:16.0660 0x1920  [ 42DCF1819631593A957C1F04E8198641, 72FB0FF762D59277DECFC0AE01CA120741098BA84971BE3669EB2E41B765A5A4 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
18:59:16.0691 0x1920  storflt - ok
18:59:16.0704 0x1920  [ F6BF76CC2EA03262838F2DE6975BECD4, 1560FEF2E9AF1FDFD9C8CA5DFCCCEA516CCF11B3C2066A07A0AD7A00A4762D1D ] stornvme        C:\Windows\system32\drivers\stornvme.sys
18:59:16.0734 0x1920  stornvme - ok
18:59:16.0745 0x1920  [ E7ED6F07B04B5886370691B39BA7761E, 97FF2621A4FF043ADCEB7740CDC647293300C4431277346F207061546FA3A54A ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
18:59:16.0784 0x1920  storqosflt - ok
18:59:16.0805 0x1920  [ A02F1DC0A416FDE7D6F98896592669F2, D3A212CF08E015F6FAD90EEAA2A7E513960FEE979117267006416F5A8B13E755 ] StorSvc        C:\Windows\system32\storsvc.dll
18:59:16.0863 0x1920  StorSvc - ok
18:59:16.0872 0x1920  [ F8C3E2482BA5D34BA24FAC60DEAD9A2F, 911BBEF6B02B5E0905450E0DDA731CCBCB1D3CC9B77B960555D976384700F744 ] storufs        C:\Windows\system32\drivers\storufs.sys
18:59:16.0900 0x1920  storufs - ok
18:59:16.0911 0x1920  [ 926CF05CE1AA19C0979C617B7E04EDC9, 75B13969070710CA7D3F32745362656612238CC6A53A0F80D4175968CEE7A389 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
18:59:16.0939 0x1920  storvsc - ok
18:59:16.0948 0x1920  [ D71C4D8DEBCDC19B1ABAB63E39BAEECE, 7B211911FA5E6D9F115519647E03C49404A7614225505630F74EF81B52AB3434 ] svsvc          C:\Windows\system32\svsvc.dll
18:59:16.0994 0x1920  svsvc - ok
18:59:17.0006 0x1920  [ 179A21FDBF70D7BBD1461CC0EE4AC553, AC5EAF8E870F49595CA1F6AA6AB487757860DBFB3A8AF5B1B4B44D283ADCA08D ] swenum          C:\Windows\System32\drivers\swenum.sys
18:59:17.0032 0x1920  swenum - ok
18:59:17.0052 0x1920  [ AD9F34D0BC67A4643BB217E8B6C8DAA0, 014F1927F79EF491C00C247278A856CE4125A7B26F871F74FC56FB7FC32FE3AC ] swprv          C:\Windows\System32\swprv.dll
18:59:17.0116 0x1920  swprv - ok
18:59:17.0128 0x1920  [ E642BE03D50EA1F13935588123513598, 83B7A29AF398285A688F5655CF1440993FDC3DC41C47A7E711CC7019135D0D8D ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
18:59:17.0166 0x1920  Synth3dVsc - ok
18:59:17.0182 0x1920  [ 3D6316279C3540AA268BF025F4621EF3, 042C268DD1A98BC91721DAB31F20AEC06EF086EF8AED2BB05CF138106ED0C7DB ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
18:59:17.0208 0x1920  SynTP - ok
18:59:17.0247 0x1920  [ B1031B316803002E68DFD56C9A70C355, ED34170782EDA25C72BECC37CE16F4D9E3CD580B59067F268AAEC28575E25FBB ] SysMain        C:\Windows\system32\sysmain.dll
18:59:17.0340 0x1920  SysMain - ok
18:59:17.0360 0x1920  [ C3E7921B1BD1057E50B893C90FED240C, F60DC85276D7CA35D7710047ECFCC4490D1F01DDBBCD3355FB9E971B7AD2AA93 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
18:59:17.0417 0x1920  SystemEventsBroker - ok
18:59:17.0431 0x1920  [ 731C95317C6D74A9956875BF248B6BE6, FDBB0B793AEB06A508B862B2E5EEEF5DEC1FAFBC60BEAE5B7E1F76EAAE8C9CF0 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:59:17.0480 0x1920  TabletInputService - ok
18:59:17.0499 0x1920  [ 0CBA864DBB0E503101C746BEFC01BBDE, 33B61454E0EF068C903FCEB4D0682A394F6150B8ADB5C6568C29EDE8327B10BB ] TapiSrv        C:\Windows\System32\tapisrv.dll
18:59:17.0557 0x1920  TapiSrv - ok
18:59:17.0632 0x1920  [ 36E88DE70C5D3C7C35531A1F775FCFC2, 4B8054B6231CBEE26FF8F60D9DC0C273B2ABA52F9FA6D29E76DF5DBFBFE6C9E0 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
18:59:17.0748 0x1920  Tcpip - ok
18:59:17.0830 0x1920  [ 36E88DE70C5D3C7C35531A1F775FCFC2, 4B8054B6231CBEE26FF8F60D9DC0C273B2ABA52F9FA6D29E76DF5DBFBFE6C9E0 ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
18:59:17.0930 0x1920  Tcpip6 - ok
18:59:17.0954 0x1920  [ 1B443D953FA0C54CAB8DD0AFF0B12DA1, 640F755C10EA563D50407FB814BA96ADED52A2943BA4019FCDFECC3D8D73D3EB ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
18:59:17.0996 0x1920  tcpipreg - ok
18:59:18.0013 0x1920  [ E8DC8115AE2C912694ACB51BD48D417D, 4931107529CD77F535E7BA574A2CDBE4543DE0E8A68FBCBB0ED072A0FD84299D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
18:59:18.0044 0x1920  tdx - ok
18:59:18.0054 0x1920  [ 2DC0F2A9C15BC327D6812A62F895B022, 8CB51EBA9D5355B26BA470BC1C2C42741126ABBBA593F353807A36A72EDE9887 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
18:59:18.0081 0x1920  terminpt - ok
18:59:18.0120 0x1920  [ 8938289B183BE6473D502D94586377DE, 6E1F32F59B366058CB174A0E6D809527A95EA09EE7B23A51FCB63B478F8EE9F9 ] TermService    C:\Windows\System32\termsrv.dll
18:59:18.0206 0x1920  TermService - ok
18:59:18.0220 0x1920  [ 5413CAA38F5E5496AFFBE6270A2F2A92, 78EE27DCDC611198CC9D4BC8582F0FF4D36AB957D9882CF3DB4B2DF40581F27B ] Themes          C:\Windows\system32\themeservice.dll
18:59:18.0273 0x1920  Themes - ok
18:59:18.0291 0x1920  [ 70147D6F6BA11781FEC5EEC2B2CD183C, E8869BD655FDB2B363E47E7579860CCF1EE3AA603FF967874070B40C262F1957 ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
18:59:18.0352 0x1920  TieringEngineService - ok
18:59:18.0372 0x1920  [ C424F991494E5674F2E9B3CF9F5F55D1, CC799C9154431763D052AB8B41EFAE71A039EDD6EAC5E6D892E22C8BEF1D2BB5 ] tifm21          C:\Windows\system32\drivers\tifm21.sys
18:59:18.0421 0x1920  tifm21 - ok
18:59:18.0451 0x1920  [ B623B8DFFEAF4178029966DAB1556596, 9B79725A1AD4C76D1C41B8242664450A58414B1401DDBCF62DA90DD1B83E9FB2 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
18:59:18.0520 0x1920  tiledatamodelsvc - ok
18:59:18.0534 0x1920  [ 91D9BB3E2B956A8EB8843A4F9EA4E901, B0572EB3CA14372905C586CF7F7A52650DC0503278A4DFBAE2256B74636FB55F ] TimeBrokerSvc  C:\Windows\System32\TimeBrokerServer.dll
18:59:18.0581 0x1920  TimeBrokerSvc - ok
18:59:18.0600 0x1920  [ ABB71F0B6B1939FDF2CB1E1131530E70, EA0FB91DA733B9B32641F4CAB9966589C0291369182984B65487938993BDD8FB ] TPM            C:\Windows\System32\drivers\tpm.sys
18:59:18.0635 0x1920  TPM - ok
18:59:18.0647 0x1920  [ E3B4514D9CA7F9151F49D6217F27AF37, A4FB4DF7E75DB7E222E91357DD584614439C08CF39B1EBBFBC2EE854A31613F6 ] TrkWks          C:\Windows\System32\trkwks.dll
18:59:18.0693 0x1920  TrkWks - ok
18:59:18.0706 0x1920  [ 17A95C725623DB689E6AABE46B82EAD5, 729E6A37C533763B4ED31D5F5F940A12234EE0C8E674C6AF5C19C0C70F72010E ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:59:18.0754 0x1920  TrustedInstaller - ok
18:59:18.0773 0x1920  [ A3ECB86DB90D0F9A95ADB13686C7F680, D1A2F4841957EE45928E2178623982873A5E1C46F927F68F4F6660DAEB47127D ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
18:59:18.0812 0x1920  TsUsbFlt - ok
18:59:18.0821 0x1920  [ 38C939FB0B952054102B0E36FAF8B039, 339A39F90CAB5576EB7DD9F6673F1BBA0CC4BB5F5DE120BC61FEDBC7FD403981 ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
18:59:18.0858 0x1920  TsUsbGD - ok
18:59:18.0872 0x1920  [ EE5E794D067A096C246567D0CBB7BF77, 81969C49F50B8EA62367C11872AFA67E5D65391778D337CA6146EE47C4FEC8D3 ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
18:59:18.0915 0x1920  tsusbhub - ok
18:59:18.0929 0x1920  [ 9DB33E16FF4D5868EEC877E46A91A8A8, F37FC4F3A9DD4C90DEFD8B2812AF88A212C315C5CA6B5C47B54CC8B8B4BEECB8 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
18:59:18.0973 0x1920  tunnel - ok
18:59:18.0988 0x1920  [ B564A572014AE16153544B1104DF878E, 548B59C94DA03AF0034C6AC5A8EE7E4A5D9ACA5E60BBA321BA064BBFB4A3FB21 ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
18:59:19.0034 0x1920  tzautoupdate - ok
18:59:19.0045 0x1920  [ 59E4999207E82FDE73C2C084CB9BB942, 340AFF852A244E6C0CD3201130A0366FB7D5B151060814DD9CC3FBDE8B0321C0 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
18:59:19.0075 0x1920  UASPStor - ok
18:59:19.0088 0x1920  [ B77AA4582655163B5DB2D20CD8A339CD, 16B839C06091B447DD61EECBA93F79638DA26F21B6E6F9552ABC5EEE6C027E24 ] UcmCx0101      C:\Windows\system32\Drivers\UcmCx.sys
18:59:19.0127 0x1920  UcmCx0101 - ok
18:59:19.0142 0x1920  [ 32E88DC1104A3BC7CA4B0D9ABB59BAA8, D589DF17177C074B4CB92E1BC5A0561E7EDC2AAF8E5AD514A8C34D994E6B6DF8 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
18:59:19.0181 0x1920  UcmTcpciCx0101 - ok
18:59:19.0195 0x1920  [ 0887EED62FE7BCA5D5A004393127E250, A28C40B31E0121552389F3959E56CFFB4FF34F221457109BEAB6B4F0BC6A7AE8 ] UcmUcsi        C:\Windows\System32\drivers\UcmUcsi.sys
18:59:19.0234 0x1920  UcmUcsi - ok
18:59:19.0249 0x1920  [ 2063C0A85FF2EC5902F480B15EF91011, E7B28A45F0D3E2568872B9A38A46625A9F729DC250830E28CB45DC535FC293B6 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
18:59:19.0284 0x1920  Ucx01000 - ok
18:59:19.0297 0x1920  [ 5824FA518595A90F9215DBE1C51F91C8, CCAEA4B62BACECB5D09888F91C89A01CA89E552D4346437F850547809E84C341 ] UdeCx          C:\Windows\system32\drivers\udecx.sys
18:59:19.0334 0x1920  UdeCx - ok
18:59:19.0355 0x1920  [ 8947C71283391E0FE5527017A91D405B, E72441E0BF2FCF9BFC977EFD0755A812C02FA06CA4435A8AEAC23B5110164AE9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
18:59:19.0413 0x1920  udfs - ok
18:59:19.0426 0x1920  [ 06BA4A02C78D112E8CA886898B77EA68, 9351146962E02D85622B4178FA7FC1DDCD8E3724773F076496576BCF248E329A ] UEFI            C:\Windows\System32\drivers\UEFI.sys
18:59:19.0454 0x1920  UEFI - ok
18:59:19.0463 0x1920  [ 77491C8F08F6B3C2AE9ABA4DB3A6A1A0, 45046D7600E7CDFE177DC907CCEAE0FC0C048A95F16221866FD0A23B348E95A1 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
18:59:19.0493 0x1920  UevAgentDriver - ok
18:59:19.0536 0x1920  [ 3FC5416FE141F45F9182994FFFEA8FFE, 73BE66EA7032CF41421A7E49E47CF4282EBB625B93E16DA903FB1183CCB434CB ] UevAgentService C:\Windows\system32\AgentService.exe
18:59:19.0621 0x1920  UevAgentService - ok
18:59:19.0639 0x1920  [ B164D49099D0243474718049B29D4546, A5318D2711E859F0D968FF613463A0ED503EEE1B8B9691553EC0E482D1566FAF ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
18:59:19.0674 0x1920  Ufx01000 - ok
18:59:19.0686 0x1920  [ 34FBBDA1849B17F8E97772F8A58CDC22, 63A1ED6398F0FB34D8399403576A30DA2F87407BD692863CBB4831F55BE7C8F1 ] UfxChipidea    C:\Windows\System32\drivers\UfxChipidea.sys
18:59:19.0718 0x1920  UfxChipidea - ok
18:59:19.0733 0x1920  [ 8A7B7C41F7796220FE4B9D183403ABCA, 04D90D1858537125A9232F7312561A2F2F15532EAA3F6E027C8926E4F925A27B ] ufxsynopsys    C:\Windows\System32\drivers\ufxsynopsys.sys
18:59:19.0766 0x1920  ufxsynopsys - ok
18:59:19.0794 0x1920  [ D80204E8447B30550BC77C97565859E2, DB6BCBBDCDF203C726247EC06EC3E14D3C642222A1320341BC4E8319FE0B916A ] UI0Detect      C:\Windows\system32\UI0Detect.exe
18:59:19.0841 0x1920  UI0Detect - ok
18:59:19.0853 0x1920  [ 632C1E517ED21AD5C044205D177F7082, C35B3E6E87E7F2D182A037DC7B4F15824FB7A7DCCC0AC90F681DB774060BFFAF ] umbus          C:\Windows\System32\drivers\umbus.sys
18:59:19.0897 0x1920  umbus - ok
18:59:19.0907 0x1920  [ 49C06B189A5714DFD38378FA4059521E, D834D2C4EB34471928F38C0BC74855DD7F1783862DFD0FC986B8ABE17596FE2A ] UmPass          C:\Windows\System32\drivers\umpass.sys
18:59:19.0942 0x1920  UmPass - ok
18:59:19.0960 0x1920  [ DE544A44D74FAD98579FF6C6DC7D1684, 5C38B94479039A8921C5854BECA140DCD498E65AD76ABCB93B8EFBCF64E9CC7F ] UmRdpService    C:\Windows\System32\umrdp.dll
18:59:20.0016 0x1920  UmRdpService - ok
18:59:20.0060 0x1920  [ 58A2C2CC89D528DE8FE8D3EADC8FBAE4, D682EA1AF11D49B391ABB7AB83A9DFB321534D7A892B5CFD50637AD1C1AEF3E4 ] UnistoreSvc    C:\Windows\System32\unistore.dll
18:59:20.0157 0x1920  UnistoreSvc - ok
18:59:20.0188 0x1920  [ AC79703EBF464C6EA2AE2CC65E6878A0, 3DD888BE1189B824455D0F8F5DC91026AE18E3BECB95F68827FA4E659E0AFC4B ] upnphost        C:\Windows\System32\upnphost.dll
18:59:20.0257 0x1920  upnphost - ok
18:59:20.0280 0x1920  [ 5B121FF570059764F34C9C3F9E2D8AB5, E386458BF7DACE6BA452260BB8B2E3AFA8A4D21CCCD9931F6D97694871E428EF ] UrsChipidea    C:\Windows\System32\drivers\urschipidea.sys
18:59:20.0309 0x1920  UrsChipidea - ok
18:59:20.0319 0x1920  [ D4DC4C2C309053BB93A44F40560F9EBD, A69D950533467F83233CC4A71105E15EEBFA444EFC3B13DF21952E22515215B2 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
18:59:20.0348 0x1920  UrsCx01000 - ok
18:59:20.0357 0x1920  [ 6AC432C3C051AD5E99186E364F3A66B8, 9E48D06AF7061B329FE4E4D1F29D360F87ED3A661BA62CCF54C74CD3A358D1C2 ] UrsSynopsys    C:\Windows\System32\drivers\urssynopsys.sys
18:59:20.0385 0x1920  UrsSynopsys - ok
18:59:20.0399 0x1920  [ 10B85AC4C93EB71232A31C88E8EA3238, 73246DE85F7C098E34D6A8C607F796AED9D43A1DABD16437832E261259612CD8 ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
18:59:20.0431 0x1920  usbccgp - ok
18:59:20.0442 0x1920  [ C7E28A3297CB8C3BE938AFF4095F6EC5, AC0D5D860968ED96D9A24086F52018BC99463321942695D75C1D9712503CDB42 ] usbcir          C:\Windows\System32\drivers\usbcir.sys
18:59:20.0481 0x1920  usbcir - ok
18:59:20.0493 0x1920  [ AF30D171BED850525E6A56581B43D260, 56487740DCBAAF87E043A414AF1F1CB45B842FF4B7A6E5E9E5C748B6F1D1D177 ] usbehci        C:\Windows\System32\drivers\usbehci.sys
18:59:20.0524 0x1920  usbehci - ok
18:59:20.0548 0x1920  [ 5B15A1C6C27EA30E500E92C197410946, 9514D56B3AFB0B0973163AC06480E04E0AB4A1292EDE582D6CF34E4596A7E28F ] usbhub          C:\Windows\System32\drivers\usbhub.sys
18:59:20.0591 0x1920  usbhub - ok
18:59:20.0616 0x1920  [ AB7A95CCB00CBDC4CBB4E566DCCFDE97, 38F9CC1F2BD6BC049F50A85094FE9F36BC8EDB0FE939A1B6C590C86724D6C3DA ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
18:59:20.0661 0x1920  USBHUB3 - ok
18:59:20.0676 0x1920  [ B18BE03B2077BA681043BA628D43C55E, B8FF9A2ACEBE3D68D58B49873D4899B93705B1A44FBE146A01C9E4EF91959D80 ] usbohci        C:\Windows\System32\drivers\usbohci.sys
18:59:20.0713 0x1920  usbohci - ok
18:59:20.0722 0x1920  [ D8A438D6683D398CF844BD8B0F548243, 4034A459272325138581CCEDC39230A6A2A891854EE2B20DA7CCA5073A804EFE ] usbprint        C:\Windows\System32\drivers\usbprint.sys
18:59:20.0760 0x1920  usbprint - ok
18:59:20.0773 0x1920  [ BBBC806581BF4181A874CAB3A7D5D3B7, 401B437A09B057EF967233D34AD8F40B759C860563B97ECCE2A855D947CF0E7A ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
18:59:20.0812 0x1920  usbscan - ok
18:59:20.0822 0x1920  [ 147D2178C690782CF4CD175137961739, E940B5385CF92F007CDBC972CF3FF0BC19E0746F0B63F12518A21EC780BBBB36 ] usbser          C:\Windows\System32\drivers\usbser.sys
18:59:20.0862 0x1920  usbser - ok
18:59:20.0873 0x1920  [ BAE8E7603769E3A5DC9D14A6EAEBF438, C9E89BA93A24A5EBA59948CD52240C2A124C308946557F7DD9FC3589A7EDB9A5 ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
18:59:20.0906 0x1920  USBSTOR - ok
18:59:20.0916 0x1920  [ 011BBB3175DBBA3B2369B2FEBF76C596, 5161FDDF7D525F8E4F9AAE3BA42E618D7C9F1870C7CEF24F69303DE0A3D3AC7C ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
18:59:20.0951 0x1920  usbuhci - ok
18:59:20.0970 0x1920  [ 8A3035C326FFF5AF27B60D37218B8244, A07C975D8222891B1578A1279EB373A1CD8887B344324EE66306BEBE0BFBC6DB ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
18:59:21.0010 0x1920  USBXHCI - ok
18:59:21.0065 0x1920  [ 3CD3C6C375586AE73D7C5114D350A555, D7B9BB123E25628F7B34068DED16D460DD4B7398487FA6DCF4C48705CC8BB5C9 ] UserDataSvc    C:\Windows\System32\userdataservice.dll
18:59:21.0180 0x1920  UserDataSvc - ok
18:59:21.0233 0x1920  [ F4C4C45AB57A2DED6798A571C499BB67, 3B449245C96A7845C439276A371CBAA3FB0969DA579ED4F3A84B77E736A4F250 ] UserManager    C:\Windows\System32\usermgr.dll
18:59:21.0324 0x1920  UserManager - ok
18:59:21.0351 0x1920  [ 9AC80232F5A41903164FC69E2B505BFE, 73FB73F40F621382FA6B9C8CA19C10BA2D77CBCCEFE7C3573E8046400206FB03 ] UsoSvc          C:\Windows\system32\usocore.dll
18:59:21.0416 0x1920  UsoSvc - ok
18:59:21.0428 0x1920  [ 76C8CBC584D5BEDA0819F36F778DDA16, 825A1F9D384126E87DC31F198FFEC2AC484F7E6ECE213E7FE5C57BFB27B5A941 ] VaultSvc        C:\Windows\system32\lsass.exe
18:59:21.0459 0x1920  VaultSvc - ok
18:59:21.0469 0x1920  [ 054BAE75AC02A04A2D49EE2D251DCFE2, B4F8A7C2AB5DAF6A2EA8E1069DD5A81CB5FAC28984299D0A74C1F3533D902762 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
18:59:21.0501 0x1920  vdrvroot - ok
18:59:21.0529 0x1920  [ E0081D34E432AE616CD2B40B43EFA9C8, 1E3D7E367AE3B1DE24C499833583ED244A9425BB321107758FFA233BD1AA5DAA ] vds            C:\Windows\System32\vds.exe
18:59:21.0607 0x1920  vds - ok
18:59:21.0622 0x1920  [ FE2B69C1FFBE1A51AB1E82B169030D96, 41C3EF746CA14092E3B90572B5CBD19AE3D96406A3D25386CC20860C55069322 ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
18:59:21.0658 0x1920  VerifierExt - ok
18:59:21.0688 0x1920  [ CDCD4AFBB61D4D6C2B263FC922B2D708, 977AF1E1B7A9EBAB677C1279A811F593B1844ADFCC2E6547F52A164F56845B82 ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
18:59:21.0746 0x1920  vhdmp - ok
18:59:21.0760 0x1920  [ C2A8ABA5BFC09E32489B79E28B2011AF, 92876EEE6AF26237F62E149B2AD10BE5EC52425A79A5EC1898EA807509CAC3BC ] vhf            C:\Windows\System32\drivers\vhf.sys
18:59:21.0829 0x1920  vhf - ok
18:59:21.0845 0x1920  [ D4BFDCC6EDAB8BBFAF4208F73C95F2D5, 2D05CD3056DE57F4144A1F169FE3656071A99E0BF6395BEAC60FB25EF634B5AA ] ViaC7          C:\Windows\System32\drivers\viac7.sys
18:59:21.0886 0x1920  ViaC7 - ok
18:59:21.0898 0x1920  [ 66317468ED907DF1AF053BB82A71B79E, 28C68377D51CCCFDAB46AE3E0CE4FBF3C3F785E35B0CEBF605A1B29139953683 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
18:59:21.0928 0x1920  vmbus - ok
18:59:21.0937 0x1920  [ CAACA09A933CD00E0B5793BF86A8C27D, 173F6ECEC53FACDF047EB586A634F1E95914766067AFFAED4853DD7BF53E91A0 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
18:59:21.0973 0x1920  VMBusHID - ok
18:59:21.0988 0x1920  [ E3FEA0FEE08EEBD39CC175824CEBCDEC, 6396624D3F4D8A94A067FFD3D1A1EB63B7BEDA3F834B8C75A5E805E063FF6A6C ] vmgid          C:\Windows\System32\drivers\vmgid.sys
18:59:22.0024 0x1920  vmgid - ok
18:59:22.0042 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicguestinterface C:\Windows\System32\icsvc.dll
18:59:22.0093 0x1920  vmicguestinterface - ok
18:59:22.0107 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicheartbeat  C:\Windows\System32\icsvc.dll
18:59:22.0155 0x1920  vmicheartbeat - ok
18:59:22.0170 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmickvpexchange C:\Windows\System32\icsvc.dll
18:59:22.0216 0x1920  vmickvpexchange - ok
18:59:22.0236 0x1920  [ 4CDFD55654E4A7D54555E569A1A83D53, 372DBF5E2CA3B3F96B40B0188086ED9AB713170643AE425B3034E635A5C0FACC ] vmicrdv        C:\Windows\System32\icsvcext.dll
18:59:22.0291 0x1920  vmicrdv - ok
18:59:22.0314 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicshutdown    C:\Windows\System32\icsvc.dll
18:59:22.0361 0x1920  vmicshutdown - ok
18:59:22.0376 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmictimesync    C:\Windows\System32\icsvc.dll
18:59:22.0422 0x1920  vmictimesync - ok
18:59:22.0436 0x1920  [ B4B231917D474D29A64C546879131135, AB034E972EE9D71EC1AB414F2F7961ABDCCD4AECBE172C12B82F5E6ACE959FF1 ] vmicvmsession  C:\Windows\System32\icsvc.dll
18:59:22.0483 0x1920  vmicvmsession - ok
18:59:22.0503 0x1920  [ 4CDFD55654E4A7D54555E569A1A83D53, 372DBF5E2CA3B3F96B40B0188086ED9AB713170643AE425B3034E635A5C0FACC ] vmicvss        C:\Windows\System32\icsvcext.dll
18:59:22.0557 0x1920  vmicvss - ok
18:59:22.0570 0x1920  [ BE964AE62A6D50974A55316DEF69024B, EA6AF0CDD8A5D8539430BA606B6E1715D2EB8260C468E9AE796B317E46FD166C ] volmgr          C:\Windows\system32\drivers\volmgr.sys
18:59:22.0599 0x1920  volmgr - ok
18:59:22.0623 0x1920  [ F298FFA396D2D080C037192B53EA50FD, 2ACE3483654B6B30016A61580AF2AB26AFA1E78D8ADE441A9B6DBAE16FFBC192 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
18:59:22.0663 0x1920  volmgrx - ok
18:59:22.0685 0x1920  [ 8FC38A2B3D7A58A69065F43479E848FA, 34799558BD16BCB69798C4F3B16E27B67F0FF42109592057620581AE2DFE4FD1 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
18:59:22.0729 0x1920  volsnap - ok
18:59:22.0739 0x1920  [ C70060C3A0A7F743A4B19BA15C547F3F, 713DFEB429AB2D581DE2BE8A296DB84BB8DCF3462400FC5C68A3378A3E3230A6 ] volume          C:\Windows\system32\drivers\volume.sys
18:59:22.0766 0x1920  volume - ok
18:59:22.0780 0x1920  [ 8DE15757A11F8EDD9F610C12C5F537CB, 85BDE61EC558D2E7BC7FC524D6CF69BC280DF4E332A9E0467DE83B2B084AF4A3 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
18:59:22.0816 0x1920  vsmraid - ok
18:59:22.0860 0x1920  [ 1E2A8C962D8A1FE95F04C94C1BEC0D85, ED8EE2575721D21501F3B00C2E5BD5F9997ED718376122217BEC720FC6349BC1 ] VSS            C:\Windows\system32\vssvc.exe
18:59:22.0968 0x1920  VSS - ok
18:59:22.0990 0x1920  [ 0EE3E25278FAEA3E90FE8CA6AE74F315, 89D596E9E8BED9039976E27D38E3DE3B9AF3D88F319312BA737C72A1E5E02459 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
18:59:23.0029 0x1920  VSTXRAID - ok
18:59:23.0040 0x1920  [ 2FF242A6A60A905A67DFB2506C492265, 6A530C168B19AB1B611C9FD821BAA43A20D67B7E88B9BAB968DDA15C6857B05D ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
18:59:23.0079 0x1920  vwifibus - ok
18:59:23.0090 0x1920  [ A6A334EE3B97813B92EA9C5E284CF6F7, 30FC86DDDA57F605D87E20A9DD6B8AF13EA2E67B14F6D97B09C61F47640EDB6F ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
18:59:23.0130 0x1920  vwififlt - ok
18:59:23.0155 0x1920  [ 1843F07FD89975B3837F270E2E24D349, DF6BABF77C84DD49D193A23745DF5AF1117AEF29B373FFB2CBB3A8B6817659A0 ] W32Time        C:\Windows\system32\w32time.dll
18:59:23.0222 0x1920  W32Time - ok
18:59:23.0235 0x1920  [ 7C69152B72D7DD0739AE8A1341E0F4CD, 83F8FBB8440D815E60D8CE31539E831034ADFD2FD17BFB5E5307CE7D95EC92D8 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
18:59:23.0272 0x1920  WacomPen - ok
18:59:23.0296 0x1920  [ 8F0CD0DBD02B69E572F8C25EB29E4F7D, 6F5C146A006D27E2D332AC432B4E204C8AF77C308946803CF1124760FFBB5969 ] WalletService  C:\Windows\system32\WalletService.dll
18:59:23.0359 0x1920  WalletService - ok
18:59:23.0372 0x1920  [ 14F0C0485643A73866C29CAE6139F453, F3D408B2BC841505B480CE2C232815203D2D5985F49BC3F0C22695B5ECCFBEAA ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
18:59:23.0419 0x1920  wanarp - ok
18:59:23.0428 0x1920  [ 14F0C0485643A73866C29CAE6139F453, F3D408B2BC841505B480CE2C232815203D2D5985F49BC3F0C22695B5ECCFBEAA ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
18:59:23.0472 0x1920  wanarpv6 - ok
18:59:23.0524 0x1920  [ 9BF5B67B8747DDD380BEC84915E6F4D5, 610BBB0AF28B5C93EBE34512EC35D45989C6F9EB33FD3BDCF0CD014174A1BFFF ] wbengine        C:\Windows\system32\wbengine.exe
18:59:23.0644 0x1920  wbengine - ok
18:59:23.0675 0x1920  [ DD073EA5AE9D9ACD88A3AC864C7CC611, 087E3768E7BDDC554568FFC8F8449440B8666CD3A373FCDAF1EB0E1FA337B27F ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
18:59:23.0745 0x1920  WbioSrvc - ok
18:59:23.0760 0x1920  [ 73A7F5CFAA063059A2CA99D3C0BBAC53, 34554A0CEEE46BAE124C60726B0C8F747357F2A7B5F69AB322860034312FC12E ] wcifs          C:\Windows\system32\drivers\wcifs.sys
18:59:23.0793 0x1920  wcifs - ok
18:59:23.0824 0x1920  [ ACEE8C0CD4F41A85E5506BAC810B5280, AAFC5137AD4E9337C6C6E2EDFAA2FC544E656A0239EBDC1BF4F3A68A443AFB43 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
18:59:23.0906 0x1920  Wcmsvc - ok
18:59:23.0930 0x1920  [ A9C5CDFB96F7E773BD08F98F6F67B178, 86447ED1A244702312316CA52BA646068F5864CDE3B627095104EB390B67729F ] wcncsvc        C:\Windows\System32\wcncsvc.dll
18:59:23.0994 0x1920  wcncsvc - ok
18:59:24.0007 0x1920  [ E135FE0A35B9ABF096DC359A8ACACF1F, 0180650A7664365FD2B5D3C0654DCF4ED612687E199585BCF7A6C6B89B739E75 ] wcnfs          C:\Windows\system32\drivers\wcnfs.sys
18:59:24.0048 0x1920  wcnfs - ok
18:59:24.0062 0x1920  [ 425B817D6F6F436F5C1F7A70A71CAC5F, 55583BE180F82F28B5C57B0F921F20DAAF126FCFC7271E96DBAF29F58FA8D89A ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
18:59:24.0094 0x1920  WdBoot - ok
18:59:24.0125 0x1920  [ B3ECCD6A9477D36AC7B2047BDE6E5B68, C894AEA1EDB76AD5C6B5E46EC493EC0BDC8D1D754CB0288D3D2A6F0604073C1B ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
18:59:24.0174 0x1920  Wdf01000 - ok
18:59:24.0196 0x1920  [ 827C5B8D98046934469E97F3E7E1839B, BC82D44C76B98E317116198AB5A758FB3B89D094BAB85FB243DE61CF93452FFA ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
18:59:24.0233 0x1920  WdFilter - ok
18:59:24.0246 0x1920  [ 2E63CA57869CFA25CB072BEFE64A2640, 7569BF5BF1A7783BC46F7157CA808CD91F9345B79A76EC408872F0380D1F08A9 ] WdiServiceHost  C:\Windows\system32\wdi.dll
18:59:24.0300 0x1920  WdiServiceHost - ok
18:59:24.0313 0x1920  [ 2E63CA57869CFA25CB072BEFE64A2640, 7569BF5BF1A7783BC46F7157CA808CD91F9345B79A76EC408872F0380D1F08A9 ] WdiSystemHost  C:\Windows\system32\wdi.dll
18:59:24.0371 0x1920  WdiSystemHost - ok
18:59:24.0401 0x1920  [ DF180E0BBC3D22E9B7E05C31265E5869, E287C1E2E122A6D6776AB7B57D9025BED9CDD15146EA10166091882866BEDDA9 ] wdiwifi        C:\Windows\system32\DRIVERS\wdiwifi.sys
18:59:24.0464 0x1920  wdiwifi - ok
18:59:24.0480 0x1920  [ DE385F0605E3B6E46EDC98253FFAD452, 8F62657541E2CEFBA7E2C4053B39C3B29E6D7FBCD96EEB571DE3F830B4933328 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
18:59:24.0510 0x1920  WdNisDrv - ok
18:59:24.0528 0x1920  [ 1DE903C9D0E9567F951212604462539B, 364D9A067F526C969177A4BD86C7C581D6494D1F509E0EF7B80A5A2931D92624 ] WdNisSvc        C:\Program Files\Windows Defender\NisSrv.exe
18:59:24.0565 0x1920  WdNisSvc - ok
18:59:24.0590 0x1920  [ DC496ECFC465280A610188C9B316DA21, C27274788811EDC28EEFBC391114A6930FC8FF81A806A7D8331E707493A7DFF8 ] WebClient      C:\Windows\System32\webclnt.dll
18:59:24.0648 0x1920  WebClient - ok
18:59:24.0663 0x1920  [ DCB16389E07EE11A4561641F19AE74BF, 2C97B8736A79C4435635EDA7808D05F90E59E17A53CBD62732109E4B3EC6294B ] Wecsvc          C:\Windows\system32\wecsvc.dll
18:59:24.0717 0x1920  Wecsvc - ok
18:59:24.0728 0x1920  [ 4E43223E27023C8D5585F494DB595513, ED5A28DB9325AE3A0E556F2B8BE1B28376EC263DEF0D5938E718107819C08A08 ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
18:59:24.0772 0x1920  WEPHOSTSVC - ok
18:59:24.0785 0x1920  [ 83D0F9807F16369DCE733B9F8474B146, 01E23E477D4B14FA517FDCEC72E281D9BD7A32833FA6C874AADDE08A1F9F3052 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
18:59:24.0851 0x1920  wercplsupport - ok
18:59:24.0865 0x1920  [ 9D466F2FAFE95EDA8A5A3B36FA66F1A1, 8D69E15F14508A232551A5AC6DA3B90A5F4258DFBD1E44C89FC1BAD4B0529667 ] WerSvc          C:\Windows\System32\WerSvc.dll
18:59:24.0916 0x1920  WerSvc - ok
18:59:24.0933 0x1920  [ 40C04E51FD65150677CB830A53DCB0FC, 82CDDA7ED826995C546FE89B550E81058F300DB7DC6D15DE51A87EBEFB396F98 ] WFPLWFS        C:\Windows\system32\drivers\wfplwfs.sys
18:59:24.0964 0x1920  WFPLWFS - ok
18:59:24.0979 0x1920  [ CDC1769844D191B0F655E6A5DC2F2F5E, 05B3C3F47C0D5F910973650CB3ED8C95849E4DB5C25831584716B130EBC04EE5 ] WiaRpc          C:\Windows\System32\wiarpc.dll
18:59:25.0028 0x1920  WiaRpc - ok
18:59:25.0041 0x1920  [ 9E321217D4D584FE9BF725F20C4CC294, 8852801F088F3C83D742B80F19D06A74CA4EAC496F0D1C45FDA51E3D1B423FA6 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
18:59:25.0069 0x1920  WIMMount - ok
18:59:25.0080 0x1920  [ 7D1F24D54137D7486005A5FB4A6F9F9A, 2379D517874A502C163DA09050E3BEE7ACB00EFF9E6DA91784DB0BA824A01EB8 ] WinDefend      C:\Program Files\Windows Defender\MsMpEng.exe
18:59:25.0108 0x1920  WinDefend - ok
18:59:25.0134 0x1920  [ 8DEBCBA33D27E86E66217346F84EA393, 78EA417276D13352E4CE42F23DFF125AA31616D073CCA044AB691EBE635F214B ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
18:59:25.0171 0x1920  WindowsTrustedRT - ok
18:59:25.0189 0x1920  [ 764A9285DFA402C04D11EA3BEE9FB851, E9DC8A75AF08727C699091526EED3D90803C00B428834B09B45495B54A4DAE2D ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
18:59:25.0218 0x1920  WindowsTrustedRTProxy - ok
18:59:25.0249 0x1920  [ DF51C1442A3DB8ADE2B78DCDEC2419FD, 3DB1ECADCEFAA924256022689B8D7B775C0961B2A22E39207229A98B63F32F27 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
18:59:25.0330 0x1920  WinHttpAutoProxySvc - ok
18:59:25.0364 0x1920  [ 85B8515170C41F40153CF428C45918B4, E566E4BF7E2E5FFE596A987F3362C65066E2EFB83C0CBB53E6BBB2D5F333E577 ] winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
18:59:25.0412 0x1920  winmgmt - ok
18:59:25.0509 0x1920  [ B124B6D66EE6FAB7B59FD114A633A1D1, 4192DFB5FF29A0B9F49FE8EFFBBF956B5460B0FD29FD4C420DBD436938FC96B4 ] WinRM          C:\Windows\system32\WsmSvc.dll
18:59:25.0702 0x1920  WinRM - ok
18:59:25.0738 0x1920  [ D45B4DDEAF7B8B753E35D3A7EF1ABBB5, F9ED1D758A437F37DFFF8009A499581D15F538336EC4E25B7D71452C182F8193 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
18:59:25.0777 0x1920  WINUSB - ok
18:59:25.0805 0x1920  [ 0542FEBA39BA33E01F129B4E039A4D0E, 035C4CB919CEF55561F455E456F65843DA886AB9164292C5803EF4F65A4ABD6F ] wisvc          C:\Windows\system32\flightsettings.dll
18:59:25.0873 0x1920  wisvc - ok
18:59:25.0952 0x1920  [ 85E6D93EEFAAEC8B73338A1246304AEF, 54B4D393820F25CE33BA13DCD7A666AD937D07DC2697424410BB80D6F1193249 ] Wlansvc        C:\Windows\System32\wlansvc.dll
18:59:26.0115 0x1920  Wlansvc - ok
18:59:26.0186 0x1920  [ 90A67E90454B62CC1177F4C8AA2A6539, A4F1CA1C587CE5A030669B5880107FCD0774AF30EEC8DCA58B4B26FD44812D85 ] wlidsvc        C:\Windows\system32\wlidsvc.dll
18:59:26.0324 0x1920  wlidsvc - ok
18:59:26.0343 0x1920  [ E50F32F363CFE38CAF704DBF88D6DA0F, 99224A21D01498DA92BF39690A2B6A3E37910A701C7DD1D1280A5007DA0CAA33 ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
18:59:26.0382 0x1920  WmiAcpi - ok
18:59:26.0402 0x1920  [ A6676784CCFCB5DA356919A536EA270B, 2C1867A359A6D284D8E4B37E3D92F39A2F2ED22BEB93C749CE86FBD5DDC32C50 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
18:59:26.0446 0x1920  wmiApSrv - ok
18:59:26.0486 0x1920  [ CA3A3E61D5F44D8FD276135A6D68C3B8, 2E94B8AB72E92E69A3BEA3DA00690229947F65C504FE8F0160A19E7BB61B1924 ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
18:59:26.0579 0x1920  WMPNetworkSvc - ok
18:59:26.0602 0x1920  [ BBAA859E8B0F5FB93E3437C4001B80B1, 5300E165917DE761F97C6FDAC854979CF48BD6FCDD06968F2A0C3F0B843AB6BE ] Wof            C:\Windows\system32\drivers\Wof.sys
18:59:26.0635 0x1920  Wof - ok
18:59:26.0700 0x1920  [ F2B8A725EFBC4C8200E246FABFFE33AF, 408D1549C20D32F29986D58240B3CBD45B9F1601764509AF8CD5C341FAA8ACB5 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
18:59:26.0831 0x1920  workfolderssvc - ok
18:59:26.0848 0x1920  [ 6F9118D0EFC0C409D3846517BFA9D898, 1B76926C8072DA37BB060E716A570425D169AD0D843E34DAB897A30D18AF0CBC ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
18:59:26.0896 0x1920  WPDBusEnum - ok
18:59:26.0907 0x1920  [ 35A1CD286CD4B9E0CD35FC21BFEC7C32, EB4BCC9797E56914DB773CAC7775DF852AC62362866F1AB3F1A4DBF67AFC92A7 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
18:59:26.0935 0x1920  WpdUpFltr - ok
18:59:26.0964 0x1920  [ 8B80FC74A784038DA57CDA49E7D2449F, 198B524F214632B648240BC270550F81498121B7E9B13B77227BBE41E046BB08 ] WpnService      C:\Windows\system32\WpnService.dll
18:59:27.0018 0x1920  WpnService - ok
18:59:27.0030 0x1920  [ 347865964017A38FAE32A03B671A77F8, 937184DB1EE1E9CE9ACA40BA4A80DFCF6A9EDA29BB106803FC4AAA3824C7CB17 ] WpnUserService  C:\Windows\System32\WpnUserService.dll
18:59:27.0075 0x1920  WpnUserService - ok
18:59:27.0100 0x1920  [ 3FC8AFC8059B341003BDCECC8BA93488, 6FBF64E439307D4E2E89EDA7E8FE5026462F72C9C96D0C300F0D186D4C418263 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
18:59:27.0138 0x1920  ws2ifsl - ok
18:59:27.0153 0x1920  [ A2B922E063D99F47906B4E9D3CEC4F74, 6E74D852ADFB9AED5EE601749D4D62B005F3FA9A9407421126E3944561AF5521 ] wscsvc          C:\Windows\System32\wscsvc.dll
18:59:27.0208 0x1920  wscsvc - ok
18:59:27.0222 0x1920  [ C5A42AA31E4859C33D168DC870898D38, 45FDE8D16D54FB0A8DD955352D3C5F2391339C6B0B3D74B77D1D1CA3DBBCD296 ] WSDPrintDevice  C:\Windows\System32\drivers\WSDPrint.sys
18:59:27.0260 0x1920  WSDPrintDevice - ok
18:59:27.0269 0x1920  WSearch - ok
18:59:27.0356 0x1920  [ C1D0D50D405652C965D73DE67AA6528C, F2D34C56CE82CCA39215FF9F495C6287E6BD9BCBFD531F40F99CD9DABF9B0CAD ] wuauserv        C:\Windows\system32\wuaueng.dll
18:59:27.0512 0x1920  wuauserv - ok
18:59:27.0530 0x1920  [ A69B4FEC9A2FD5E700B145BEDCC953EC, 2B2DD7088C8991B9B05DCDCC25FC4C981FA82A159A548B94CAD6F0842307B5CF ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
18:59:27.0570 0x1920  WudfPf - ok
18:59:27.0586 0x1920  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
18:59:27.0638 0x1920  WUDFRd - ok
18:59:27.0654 0x1920  [ FB483547CFB8349D199E7945F8910AE0, 41E27B60E9358B0237E609DDCE46AE2AFBBC1FBA83A79F0509B7829259F3C3D3 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
18:59:27.0703 0x1920  wudfsvc - ok
18:59:27.0722 0x1920  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFWpdFs      C:\Windows\system32\DRIVERS\WUDFRd.sys
18:59:27.0765 0x1920  WUDFWpdFs - ok
18:59:27.0781 0x1920  [ F3EA9F77B4D4017395600660E6E91B76, 051A3846D94AC7A522DB2E9DFCA1DAAD1CA726221627F2224E583B08831F82C6 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
18:59:27.0826 0x1920  WUDFWpdMtp - ok
18:59:27.0877 0x1920  [ CFB4DCA521797379DE850BC2E96B8154, 31EC580BF90E370307DD05BFC8A95046A349214F58BA36CDE5919C9F41BF9B1D ] WwanSvc        C:\Windows\System32\wwansvc.dll
18:59:27.0979 0x1920  WwanSvc - ok
18:59:28.0013 0x1920  [ 2BA581012300FA37E286F2A8A0025315, ACF784790F2C113A174ECF944CDD906CC806FF74D951E329853DF556E133D69E ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
18:59:28.0090 0x1920  XblAuthManager - ok
18:59:28.0131 0x1920  [ 2ADCF6881D83E44505D92629A5DE8400, 17A1579E7950060B0B18991A9CB2ED5997BE4466529053DA661D5DB17A33E8FF ] XblGameSave    C:\Windows\System32\XblGameSave.dll
18:59:28.0219 0x1920  XblGameSave - ok
18:59:28.0238 0x1920  [ EA4937052D0B96DBA4467689D17A8D8A, E13515C9C317C401345765E87D5B39AC63943007EDDD7497A0ED57DEDD4E41A8 ] xboxgip        C:\Windows\System32\drivers\xboxgip.sys
18:59:28.0288 0x1920  xboxgip - ok
18:59:28.0325 0x1920  [ BBB5285C89E9ACFC4966396F8BECDED9, 8F5CA758541901415C44E00F0E472342BCCFEFC00372A02636E5EB21D067DFD2 ] XboxNetApiSvc  C:\Windows\system32\XboxNetApiSvc.dll
18:59:28.0425 0x1920  XboxNetApiSvc - ok
18:59:28.0440 0x1920  [ 6EC0B4104D1CC029F527572E34C13111, F58030F4E53F893964D781DA707A0A9ED1360CAAD9C8299C4DB777072341D8DE ] xinputhid      C:\Windows\System32\drivers\xinputhid.sys
18:59:28.0476 0x1920  xinputhid - ok
18:59:28.0482 0x1920  ================ Scan global ===============================
18:59:28.0493 0x1920  [ ED4E568A6E265034DF3C439F944AD42B, E95A6A756F1667F16617BF937BB25EE9798A2CF544D8ADF56DAA3FBCB13E59DB ] C:\Windows\system32\basesrv.dll
18:59:28.0508 0x1920  [ FA428F4051AD21836F3B0F052C2FED22, 132AF940560E0B8E4239BE004CC70995485347E0E217DF06E72CBA51611EE9ED ] C:\Windows\system32\winsrv.dll
18:59:28.0533 0x1920  [ D485674D247F8827EFEB92F8F4F111CC, 038D7963DD4D2605E3A1141BE8A858650F608C5763C389FC31906CB771E64DE1 ] C:\Windows\system32\sxssrv.dll
18:59:28.0564 0x1920  [ F430DD178E518BF1C5D6199F473AE2AD, DD70653D5C68D2E8A1D46E33BD5FF026A6A253F31B1DADB63A2D801DF2E305D7 ] C:\Windows\system32\services.exe
18:59:28.0585 0x1920  [ Global ] - ok
18:59:28.0586 0x1920  ================ Scan MBR ==================================
18:59:28.0600 0x1920  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:59:28.0731 0x1920  \Device\Harddisk0\DR0 - ok
18:59:28.0732 0x1920  ================ Scan VBR ==================================
18:59:28.0736 0x1920  [ B5AC3DED7BECAB9867BFDF3E4427EA04 ] \Device\Harddisk0\DR0\Partition1
18:59:28.0738 0x1920  \Device\Harddisk0\DR0\Partition1 - ok
18:59:28.0744 0x1920  [ 58377A2B790A468AC173DD930DE5B163 ] \Device\Harddisk0\DR0\Partition2
18:59:28.0746 0x1920  \Device\Harddisk0\DR0\Partition2 - ok
18:59:28.0748 0x1920  ================ Scan generic autorun ======================
18:59:28.0757 0x1920  [ A3418E4D4A5EE636D44922DC2567FA18, 21F89584534A6A02284A6E1BD502A3530E372E6FCF1285BFD68DB074CCE655EA ] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
18:59:28.0800 0x1920  SynTPStart - ok
18:59:28.0817 0x1920  [ FE7CE849DB8C3986B2E721C6A3184FAA, 9879821AF51D13DB22EE2A8B351C5C8BB338408D325D9ACEC95237F3DE502069 ] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
18:59:28.0846 0x1920  QlbCtrl.exe - ok
18:59:29.0166 0x1920  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
18:59:29.0551 0x1920  OneDriveSetup - ok
18:59:29.0890 0x1920  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
18:59:30.0205 0x1920  OneDriveSetup - ok
18:59:30.0539 0x1920  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\System32\OneDriveSetup.exe
18:59:30.0849 0x1920  OneDriveSetup - ok
18:59:30.0900 0x1920  [ FD9A7F99A09DB266D0C1361B0ACCBD7E, 579160BDACDFE39AE5DDD7B5C2964453E89BA8D933F3FB16C6E3897EA3BDED29 ] C:\Users\ms\AppData\Local\Microsoft\OneDrive\OneDrive.exe
18:59:30.0945 0x1920  OneDrive - ok
18:59:31.0189 0x1920  [ C2C9E42D6C51E99C1BAB44F108E8851C, F513A2FCE15AD1F7C4A8A4E67CA2C9613EE305FAAE8D674BC3019A96DEEDFF61 ] C:\Program Files\CCleaner\CCleaner.exe
18:59:31.0486 0x1920  CCleaner Monitoring - ok
18:59:31.0508 0x1920  VoipConnect - ok
18:59:31.0513 0x1920  Waiting for KSN requests completion. In queue: 217
18:59:32.0565 0x1920  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
18:59:32.0565 0x1920  AV detected via SS2: Avast Antivirus, C:\Program Files\AVAST Software\Avast\wsc_proxy.exe ( 12.3.3154.0 ), 0x42000 ( disabled : updated )
18:59:32.0580 0x1920  Win FW state via NFP2: enabled ( trusted )
18:59:32.0698 0x1920  ============================================================
18:59:32.0698 0x1920  Scan finished
18:59:32.0698 0x1920  ============================================================
18:59:32.0698 0x19b8  Detected object count: 0
18:59:32.0698 0x19b8  Actual detected object count: 0
hallo. ich habe alles noch einmal nach anleitung gemacht... jetzt wurde nichts mehr gefunden ...

cosinus 07.01.2017 15:08
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

pingodoce 07.01.2017 18:14
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 07-01-2017
durchgeführt von ms (07-01-2017 18:10:30)
Gestartet von C:\Users\ms\Downloads
Microsoft Windows 10 Pro Version 1607 (X86) (2016-12-10 04:57:52)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1255615618-1242680333-4154777488-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1255615618-1242680333-4154777488-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1255615618-1242680333-4154777488-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-1255615618-1242680333-4154777488-501 - Limited - Disabled)
ms (S-1-5-21-1255615618-1242680333-4154777488-1001 - Administrator - Enabled) => C:\Users\ms

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPA
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 07-01-2017
durchgeführt von ms (Administrator) auf DESKTOP-TGSB6RT (07-01-2017 18:09:18)
Gestartet von C:\Users\ms\Downloads
Geladene Profile: ms (Verfügbare Profile: defaultuser0 & ms)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe
(Oberthur Technologies) C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(VoipConnect) C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe
(sw4you) C:\Program Files\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-15] (Synaptics, Inc.)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Certificate Synchronizer] => C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe [86528 2013-12-11] (Oberthur Technologies)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES/MALWAREBYTES/ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-01-05] (AVAST Software)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [VoipConnect] => C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe [38429792 2016-12-05] (VoipConnect)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-01-05] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK [2016-12-12]
ShortcutTarget: Hardcopy.LNK -> C:\Program Files\Hardcopy\hardcopy.exe (sw4you)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41473946-22be-44ae-b33f-b20026900a39}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bbbf93ff-9366-4c55-9a2b-55f0e0be0617}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-18] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 05qspcpa.default
FF ProfilePath: C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default [2017-01-07]
FF NewTab: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Extension: (Firebug) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\firebug@software.joehewitt.com.xpi [2016-10-11]
FF Extension: (FirePHP) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\FirePHPExtension-Build@firephp.org.xpi [2016-04-27]
FF Extension: (Button Snip Dies! für eBay) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2016-12-11]
FF Extension: (Bitdefender QuickScan) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2016-12-11]
FF HKLM\...\Firefox\Extensions: [PKCS11_Firefox@oberthur.com] - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi
FF Extension: (Oberthur Technologies PKCS#11 Module Loader) - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi [2013-11-28] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-05]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2017-01-01] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-01-05] (AVAST Software)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2017-01-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2017-01-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2017-01-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2017-01-05] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2017-01-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2017-01-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2017-01-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2017-01-05] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224752 2017-01-05] (AVAST Software)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59968 2016-12-14] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Datei ist nicht signiert]
R3 GTIPCI21; C:\Windows\system32\DRIVERS\gtipci21.sys [97280 2007-05-09] (Texas Instruments)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [153024 2017-01-04] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-06] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [219072 2017-01-07] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 netwlv32; C:\Windows\System32\drivers\netwlv32.sys [6637056 2016-07-16] (Intel Corporation)
S3 SCR3XX2K; C:\Windows\system32\DRIVERS\SCR3XX2K.sys [63104 2015-02-17] (Identiv)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S0 ElbyVCD; system32\DRIVERS\ElbyVCD.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-07 18:09 - 2017-01-07 18:09 - 00011451 _____ C:\Users\ms\Downloads\FRST.txt
2017-01-07 18:08 - 2017-01-07 18:08 - 01760768 _____ (Farbar) C:\Users\ms\Downloads\FRST.exe
2017-01-06 18:57 - 2017-01-06 19:02 - 00251192 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_18.57.43_log.txt
2017-01-06 15:11 - 2017-01-06 15:11 - 01663040 _____ (Malwarebytes) C:\Users\ms\Downloads\JRT.exe
2017-01-06 14:45 - 2017-01-06 18:30 - 00000000 ____D C:\AdwCleaner
2017-01-06 14:45 - 2017-01-06 14:45 - 03977168 _____ C:\Users\ms\Downloads\AdwCleaner_6.041.exe
2017-01-06 13:48 - 2017-01-06 13:58 - 00251190 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_13.48.13_log.txt
2017-01-06 13:42 - 2017-01-06 13:47 - 00497118 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_13.42.48_log.txt
2017-01-06 13:21 - 2017-01-06 18:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-06 13:20 - 2017-01-06 18:52 - 00000000 ____D C:\Users\ms\Desktop\mbar
2017-01-06 13:20 - 2017-01-06 13:42 - 04747704 _____ (AO Kaspersky Lab) C:\Users\ms\Downloads\tdsskiller.exe
2017-01-06 13:19 - 2017-01-06 13:20 - 16563352 _____ (Malwarebytes Corp.) C:\Users\ms\Downloads\mbar-1.09.3.1001.exe
2017-01-06 10:35 - 2017-01-06 18:37 - 00000543 _____ C:\Users\ms\Desktop\JRT.txt
2017-01-06 10:34 - 2017-01-07 18:09 - 00000000 ____D C:\FRST
2017-01-06 10:33 - 2017-01-06 10:34 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-06 09:18 - 2017-01-06 09:19 - 00000000 _____ C:\Recovery.txt
2017-01-06 02:22 - 2017-01-06 02:22 - 00005962 _____ C:\Users\ms\Desktop\tttt.txt
2017-01-06 01:33 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.Vexe
2017-01-06 01:32 - 2017-01-06 01:32 - 00001414 _____ C:\Users\ms\Desktop\eset.txt
2017-01-06 01:26 - 2017-01-06 01:26 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-01-06 01:25 - 2017-01-06 01:25 - 00001552 _____ C:\Users\ms\Desktop\mbam2.txt
2017-01-06 00:42 - 2017-01-06 00:42 - 00003272 _____ C:\Users\ms\Desktop\mbam.txt
2017-01-06 00:30 - 2017-01-06 07:32 - 00000000 ____D C:\ProgramData\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00001074 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\Program Files\RogueKiller
2017-01-06 00:28 - 2017-01-06 00:30 - 34631352 _____ (Adlice Software ) C:\Users\ms\Downloads\setup.exe
2017-01-06 00:16 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.exe
2017-01-06 00:13 - 2017-01-06 00:13 - 00000000 ____D C:\Users\ms\AppData\Local\ESET
2017-01-06 00:12 - 2017-01-06 00:13 - 06771840 _____ (ESET spol. s r.o.) C:\Users\ms\Downloads\esetonlinescanner_enu.exe
2017-01-06 00:09 - 2017-01-06 00:10 - 00005534 _____ C:\Users\ms\Desktop\Rkill.txt
2017-01-06 00:08 - 2017-01-06 00:09 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\ms\Downloads\rkill.com
2017-01-05 19:41 - 2017-01-06 12:05 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-01-05 19:41 - 2017-01-05 19:41 - 00001197 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-01-05 19:38 - 2017-01-05 19:38 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-01-05 19:34 - 2017-01-05 19:34 - 00000000 ____D C:\Users\ms\AppData\Roaming\AVAST Software
2017-01-05 19:31 - 2017-01-05 19:31 - 00002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-01-05 19:31 - 2017-01-05 19:31 - 00002152 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-01-05 19:29 - 2017-01-05 19:30 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-01-05 19:29 - 2017-01-05 19:30 - 00224752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-01-05 19:29 - 2017-01-05 19:29 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-01-05 19:29 - 2017-01-05 19:28 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-01-05 19:29 - 2017-01-05 19:28 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-01-05 19:28 - 2017-01-05 19:28 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2017-01-05 19:25 - 2017-01-05 19:38 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-05 19:22 - 2017-01-05 19:38 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-05 19:19 - 2017-01-05 19:22 - 06253640 _____ (AVAST Software) C:\Users\ms\Downloads\avast_free_antivirus_setup_online.exe
2017-01-05 19:08 - 2017-01-06 11:30 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-05 19:08 - 2017-01-06 08:43 - 00000000 _RSHD C:\Program Files\Assemblies
2017-01-05 19:07 - 2017-01-06 11:58 - 00000000 ____D C:\Windows\pss
2017-01-04 22:58 - 2017-01-04 22:58 - 00150238 _____ C:\Users\ms\Documents\RNSDG170104072487 1 (2).pdf
2017-01-04 22:38 - 2017-01-04 22:38 - 00153024 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-04 22:37 - 2017-01-07 12:26 - 00219072 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-04 22:37 - 2017-01-06 13:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-04 22:37 - 2017-01-06 09:20 - 00087496 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-04 22:37 - 2017-01-06 09:19 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-04 22:37 - 2017-01-06 08:15 - 00073152 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-04 22:37 - 2017-01-04 22:37 - 00002097 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-04 22:37 - 2016-12-14 12:55 - 00059968 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-04 22:34 - 2017-01-04 22:36 - 54199488 _____ (Malwarebytes ) C:\Users\ms\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-04 18:44 - 2017-01-04 18:45 - 00116612 _____ C:\Users\ms\Downloads\boarding-pass.pdf
2017-01-04 18:37 - 2017-01-04 18:37 - 00000000 ____D C:\Users\ms\AppData\Local\ElevatedDiagnostics
2017-01-02 16:27 - 2017-01-02 16:27 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2017-01-02 16:26 - 2017-01-02 16:26 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canneverbe Limited
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Users\ms\AppData\Local\AvgSetupLog
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\ProgramData\Avg
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Program Files\AVG
2017-01-02 16:10 - 2017-01-02 16:13 - 00000000 ____D C:\Users\ms\AppData\Local\Avg
2017-01-02 15:53 - 2017-01-02 15:53 - 00000000 ____D C:\Users\ms\Downloads\amok27
2017-01-02 14:46 - 2017-01-02 14:46 - 00000000 ____D C:\Users\ms\Documents\AnyDVDHD
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\RedFox
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-01-02 14:36 - 2017-01-02 14:36 - 00000000 ____D C:\Program Files\RedFox
2017-01-02 14:35 - 2017-01-02 14:35 - 00000000 ____D C:\Users\ms\Downloads\A996
2017-01-02 13:32 - 2017-01-02 16:33 - 00000043 ___SH C:\ProgramData\.zreglib
2017-01-02 13:32 - 2017-01-02 13:33 - 00000000 ____D C:\ProgramData\Elaborate Bytes
2017-01-02 13:31 - 2017-01-06 01:33 - 00000000 _RSHD C:\ProgramData\Assemblies
2017-01-02 13:31 - 2017-01-02 13:31 - 00000000 _RSHD C:\Users\ms\AppData\Roaming\Assemblies
2017-01-02 13:29 - 2017-01-02 13:29 - 01110564 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604.exe
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\Program Files\7-Zip
2017-01-02 13:06 - 2017-01-02 13:06 - 00001180 _____ C:\Users\ms\Desktop\Die Installation von Java fortsetzen.lnk
2017-01-02 12:48 - 2017-01-02 17:59 - 00000000 ____D C:\Program Files\Elaborate Bytes
2016-12-31 16:36 - 2016-12-31 16:36 - 00085590 _____ C:\Users\ms\Desktop\s-l1601.jpg
2016-12-31 16:35 - 2016-12-31 16:35 - 00264105 _____ C:\Users\ms\Desktop\s-l1600.jpg
2016-12-30 16:21 - 2016-12-30 16:21 - 00394682 _____ C:\Users\ms\Documents\Rudolf stoehr rp tavanic 2016.oxps
2016-12-29 18:47 - 2016-12-29 18:47 - 00010777 _____ C:\Users\ms\Documents\Maria Luiza da Silva Kündigung MOVE.docx
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagwrn.xml
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagerr.xml
2016-12-24 13:36 - 2016-12-24 13:36 - 02496120 _____ C:\Users\ms\Documents\kleiner lovenox.oxps
2016-12-24 11:19 - 2016-12-24 11:19 - 02558985 _____ C:\Users\ms\Documents\Kleiner Targin u Nolotil 2.oxps
2016-12-24 11:18 - 2016-12-24 11:18 - 02495274 _____ C:\Users\ms\Documents\Kleiner Targin u. Nolotil.oxps
2016-12-22 16:14 - 2017-01-05 20:28 - 00000000 ____D C:\Users\ms\AppData\Local\CrashDumps
2016-12-21 14:32 - 2017-01-07 18:03 - 00953020 _____ C:\Windows\system32\prfh0816.dat
2016-12-21 14:32 - 2017-01-07 18:03 - 00303336 _____ C:\Windows\system32\prfc0816.dat
2016-12-21 14:32 - 2016-12-24 11:31 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT
2016-12-21 14:32 - 2016-12-21 14:32 - 00341016 _____ C:\Windows\system32\prfi0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00042642 _____ C:\Windows\system32\prfd0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\pt
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\pt-PT
2016-12-20 22:43 - 2016-07-15 18:45 - 05032448 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0816.dll
2016-12-20 22:43 - 2016-07-15 18:42 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0816.dll
2016-12-20 22:43 - 2016-07-15 18:38 - 04384256 _____ (Microsoft Corporation) C:\Windows\system32\MLS6.dll
2016-12-20 22:25 - 2016-12-20 22:25 - 00001051 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-12-19 10:59 - 2016-12-19 11:05 - 200982907 _____ C:\Users\ms\Downloads\SteuerSparErklaerung_21.37.107.zip
2016-12-19 10:49 - 2016-12-19 10:49 - 00000000 ____D C:\Windows\tiinst
2016-12-19 10:11 - 2016-12-19 10:17 - 07086792 _____ (Hewlett Packard Company ) C:\Users\ms\Downloads\sp33439.exe
2016-12-18 22:13 - 2016-12-18 22:23 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509.exe
2016-12-18 21:51 - 2016-12-18 21:51 - 00000386 _____ C:\Users\ms\Documents\dr scheuber carvoeiro.xml
2016-12-18 21:33 - 2016-12-18 21:33 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\Roaming\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Oracle
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Program Files\Java
2016-12-18 19:39 - 2016-12-18 19:39 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111.exe
2016-12-18 19:38 - 2016-12-18 19:38 - 00000000 ____D C:\Users\ms\Downloads\gnucrawlandmap
2016-12-18 19:37 - 2016-12-18 19:37 - 00045304 _____ C:\Users\ms\Downloads\gnucrawlandmap.zip
2016-12-18 19:23 - 2016-12-18 19:23 - 00000000 ____D C:\Users\ms\AppData\Roaming\FileZilla Server
2016-12-18 19:22 - 2016-12-18 19:22 - 02238848 _____ (FileZilla Project) C:\Users\ms\Downloads\FileZilla_Server-0_9_59.exe
2016-12-17 23:48 - 2016-12-17 23:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-12-16 12:26 - 2016-12-16 12:26 - 00011487 _____ C:\Users\ms\Documents\Certificate of good standing Schleswig.docx
2016-12-16 12:19 - 2016-12-16 12:20 - 00192368 _____ C:\Users\ms\Downloads\DHL-Marke-VW27MH7RND.pdf
2016-12-16 11:46 - 2016-12-16 11:46 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-12-16 10:39 - 2012-04-16 05:00 - 00314880 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2016-12-16 09:38 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-15 19:39 - 2016-12-15 19:39 - 01960776 _____ (SCM Microsystems ) C:\Users\ms\Downloads\SCR3_DriversOnly_V8.41.exe
2016-12-15 19:39 - 2016-12-15 19:39 - 00000880 _____ C:\Windows\HBCIKRNL.INI
2016-12-15 19:39 - 2016-12-15 19:39 - 00000000 ____D C:\Program Files\SCM Microsystems
2016-12-15 19:32 - 2016-12-15 19:33 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS(1).msi
2016-12-15 19:29 - 2016-12-15 19:29 - 07645416 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp47728.exe
2016-12-15 19:25 - 2016-12-15 19:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2016-12-15 19:18 - 2016-12-15 19:18 - 00000107 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-15 19:18 - 2016-12-15 19:18 - 00000000 ____D C:\Users\ms\AppData\Roaming\MedicineOne
2016-12-14 00:40 - 2016-12-09 11:14 - 06019936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-14 00:40 - 2016-12-09 11:09 - 00133296 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-14 00:40 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-14 00:40 - 2016-12-09 11:00 - 00523784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 00:40 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-14 00:40 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-14 00:40 - 2016-12-09 10:52 - 01344992 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 00:40 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 00:40 - 2016-12-09 10:37 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-14 00:40 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-12-14 00:40 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-14 00:40 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-14 00:40 - 2016-12-09 10:22 - 03776000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-14 00:40 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 01235456 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-14 00:40 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-14 00:40 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-14 00:40 - 2016-09-15 17:53 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 01415520 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 00115552 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-14 00:39 - 2016-12-09 11:16 - 00890984 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-14 00:39 - 2016-12-09 11:16 - 00784064 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-14 00:39 - 2016-12-09 11:12 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-14 00:39 - 2016-12-09 11:10 - 00583136 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 01897824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00551264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00342880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-14 00:39 - 2016-12-09 11:00 - 00117720 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 00:39 - 2016-12-09 10:55 - 00198496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-14 00:39 - 2016-12-09 10:52 - 01413664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-14 00:39 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-14 00:39 - 2016-12-09 10:37 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-14 00:39 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-14 00:39 - 2016-12-09 10:35 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-14 00:39 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-14 00:39 - 2016-12-09 10:28 - 01284096 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-14 00:39 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 00:39 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 00:39 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-14 00:39 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-14 00:39 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-14 00:39 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 22:36 - 2016-12-13 22:36 - 00001052 _____ C:\Users\Public\Desktop\ISO to USB.lnk
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\Program Files\ISO to USB
2016-12-13 22:35 - 2016-12-13 22:36 - 01733751 _____ (isotousb.com ) C:\Users\ms\Downloads\isotousb_setup.exe
2016-12-13 22:22 - 2016-12-13 22:26 - 00000000 ____D C:\Users\ms\Downloads\windows 10 usb
2016-12-13 20:20 - 2016-12-13 20:20 - 00000000 __SHD C:\RECYCLER
2016-12-13 15:36 - 2016-12-16 11:46 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canon
2016-12-13 15:35 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMXLMAD.DLL
2016-12-13 15:33 - 2016-12-13 15:33 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 15:32 - 2016-12-13 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-13 15:32 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMLMAD.DLL
2016-12-13 15:32 - 2010-03-11 08:56 - 00180224 _____ (CANON INC.) C:\Windows\system32\CNMIUAD.DLL
2016-12-13 15:31 - 2016-12-13 15:32 - 23940240 _____ C:\Users\ms\Downloads\mp68-win-mg5100-1_02-ea24.exe
2016-12-13 15:30 - 2016-12-13 15:30 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24.exe
2016-12-13 15:17 - 2016-12-13 15:17 - 00002118 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 4.0.lnk
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\Program Files\Canon
2016-12-13 15:02 - 2016-12-13 15:16 - 49819216 _____ C:\Users\ms\Downloads\mpnx_4_0-win-4_03-ea23_2.exe
2016-12-13 10:22 - 2016-12-13 10:22 - 00001665 _____ C:\Users\ms\Desktop\MED7 Neuer Patient.lnk
2016-12-13 10:20 - 2016-12-13 10:23 - 00000000 ____D C:\Users\ms\Downloads\runasdate
2016-12-13 10:20 - 2016-12-13 10:20 - 00035563 _____ C:\Users\ms\Downloads\runasdate.zip
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Scavenger 3.2
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\Program Files\File Scavenger 3.2
2016-12-12 18:08 - 2016-12-12 18:09 - 01632488 _____ (QueTek Consulting Corporation) C:\Users\ms\Downloads\32fsg32.exe
2016-12-12 15:06 - 2016-12-12 15:07 - 00000000 ____D C:\Program Files\Hardcopy
2016-12-12 15:06 - 2016-12-12 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardcopy - Bildschirmausdruck
2016-12-12 15:06 - 2016-01-28 06:19 - 01720088 _____ (www.sw4you.de Siegfried Weckmann) C:\Windows\SwSetupu.exe
2016-12-12 14:58 - 2016-12-12 15:05 - 07108168 _____ C:\Users\ms\Downloads\hc.exe
2016-12-12 14:21 - 2016-12-12 14:21 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-12 11:21 - 2016-12-12 11:21 - 00000000 ____D C:\Users\ms\AppData\Local\PeerDistRepub
2016-12-12 09:54 - 2016-12-12 09:54 - 00000000 ____D C:\ProgramData\ODIR
2016-12-11 23:47 - 2016-12-11 23:47 - 00000000 ____D C:\temp
2016-12-11 23:46 - 2016-12-11 23:47 - 00000000 ____D C:\Users\ms\AppData\Roaming\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00001262 _____ C:\Users\ms\Desktop\VoipConnect.lnk
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\Program Files\VoipConnect.com
2016-12-11 23:45 - 2016-12-11 23:46 - 07289336 _____ (Finarea S.A. Switzerland ) C:\Users\ms\Downloads\SetupVoipConnect-voipbuster.exe
2016-12-11 23:28 - 2017-01-02 14:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Adobe
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Local\CEF
2016-12-11 23:12 - 2016-12-15 09:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Adobe
2016-12-11 23:11 - 2016-12-11 23:17 - 00000000 ____D C:\ProgramData\Adobe
2016-12-11 23:10 - 2016-12-11 23:30 - 00000000 ____D C:\Users\ms\AppData\Local\Adobe
2016-12-11 23:07 - 2016-12-11 22:46 - 02219540 _____ (Vaita ) C:\Users\ms\Downloads\ODIR.exe
2016-12-11 23:07 - 2016-11-20 20:10 - 00042050 _____ C:\Users\ms\Downloads\Kuendigungsschreiben_1411-3956-1650-75.pdf
2016-12-11 23:07 - 2016-10-05 21:51 - 08244656 _____ (Piriform Ltd) C:\Users\ms\Downloads\ccsetup522.exe
2016-12-11 23:07 - 2016-09-16 21:33 - 02907822 _____ C:\Users\ms\Downloads\skriptum-wolfgang-aufermann.pdf
2016-12-11 23:07 - 2016-09-12 23:38 - 02254413 _____ (Dr. Olaf Jacobsen ) C:\Users\ms\Downloads\cmsetup.exe
2016-12-11 23:07 - 2016-09-12 23:23 - 00000920 _____ C:\Users\ms\Downloads\datev07.cer
2016-12-11 23:07 - 2016-09-02 16:34 - 02536914 _____ C:\Users\ms\Downloads\ebook.pdf
2016-12-11 23:07 - 2016-08-30 15:40 - 00094057 _____ C:\Users\ms\Downloads\faturaRecibo_41.pdf
2016-12-11 23:07 - 2016-08-27 21:44 - 00347648 _____ C:\Users\ms\Downloads\document.pdf
2016-12-11 23:07 - 2016-08-04 23:44 - 00853491 _____ C:\Users\ms\Downloads\PBBooking 3.x Docs.pdf
2016-12-11 23:07 - 2016-07-05 13:35 - 224073588 _____ C:\Users\ms\Downloads\Med7v806.exe
2016-12-11 23:07 - 2016-05-04 08:17 - 01098961 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1514.exe
2016-12-11 23:07 - 2016-03-26 21:46 - 00030723 _____ C:\Users\ms\Downloads\mysql.tar.gz
2016-12-11 23:07 - 2016-03-26 21:46 - 00000120 _____ C:\Users\ms\Downloads\files.tar.gz
2016-12-11 23:07 - 2016-03-14 22:00 - 00000053 _____ C:\Users\ms\Downloads\googlef3d513425c3c6eb5.html
2016-12-11 23:07 - 2016-01-14 23:39 - 02122336 _____ (Irfan Skiljan) C:\Users\ms\Downloads\iview441_setup.exe
2016-12-11 23:07 - 2015-11-04 23:53 - 00001257 _____ C:\Users\ms\Downloads\index.php
2016-12-11 23:07 - 2015-07-23 11:17 - 00036562 _____ C:\Users\ms\Downloads\Herz.jpg
2016-12-11 23:07 - 2015-02-10 22:10 - 167180781 _____ C:\Users\ms\Downloads\Med7voll.exe
2016-12-11 23:07 - 1997-11-28 21:08 - 00018944 _____ (Corel Corporation) C:\Users\ms\Downloads\Install.exe
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ODIR
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\Program Files\ODIR
2016-12-11 22:47 - 2000-12-05 23:00 - 00209608 _____ (Microsoft Corporation) C:\Windows\system32\Tabctl32.ocx
2016-12-11 22:47 - 1999-03-26 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-11 22:19 - 2016-12-15 19:39 - 00000000 ____D C:\Windows\Downloaded Installations
2016-12-11 21:33 - 2016-12-11 21:33 - 00000000 ____D C:\Users\ms\AppData\Local\Dropbox
2016-12-11 21:32 - 2016-12-11 21:33 - 00688536 _____ (Dropbox, Inc.) C:\Users\ms\Downloads\DropboxInstaller.exe
2016-12-11 21:24 - 2016-12-11 21:24 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-11 21:24 - 2016-12-11 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-11 21:23 - 2016-12-11 21:24 - 00000000 ____D C:\Program Files\CCleaner
2016-12-11 21:14 - 2016-12-11 21:33 - 00000000 ____D C:\Program Files\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Users\ms\AppData\Local\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Program Files\GUM5B71.tmp
2016-12-11 20:52 - 2016-12-11 20:52 - 00000000 ____D C:\Users\ms\AppData\Roaming\hpqLog
2016-12-11 20:37 - 2016-12-19 10:18 - 00000000 ____D C:\SWSETUP
2016-12-11 19:50 - 2016-12-11 20:10 - 00000000 ____D C:\Users\ms\AppData\Local\Diagnostics
2016-12-11 19:35 - 2016-12-11 19:35 - 00000017 _____ C:\Users\ms\AppData\Local\resmon.resmoncfg
2016-12-11 18:41 - 2016-12-11 18:41 - 00066496 _____ C:\Users\ms\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 18:16 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00448864 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-11 18:16 - 2016-11-11 09:00 - 01725136 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 01586736 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 00292192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-11 18:16 - 2016-11-11 08:59 - 00106336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-11 18:16 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-11 18:16 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-11 18:16 - 2016-11-11 08:46 - 00186720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-11 18:16 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00355680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-11 18:16 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00313088 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-12-11 18:16 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-11 18:16 - 2016-11-11 08:41 - 01384704 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00802608 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00675568 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-11 18:16 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-11 18:16 - 2016-11-11 08:37 - 00381720 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-11 18:16 - 2016-11-11 08:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-11 18:16 - 2016-11-11 08:29 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-11 18:16 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-11 18:16 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-11 18:16 - 2016-11-11 08:24 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-11 18:16 - 2016-11-11 08:22 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-11 18:16 - 2016-11-11 08:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-11 18:16 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00384512 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-11 18:16 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-11 18:16 - 2016-11-11 08:18 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-11 18:16 - 2016-11-11 08:16 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-11 18:16 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01722368 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-11 18:16 - 2016-11-11 08:12 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00786432 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-11 18:16 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01948160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01136128 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-11 18:16 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-11 18:16 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00920576 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00706048 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-11 18:16 - 2016-11-11 08:02 - 00612352 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-11 18:16 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-12-11 18:16 - 2016-11-02 12:23 - 01073816 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-11 18:16 - 2016-11-02 12:23 - 00945760 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-11 18:16 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-12-11 18:16 - 2016-11-02 12:21 - 01957216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-12-11 18:16 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-12-11 18:16 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-12-11 18:16 - 2016-11-02 12:06 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-12-11 18:16 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-12-11 18:16 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-12-11 18:16 - 2016-11-02 12:00 - 00042336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-12-11 18:16 - 2016-11-02 11:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-12-11 18:16 - 2016-11-02 11:53 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-12-11 18:16 - 2016-11-02 11:51 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-12-11 18:16 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-12-11 18:16 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-12-11 18:16 - 2016-11-02 11:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\AuthExt.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-12-11 18:16 - 2016-11-02 11:38 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-12-11 18:16 - 2016-11-02 11:36 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-12-11 18:16 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-12-11 18:16 - 2016-11-02 11:33 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-12-11 18:16 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 01056768 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03595776 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-12-11 18:16 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-12-11 18:16 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls

pingodoce 07.01.2017 18:15
Code:
2016-12-11 18:16 - 2016-10-28 04:11 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-11 18:16 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-12-11 18:16 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-12-11 18:16 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-12-11 18:16 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-12-11 18:16 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-12-11 18:16 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-12-11 18:16 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-11 18:16 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-12-11 18:16 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-12-11 18:16 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-12-11 18:16 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-12-11 18:16 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-12-11 18:16 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-12-11 18:16 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-11 18:16 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-12-11 18:16 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-12-11 18:16 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-12-11 18:16 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-12-11 18:16 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-12-11 18:16 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-12-11 18:16 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-12-11 18:16 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-12-11 18:16 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-12-11 18:16 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-12-11 18:16 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-12-11 18:16 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-12-11 18:16 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-12-11 18:16 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-12-11 18:16 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-12-11 18:16 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2016-12-11 18:16 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-12-11 18:16 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2016-12-11 18:16 - 2016-10-05 10:23 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-12-11 18:16 - 2016-10-05 10:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2016-12-11 18:16 - 2016-10-05 10:22 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00498176 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-12-11 18:16 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-12-11 18:16 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-11 18:16 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-12-11 18:16 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-12-11 18:16 - 2016-10-05 10:11 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-12-11 18:16 - 2016-10-05 10:10 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 01700864 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2016-12-11 18:16 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00608256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-12-11 18:16 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-12-11 18:16 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-11 18:16 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00320152 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-12-11 18:16 - 2016-09-15 18:36 - 00021344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-12-11 18:16 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-12-11 18:16 - 2016-09-15 18:32 - 00279416 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2016-12-11 18:16 - 2016-09-15 18:27 - 00868704 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-12-11 18:16 - 2016-09-15 18:26 - 00581672 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-12-11 18:16 - 2016-09-15 18:23 - 00170448 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2016-12-11 18:16 - 2016-09-15 18:21 - 00557920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-12-11 18:16 - 2016-09-15 18:20 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2016-12-11 18:16 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-12-11 18:16 - 2016-09-15 18:17 - 00125792 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-12-11 18:16 - 2016-09-15 18:16 - 00093984 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2016-12-11 18:16 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-12-11 18:16 - 2016-09-15 18:06 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-12-11 18:16 - 2016-09-15 18:00 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-12-11 18:16 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 03716096 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00823808 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00265728 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-12-11 18:16 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2016-12-11 18:16 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-12-11 18:16 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-12-11 18:16 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2016-12-11 18:16 - 2016-09-15 17:46 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2016-12-11 18:16 - 2016-09-15 17:45 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00734208 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-12-11 18:16 - 2016-09-15 17:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-12-11 18:16 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-12-11 18:16 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 01438720 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2016-12-11 18:16 - 2016-09-07 06:35 - 00315736 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-12-11 18:16 - 2016-09-07 06:33 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-11 18:16 - 2016-09-07 06:29 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-12-11 18:16 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-12-11 18:16 - 2016-09-07 06:18 - 00290264 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00782176 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00509792 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-12-11 18:16 - 2016-09-07 06:16 - 00589144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-12-11 18:16 - 2016-09-07 06:16 - 00399712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-11 18:16 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-12-11 18:16 - 2016-09-07 06:13 - 00432328 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2016-12-11 18:16 - 2016-09-07 06:12 - 00321792 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-12-11 18:16 - 2016-09-07 06:07 - 00043944 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-11 18:16 - 2016-09-07 06:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2016-12-11 18:16 - 2016-09-07 06:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2016-12-11 18:16 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00392704 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-11 18:16 - 2016-09-07 05:51 - 06534656 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-12-11 18:16 - 2016-09-07 05:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 02318336 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 01774080 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-12-11 18:16 - 2016-09-07 05:45 - 05398016 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 01842688 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2016-12-11 18:16 - 2016-09-07 05:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-12-11 18:16 - 2016-09-07 05:40 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00895488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-12-11 18:16 - 2016-09-07 05:37 - 00640000 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-12-11 18:16 - 2016-09-07 05:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 04557824 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00860672 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-12-11 18:16 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-12-11 18:16 - 2016-09-07 05:31 - 00461312 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2016-12-11 18:16 - 2016-09-07 05:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-11 18:16 - 2016-08-27 05:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-12-11 18:16 - 2016-08-27 05:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-12-11 18:16 - 2016-08-20 06:49 - 00092000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-12-11 18:16 - 2016-08-20 06:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-12-11 18:16 - 2016-08-20 06:12 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-12-11 18:16 - 2016-08-20 06:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-12-11 18:16 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-12-11 18:16 - 2016-08-20 06:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-12-11 18:16 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-12-11 18:16 - 2016-08-20 05:59 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-12-11 18:16 - 2016-08-20 05:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-12-11 18:16 - 2016-08-20 05:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-12-11 18:16 - 2016-08-09 03:13 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-12-11 18:16 - 2016-08-06 05:26 - 00036704 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-12-11 18:16 - 2016-08-06 05:22 - 00173408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-12-11 18:16 - 2016-08-06 05:16 - 00798504 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-11 18:16 - 2016-08-06 05:15 - 00292184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-12-11 18:16 - 2016-08-06 05:14 - 00145248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-11 18:16 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-12-11 18:16 - 2016-08-06 05:06 - 00023776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-11 18:16 - 2016-08-06 05:03 - 01343928 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-12-11 18:16 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-12-11 18:16 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-11 18:16 - 2016-08-06 04:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-12-11 18:16 - 2016-08-06 04:48 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-12-11 18:16 - 2016-08-06 04:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-12-11 18:16 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-12-11 18:16 - 2016-08-06 04:46 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-12-11 18:16 - 2016-08-06 04:45 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-12-11 18:16 - 2016-08-06 04:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-12-11 18:16 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-12-11 18:16 - 2016-08-06 04:37 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-12-11 18:16 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-12-11 18:16 - 2016-08-06 04:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-12-11 18:16 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-12-11 18:16 - 2016-08-06 04:25 - 01997824 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-12-11 18:16 - 2016-08-06 04:23 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-12-11 18:16 - 2016-08-05 10:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-12-11 18:16 - 2016-08-05 09:54 - 00564488 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-12-11 18:16 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-12-11 18:16 - 2016-08-05 09:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-12-11 18:16 - 2016-08-05 09:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-12-11 18:16 - 2016-08-02 05:47 - 00094528 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-12-11 18:16 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-12-11 18:16 - 2016-07-22 02:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2016-12-11 18:15 - 2016-11-11 08:45 - 00261984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-11 18:15 - 2016-11-11 08:45 - 00175968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-11 18:15 - 2016-11-11 08:26 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-11 18:15 - 2016-11-11 08:25 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-11 18:15 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-11 18:15 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-11 18:15 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-11 18:15 - 2016-11-11 08:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-11 18:15 - 2016-11-11 08:15 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-11 18:15 - 2016-11-11 08:06 - 01602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-11 18:15 - 2016-11-02 12:21 - 00570720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-12-11 18:15 - 2016-11-02 12:09 - 00544088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-12-11 18:15 - 2016-11-02 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-12-11 18:15 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-12-11 18:15 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-12-11 18:15 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 01026400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00496992 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00192864 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-12-11 18:15 - 2016-10-15 05:40 - 01126496 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-12-11 18:15 - 2016-10-15 05:27 - 00421216 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-12-11 18:15 - 2016-10-15 05:18 - 00458592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-12-11 18:15 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-12-11 18:15 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-12-11 18:15 - 2016-10-15 04:55 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-12-11 18:15 - 2016-10-15 04:54 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-12-11 18:15 - 2016-10-15 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-12-11 18:15 - 2016-10-15 04:43 - 00500736 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-12-11 18:15 - 2016-10-05 11:10 - 00231776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-12-11 18:15 - 2016-10-05 10:53 - 00154976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-12-11 18:15 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2016-12-11 18:15 - 2016-10-05 10:46 - 00056672 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2016-12-11 18:15 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-12-11 18:15 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00614752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2016-12-11 18:15 - 2016-09-15 18:42 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2016-12-11 18:15 - 2016-09-15 18:00 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-12-11 18:15 - 2016-09-15 17:58 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-12-11 18:15 - 2016-09-15 17:55 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2016-12-11 18:15 - 2016-09-15 17:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2016-12-11 18:15 - 2016-09-15 17:52 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-12-11 18:15 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-12-11 18:15 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2016-12-11 18:15 - 2016-09-07 06:13 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2016-12-11 18:15 - 2016-09-07 05:54 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-12-11 18:15 - 2016-08-20 06:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-12-11 18:14 - 2010-03-18 19:25 - 00307200 _____ (CANON INC.) C:\Windows\system32\CNC5100L.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 01335296 _____ (CANON INC.) C:\Windows\system32\CNC5100C.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 00114688 _____ (CANON INC.) C:\Windows\system32\CNC5100I.dll
2016-12-11 18:14 - 2010-03-18 17:11 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC5100U.dll
2016-12-11 18:14 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\system32\CNHMCA.dll
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\Program Files\Microsoft
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-12-11 15:11 - 2016-12-20 17:01 - 00000000 ____D C:\Program Files\Kingston_SSD_Manager
2016-12-11 15:11 - 2016-12-11 15:11 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-11 15:02 - 2016-12-11 15:10 - 63327456 _____ (Kingston Digital, Inc ) C:\Users\ms\Downloads\KSM_setup_1.0.1.3.exe
2016-12-11 13:35 - 2016-12-11 13:35 - 00000000 ____D C:\Users\ms\AppData\Roaming\Identities
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AWP
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\Program Files\Oberthur Technologies
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 __HDC C:\ProgramData\{F9068F7D-ADD2-4370-8E57-E5C54FAD3F79}
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 ____D C:\Users\ms\AppData\Local\MedicineOne
2016-12-11 03:19 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-12-11 03:19 - 2016-12-11 03:19 - 00001280 _____ C:\Users\Public\Desktop\My MedicineOne.lnk
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MedicineOne
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MSBuild
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MedicineOne
2016-12-11 03:19 - 2016-12-01 13:45 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS.msi
2016-12-11 03:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-12-11 02:58 - 2017-01-06 14:55 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-11 02:42 - 2016-12-11 02:42 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-10 18:23 - 2016-12-10 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-12-10 18:22 - 2016-12-10 18:25 - 00000000 ____D C:\Program Files\Microsoft Works
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2016-12-10 13:29 - 2016-12-10 18:20 - 00000000 ____D C:\Windows\SHELLNEW
2016-12-10 13:20 - 2016-12-10 13:20 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft Help
2016-12-10 13:16 - 2016-12-25 18:09 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-10 13:15 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-10 13:06 - 2016-12-10 13:06 - 00000000 __RHD C:\MSOCache
2016-12-10 11:40 - 2016-12-13 22:34 - 00000000 ____D C:\Windows\system32\MRT
2016-12-10 11:38 - 2016-12-13 22:32 - 133430776 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-10 11:34 - 2016-12-10 11:34 - 00000000 ____D C:\Users\ms\AppData\Local\Programs
2016-12-10 11:22 - 2016-12-10 11:34 - 00000220 _____ C:\Users\ms\Downloads\results.txt
2016-12-10 11:22 - 2016-12-10 11:27 - 00002503 _____ C:\HCT.Log
2016-12-10 11:21 - 2016-12-16 16:34 - 00000000 ____D C:\Program Files\SpeedFan
2016-12-10 11:21 - 2016-12-10 11:21 - 00001038 _____ C:\Users\ms\Desktop\SpeedFan.lnk
2016-12-10 11:21 - 2016-12-10 11:21 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2016-12-10 11:21 - 2016-12-10 11:21 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-12-10 11:14 - 2016-12-10 11:15 - 00000158 _____ C:\Users\ms\Downloads\prime.txt
2016-12-10 11:14 - 2016-12-10 11:14 - 00000100 _____ C:\Users\ms\Downloads\local.txt
2016-12-10 11:13 - 2016-12-10 11:13 - 00000000 ____D C:\Users\ms\AppData\Local\Downloaded Installations
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:19 - 2017-01-07 18:05 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Mozilla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\joomla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\homepage Datenbank backup
2016-12-10 10:19 - 2016-12-10 10:34 - 00000000 ____D C:\Users\ms\AppData\Local\Mozilla
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\homepage AKEEBA
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\FOBI BERLIN
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\AppData\Roaming\Mozilla
2016-12-10 10:18 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-10 10:18 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\DJI_WIN_Driver_Installer
2016-12-10 10:18 - 2016-12-10 10:18 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-10 10:18 - 2016-12-10 10:18 - 00001178 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-10 10:14 - 2016-12-10 10:18 - 00000000 ____D C:\Users\ms\Downloads\Ant Videos
2016-12-10 10:10 - 2017-01-06 01:33 - 00000000 ____D C:\Users\ms\Downloads\android apk
2016-12-10 10:09 - 2016-10-18 20:58 - 00007113 _____ C:\Users\ms\Downloads\sitemap.xml
2016-12-10 10:09 - 2016-10-05 09:25 - 00004574 _____ C:\Users\ms\Downloads\subscribers_list_0_2016.30.09.csv
2016-12-10 10:09 - 2016-08-10 18:07 - 54811422 _____ C:\Users\ms\Downloads\site-www.dr-scheuber-carvoeiro.com-20160810-185738.jpa
2016-12-10 09:56 - 2017-01-03 15:42 - 00000000 ____D C:\Users\ms\Documents\Dokumente Privat
2016-12-10 09:54 - 2017-01-02 21:39 - 00000000 ____D C:\Users\ms\Documents\Dokumente Praxis
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\Documents\dokumente knie
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Temp
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Program Files\AuthenTec
2016-12-10 09:53 - 2016-12-19 10:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-10 09:53 - 2016-12-11 20:52 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Windows\QLB
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\ms\Downloads\Neuer Ordner
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-10-25 12:26 - 00288059 _____ C:\Users\ms\Desktop\Diploma I.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00465616 _____ C:\Users\ms\Desktop\certificado Bahrain.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00397695 _____ C:\Users\ms\Desktop\certificado Roland Klinik.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00362311 _____ C:\Users\ms\Desktop\Diploma.pdf
2016-12-10 09:53 - 2016-08-15 09:21 - 00128468 _____ C:\Users\ms\Desktop\elke2.png
2016-12-10 09:53 - 2016-08-13 20:10 - 00019777 _____ C:\Users\ms\Desktop\elke2.eld
2016-12-10 09:53 - 2016-05-03 01:10 - 00621681 _____ C:\Users\ms\Desktop\adresse jpg.jpg
2016-12-10 09:53 - 2016-05-02 14:48 - 00725526 _____ C:\Users\ms\Desktop\briefkopf neu.bmp
2016-12-10 09:53 - 2016-05-02 14:44 - 00028857 _____ C:\Users\ms\Desktop\briefkopf neu.jpg
2016-12-10 09:53 - 2009-04-29 07:46 - 00015872 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\system32\Drivers\HpqKbFiltr.sys
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 ____R (Hewlett-Packard Company) C:\Windows\system32\BttnCmn.dll
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\system32\BttnCmns.dll
2016-12-10 09:53 - 2006-11-02 06:09 - 01419232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01005.dll
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med7
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med wh
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\JP_HealthCare
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\Fotos Praxis
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\EBAY
2016-12-10 09:52 - 2016-08-15 11:12 - 00460009 _____ C:\Users\ms\Desktop\npl zum teil ausgefuellt.pdf
2016-12-10 09:52 - 2016-08-13 18:10 - 00107041 _____ C:\Users\ms\Desktop\elke3.png
2016-12-10 09:52 - 2016-05-12 16:12 - 00003407 _____ C:\Users\ms\Desktop\IRS2015
2016-12-10 09:52 - 2015-12-26 03:08 - 00001154 _____ C:\Users\ms\Desktop\IsoBuster.lnk
2016-12-10 09:52 - 2015-11-05 22:57 - 00004781 _____ C:\Users\ms\Desktop\farmaciaservico.png
2016-12-10 09:52 - 2015-09-27 15:07 - 00040814 _____ C:\Users\ms\Desktop\map.pdf
2016-12-10 09:52 - 2014-05-15 18:47 - 00582144 _____ C:\Users\ms\Desktop\Kopie von Scheuber.xls
2016-12-10 09:52 - 2014-03-07 21:48 - 03582301 _____ (Adobe Systems, Inc.) C:\Users\ms\Desktop\lantus_dosisfinder_05_080422_KO.exe
2016-12-10 09:52 - 2011-09-21 21:16 - 01676610 _____ C:\Users\ms\Desktop\PDF-Datei Hilfe.pdf
2016-12-10 09:51 - 2016-12-11 20:43 - 00000000 ____D C:\Program Files\Analog Devices
2016-12-10 09:50 - 2016-12-10 09:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf
2016-12-10 09:49 - 2016-12-10 09:49 - 00000000 ____D C:\Program Files\Synaptics
2016-12-10 09:48 - 2016-12-10 09:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-10 09:28 - 2016-12-10 10:11 - 00000000 ____D C:\Users\ms\AppData\Local\MicrosoftEdge
2016-12-10 09:27 - 2016-12-10 09:27 - 00000000 ____D C:\Users\ms\AppData\Local\NetworkTiles
2016-12-10 09:26 - 2016-12-10 09:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-12-10 09:25 - 2016-12-18 23:38 - 00000000 ___SD C:\Users\ms\AppData\LocalLow\Microsoft
2016-12-10 09:23 - 2017-01-07 18:03 - 04364964 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-10 07:06 - 2016-12-10 07:06 - 00000000 ____D C:\Users\ms\AppData\Local\Comms
2016-12-10 07:00 - 2016-12-10 07:00 - 00002378 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-10 07:00 - 2016-12-10 07:00 - 00000000 ___RD C:\Users\ms\OneDrive
2016-12-10 06:33 - 2016-12-10 06:33 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-10 06:25 - 2016-12-10 06:25 - 00000000 ____D C:\Users\ms\AppData\Local\Publishers
2016-12-10 06:12 - 2017-01-07 18:09 - 00000000 ___RD C:\Users\ms\Downloads
2016-12-10 06:12 - 2017-01-07 18:09 - 00000000 ____D C:\Users\ms\AppData\Local\Temp
2016-12-10 06:12 - 2017-01-07 12:26 - 02883584 ____H C:\Users\ms\NTUSER.DAT
2016-12-10 06:12 - 2017-01-06 19:04 - 00000000 ____D C:\Users\ms\AppData\Roaming
2016-12-10 06:12 - 2017-01-06 18:31 - 00000000 ____D C:\Users\ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00065536 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 06:12 - 2017-01-06 13:39 - 00000000 ____D C:\Users\ms\AppData\Local
2016-12-10 06:12 - 2017-01-06 13:20 - 00000000 ___RD C:\Users\ms\Desktop
2016-12-10 06:12 - 2017-01-04 22:58 - 00000000 ___RD C:\Users\ms\Documents
2016-12-10 06:12 - 2017-01-02 16:58 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft
2016-12-10 06:12 - 2017-01-02 16:09 - 00000000 ___SD C:\Users\ms\AppData\Roaming\Microsoft
2016-12-10 06:12 - 2017-01-02 12:49 - 00000000 ____D C:\Users\ms\AppData\Local\VirtualStore
2016-12-10 06:12 - 2016-12-22 18:36 - 00000000 ____D C:\Users\ms\AppData\Local\Packages
2016-12-10 06:12 - 2016-12-22 16:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 06:12 - 2016-12-20 22:25 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 06:12 - 2016-12-18 21:41 - 00000000 ____D C:\Users\ms\AppData\LocalLow
2016-12-10 06:12 - 2016-12-13 22:30 - 00000000 ___RD C:\Users\ms\Pictures
2016-12-10 06:12 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Roaming\Adobe
2016-12-10 06:12 - 2016-12-11 22:14 - 00000402 ___SH C:\Users\ms\Documents\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Videos
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Searches
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Saved Games
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Music
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Links
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Favorites
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Contacts
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-10 06:12 - 2016-12-10 09:19 - 00000000 ____D C:\Users\ms\AppData\Local\ConnectedDevicesPlatform
2016-12-10 06:12 - 2016-12-10 06:12 - 00782336 ___SH C:\Users\ms\ntuser.dat.LOG1
2016-12-10 06:12 - 2016-12-10 06:12 - 00491520 ___SH C:\Users\ms\ntuser.dat.LOG2
2016-12-10 06:12 - 2016-12-10 06:12 - 00003340 ____H C:\Users\defaultuser0\AppData\Local\IconCache.db
2016-12-10 06:12 - 2016-12-10 06:12 - 00000020 ___SH C:\Users\ms\ntuser.ini
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Vorlagen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Startmenü
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\SendTo
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Recent
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Netzwerkumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Lokale Einstellungen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Eigene Dateien
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Druckumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Videos
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Musik
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Bilder
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Cookies
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Verlauf
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Temporary Internet Files
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___HD C:\Users\ms\AppData
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ____D C:\Users\ms\AppData\Local\TileDataLayer
2016-12-10 06:12 - 2016-12-09 14:01 - 00000084 ___SH C:\Users\ms\Downloads\desktop.ini
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 06:06 - 2017-01-05 20:45 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-10 06:03 - 2016-12-10 06:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\packages
2016-12-10 06:02 - 2016-12-10 06:02 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2016-12-10 01:14 - 2016-12-10 01:14 - 00000000 ____D C:\Windows\CSC
2016-12-10 01:01 - 2016-12-10 01:01 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\SendTo
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Recent
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Cookies
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Temporary Internet Files
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0\AppData\LocalLow
2016-12-10 01:00 - 2017-01-06 02:18 - 00262144 ____H C:\Users\defaultuser0\NTUSER.DAT
2016-12-10 01:00 - 2016-12-10 06:12 - 00000000 ____D C:\Users\defaultuser0\AppData\Local
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ___SD C:\Users\defaultuser0\AppData\Roaming\Microsoft
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Microsoft
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00065536 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___RD C:\Users\defaultuser0\Documents
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___HD C:\Users\defaultuser0\AppData
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0
2016-12-10 01:00 - 2016-12-10 01:00 - 00049152 ___SH C:\Users\defaultuser0\ntuser.dat.LOG1
2016-12-10 01:00 - 2016-12-10 01:00 - 00012288 ___SH C:\Users\defaultuser0\ntuser.dat.LOG2
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Videos
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Pictures
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Music
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Links
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Favorites
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Downloads
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Desktop
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\Saved Games
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Temp
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-10 00:55 - 2017-01-07 12:26 - 1445953536 ___SH C:\hiberfil.sys
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 00:53 - 2016-12-10 00:53 - 00047425 _____ C:\Windows\system32\license.rtf
2016-12-09 23:39 - 2016-12-09 23:39 - 00000000 ___HD C:\Program Files\Uninstall Information
2016-12-09 23:37 - 2016-12-09 23:37 - 00000000 ____D C:\ProgramData\USOShared
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00065536 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TM.blf
2016-12-09 23:24 - 2017-01-06 09:18 - 00000000 __SHD C:\Recovery
2016-12-09 23:15 - 2017-01-07 18:03 - 00067584 ____S C:\Windows\bootstat.dat
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:14 - 2017-01-07 18:09 - 00000000 ____D C:\Windows\Prefetch
2016-12-09 23:13 - 2017-01-07 12:26 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-09 23:10 - 2017-01-07 18:03 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-09 23:10 - 2016-12-15 09:23 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-09 23:10 - 2016-12-09 23:11 - 00000000 ____D C:\Windows\ServiceProfiles
2016-12-09 23:10 - 2016-12-09 23:10 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-09 23:09 - 2017-01-07 12:26 - 603979776 ___SH C:\pagefile.sys
2016-12-09 23:09 - 2017-01-07 12:26 - 16777216 ___SH C:\swapfile.sys
2016-12-09 23:09 - 2016-12-15 09:22 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:09 - 2016-12-15 09:22 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:09 - 2016-12-09 23:12 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:05 - 2016-12-13 17:51 - 00000000 __SHD C:\System Volume Information
2016-12-09 23:04 - 2017-01-06 10:34 - 00000000 ____D C:\Windows\Panther

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-07 18:03 - 2016-07-16 18:27 - 01382876 _____ C:\Windows\system32\perfh007.dat
2017-01-07 18:03 - 2016-07-16 18:27 - 00335154 _____ C:\Windows\system32\perfc007.dat
2017-01-07 15:32 - 2015-12-11 22:34 - 00000000 ____D C:\med7net
2017-01-07 15:32 - 2015-12-11 22:32 - 00000000 ____D C:\Med7
2017-01-07 12:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\AppReadiness
2017-01-07 12:26 - 2016-07-16 03:22 - 00524288 _____ C:\Windows\system32\config\BBI
2017-01-06 16:05 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\NDF
2017-01-06 13:39 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\TAPI
2017-01-05 22:42 - 2016-07-16 09:28 - 00000000 ____D C:\Windows\INF
2017-01-01 01:29 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-31 12:59 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\config
2016-12-29 16:50 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\rescache
2016-12-25 16:57 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\Logs
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-US
2016-12-24 11:31 - 2016-07-16 09:19 - 00000000 ____D C:\Windows\CbsTemp
2016-12-24 11:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-22 18:36 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-21 14:32 - 2016-07-16 18:32 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\winrm
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\WCN
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\slmgr
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\en
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\F12
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\MiracastView
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\oobe
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\MUI
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migration
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Com
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Boot
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\IME
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Help
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\apppatch
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Dism
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\servicing
2016-12-20 22:43 - 2016-07-16 18:28 - 00000000 ____D C:\Windows\OCR
2016-12-19 10:50 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-18 21:33 - 2016-07-16 03:22 - 00000000 ____D C:\Program Files\Common Files
2016-12-15 19:09 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-15 09:22 - 2016-07-16 09:30 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\twain_32
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Media
2016-12-12 15:06 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-12 00:56 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-11 22:11 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 __RSD C:\Windows\Fonts
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-HK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\uk-UA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\th-TH
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sl-SI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sk-SK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\setup
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ro-RO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-BR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nb-NO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hr-HR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\he-IL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-CA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ar-SA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Provisioning
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\bcastdvr
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-11 22:10 - 2016-07-16 09:30 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-12-11 21:55 - 2016-07-16 09:30 - 00000167 _____ C:\Windows\win.ini
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-11 12:44 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-12-11 12:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\appcompat
2016-12-11 03:19 - 2016-07-16 03:22 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-10 17:09 - 2016-07-16 09:29 - 00000000 __SHD C:\$Recycle.Bin
2016-12-10 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-10 11:37 - 2016-07-16 09:25 - 00006656 _____ C:\Windows\system32\lpcio.dll
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Roaming
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Roaming
2016-12-10 06:12 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public
2016-12-10 06:12 - 2016-07-16 03:22 - 00000000 ___RD C:\Users
2016-12-10 01:16 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\spool
2016-12-10 01:15 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-10 01:06 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Default\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows NT
2016-12-10 00:59 - 2016-07-16 03:22 - 00000000 __RHD C:\Users\Default
2016-12-10 00:38 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Recovery
2016-12-09 23:37 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-09 23:36 - 2016-07-16 03:22 - 00032768 _____ C:\Windows\system32\config\ELAM
2016-12-09 23:34 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\PrintDialog
2016-12-09 23:19 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-09 23:04 - 2016-07-16 09:30 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-06 00:16 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.exe
2017-01-06 01:33 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.Vexe
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-11 19:35 - 2016-12-11 19:35 - 0000017 _____ () C:\Users\ms\AppData\Local\resmon.resmoncfg
2017-01-02 13:32 - 2017-01-02 16:33 - 0000043 ___SH () C:\ProgramData\.zreglib
2016-12-15 19:18 - 2016-12-15 19:18 - 0000107 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Einige Dateien in TEMP:
====================
C:\Users\ms\AppData\Local\Temp\dllnt_dump.dll
C:\Users\ms\AppData\Local\Temp\libeay32.dll
C:\Users\ms\AppData\Local\Temp\msvcr120.dll
C:\Users\ms\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert

cosinus 07.01.2017 18:52
Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

pingodoce 07.01.2017 21:10
ist gelöscht...

cosinus 07.01.2017 23:22
Bitte frische FRST Logs

pingodoce 08.01.2017 12:51
also frischer geht es nicht.

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 07-01-2017
durchgeführt von ms (08-01-2017 12:27:49)
Gestartet von C:\Users\ms\Downloads
Microsoft Windows 10 Pro Version 1607 (X86) (2016-12-10 04:57:52)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1255615618-1242680333-4154777488-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1255615618-1242680333-4154777488-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1255615618-1242680333-4154777488-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-1255615618-1242680333-4154777488-501 - Limited - Disabled)
ms (S-1-5-21-1255615618-1242680333-4154777488-1001 - Administrator - Enabled) => C:\Users\ms

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
AWP v4.6 SR12 (HKLM\...\{5A237A0B-3E20-4D38-9316-C04FF4D2D9FE}) (Version: 4.6 - Nome da empresa:)
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - Canon Inc.)
Canon MP Navigator EX 4.0 (HKLM\...\MP Navigator EX 4.0) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
File Scavenger 3.2 (de) (HKLM\...\QueTek File Scavenger 3.2 (de)) (Version: 3.2.24.0 - QueTek Consulting Corporation)
Hardcopy (HKLM\...\Hardcopy) (Version: 2016.11.07 - www.hardcopy.de)
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company)
ISO to USB (HKLM\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version:  - isotousb.com)
Java 8 Update 111 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Med7 (HKLM\...\{C09D663B-A9ED-4EEE-8CC3-2C7A3DB63618}) (Version: 7.92.0017 - Bitron GmbH)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 de) (HKLM\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
My MedicineOne 8 (HKLM\...\My MedicineOne 8) (Version: 8.0 - MedicineOne Life Sciences Computing, S.A.)
My MedicineOne 8 (Version: 8.0 - MedicineOne, Life Sciences Computing, SA) Hidden
ODIR (HKLM\...\ODIR_is1) (Version:  - Vaita)
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
RogueKiller Version 12.9.1.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.9.1.0 - Adlice Software)
SCR3xxx Smart Card Reader (HKLM\...\{9C411EF9-6EBA-46E3-8132-EDADF1CC0B16}) (Version: 8.41 - SCM Microsystems)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.0.13.2 - Synaptics)
Texas Instruments PCIxx21/x515/xx12 drivers. (HKLM\...\InstallShield_{767B964C-D9B4-422D-802B-F7ACBE2D310A}) (Version: 2.00.0004 - Texas Instruments Inc.)
TIPCI (Version: 2.00.0004 - Texas Instruments Inc.) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VoipConnect (HKLM\...\VoipConnect_is1) (Version: 4.14 build 776 - Finarea S.A. Switzerland)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {14B290FE-0F3F-40AA-A037-3F3F82F622A2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {2A27F093-5D70-411F-A275-9C6324CA4CBF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd)
Task: {503C9C16-963B-4A1D-AAA1-A562103178AE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {724DBDEC-CA44-4E1F-ABF2-F622DD0571D4} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe [2016-02-03] ()
Task: {7617336E-5CED-49E0-9D82-D6E92EE07444} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {7EDEBBE8-5B11-427C-8B63-B2700DC43305} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {8B4883F9-BD6B-4590-9843-25E272C1159A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CAF49C18-2222-4E14-8525-D6C2B9A016E3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-01] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 09:25 - 2016-07-16 09:25 - 00190976 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-01-04 22:37 - 2016-12-14 12:55 - 01729312 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-12 15:06 - 2016-11-07 11:40 - 00148664 _____ () C:\Program Files\Hardcopy\HcDLL2_48_Win32.dll
2016-12-12 15:05 - 2016-02-03 09:12 - 00062232 _____ () C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
2016-12-12 15:06 - 2016-02-03 07:58 - 00072984 _____ () C:\Program Files\Hardcopy\hardcopy_06.dll
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-12-10 06:36 - 2016-12-10 06:36 - 00679624 _____ () C:\Users\ms\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\ClientTelemetry.dll
2016-07-16 09:25 - 2016-07-16 09:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-14 00:40 - 2016-12-09 10:36 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-11 18:16 - 2016-11-02 11:24 - 01150464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-12-11 18:16 - 2016-11-02 11:24 - 00779776 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-12-11 18:16 - 2016-11-02 11:24 - 01724928 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03158528 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 00062464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 12:16 - 2016-12-14 12:44 - 00153088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 30359552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 12:16 - 2016-12-14 12:44 - 01733120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\roottools.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 00093184 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-12-12 15:06 - 2016-09-08 10:09 - 03660984 _____ () C:\Program Files\Hardcopy\HcDllS.dll
2016-12-11 02:31 - 2016-12-11 02:31 - 01608192 _____ () C:\Program Files\WindowsApps\Microsoft.People_10.1.3160.0_x86__8wekyb3d8bbwe\People.BackgroundTasks.dll
2016-12-11 02:31 - 2016-12-11 02:31 - 00113152 _____ () C:\Program Files\WindowsApps\Microsoft.People_10.1.3160.0_x86__8wekyb3d8bbwe\PeopleUtilRT.Windows.dll
2016-12-11 18:16 - 2016-09-15 18:42 - 02261856 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
2016-07-16 09:26 - 2016-07-16 18:31 - 01486688 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 09:30 - 2016-07-16 09:27 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "QlbCtrl.exe"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\StartupApproved\Run: => "Assemblies"

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{9838232A-B7F3-4544-8A8F-D24C605B19E6}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{944A5BBD-AAE7-40CC-9DD8-44C3CE3145A2}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C50EF1FF-63DB-4E59-BBA4-00537A5ED569}] => %SystemDrive%\Med7\med7.exe
FirewallRules: [{95A37AAF-B771-4A07-AA52-C33D8F4BC3EB}] => %SystemDrive%\Med7\med7.exe
FirewallRules: [TCP Query User{2FA09E23-68BE-40F7-A6A0-C1AB6F8DFABA}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [UDP Query User{F3495D05-7FD1-42E3-9F2E-0598D743C2D1}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [TCP Query User{8D9AB736-3CF5-456C-A345-3A1CBDD57F43}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe
FirewallRules: [UDP Query User{9028719B-A7B7-4F9B-B9BD-875C99A484F9}C:\program files\voipconnect.com\voipconnect\voipconnect.exe] => C:\program files\voipconnect.com\voipconnect\voipconnect.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Virtual CloneDrive
Description: Virtual CloneDrive
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/08/2017 12:24:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/08/2017 12:22:31 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (01/08/2017 12:19:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 10.0.13.2, Zeitstempel: 0x46eb4307
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 10.0.13.2, Zeitstempel: 0x46eb4307
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0002899c
ID des fehlerhaften Prozesses: 0x1490
Startzeit der fehlerhaften Anwendung: 0x01d26921d4b2c6bc
Pfad der fehlerhaften Anwendung: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Berichtskennung: d21811a8-d718-4202-a246-0c54bea1f9f2
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/07/2017 09:09:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/07/2017 09:08:31 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x800704CF
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (01/07/2017 06:04:18 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/07/2017 12:28:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/07/2017 12:27:44 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/07/2017 12:27:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (01/06/2017 06:32:45 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable


Systemfehler:
=============
Error: (01/08/2017 12:24:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:24:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:24:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:24:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:24:30 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:22:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:22:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:19:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:19:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 12:19:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
  Date: 2017-01-03 11:20:13.246
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-25 17:57:12.571
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-21 14:25:22.128
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-19 11:08:44.762
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-17 23:16:20.412
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 3447.43 MB
Verfügbarer physikalischer RAM: 1837.12 MB
Summe virtueller Speicher: 4023.43 MB
Verfügbarer virtueller Speicher: 2405.05 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:98.12 GB) (Free:48.62 GB) NTFS
Drive d: () (Fixed) (Total:13.67 GB) (Free:2.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 4C177CD5)
Partition 1: (Active) - (Size=13.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98.1 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 07-01-2017
durchgeführt von ms (Administrator) auf DESKTOP-TGSB6RT (08-01-2017 12:24:27)
Gestartet von C:\Users\ms\Downloads
Geladene Profile: ms (Verfügbare Profile: defaultuser0 & ms)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oberthur Technologies) C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(VoipConnect) C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe
(sw4you) C:\Program Files\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-15] (Synaptics, Inc.)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Certificate Synchronizer] => C:\Program Files\Oberthur Technologies\AWP\OcsCertSynchronizer.exe [86528 2013-12-11] (Oberthur Technologies)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES/MALWAREBYTES/ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2016-07-16] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\...\Run: [VoipConnect] => C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe [38429792 2016-12-05] (VoipConnect)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK [2016-12-12]
ShortcutTarget: Hardcopy.LNK -> C:\Program Files\Hardcopy\hardcopy.exe (sw4you)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{41473946-22be-44ae-b33f-b20026900a39}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{bbbf93ff-9366-4c55-9a2b-55f0e0be0617}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1255615618-1242680333-4154777488-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-18] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 05qspcpa.default
FF ProfilePath: C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default [2017-01-08]
FF NewTab: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\05qspcpa.default -> www.google.de
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Extension: (Firebug) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\firebug@software.joehewitt.com.xpi [2016-10-11]
FF Extension: (FirePHP) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\FirePHPExtension-Build@firephp.org.xpi [2016-04-27]
FF Extension: (Button Snip Dies! für eBay) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2016-12-11]
FF Extension: (Bitdefender QuickScan) - C:\Users\ms\AppData\Roaming\Mozilla\Firefox\Profiles\05qspcpa.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2016-12-11]
FF HKLM\...\Firefox\Extensions: [PKCS11_Firefox@oberthur.com] - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi
FF Extension: (Oberthur Technologies PKCS#11 Module Loader) - C:\Program Files\Oberthur Technologies\AWP\Firefox\Extension\PKCS11_Firefox@oberthur.com.xpi [2013-11-28] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2017-01-01] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59968 2016-12-14] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Datei ist nicht signiert]
R3 GTIPCI21; C:\Windows\system32\DRIVERS\gtipci21.sys [97280 2007-05-09] (Texas Instruments)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [153024 2017-01-04] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-06] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [219072 2017-01-08] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 netwlv32; C:\Windows\System32\drivers\netwlv32.sys [6637056 2016-07-16] (Intel Corporation)
S3 SCR3XX2K; C:\Windows\system32\DRIVERS\SCR3XX2K.sys [63104 2015-02-17] (Identiv)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
U0 aswVmm; kein ImagePath
S0 ElbyVCD; system32\DRIVERS\ElbyVCD.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-07 18:10 - 2017-01-07 18:11 - 00028364 _____ C:\Users\ms\Downloads\Addition.txt
2017-01-07 18:09 - 2017-01-08 12:25 - 00010272 _____ C:\Users\ms\Downloads\FRST.txt
2017-01-07 18:08 - 2017-01-07 18:08 - 01760768 _____ (Farbar) C:\Users\ms\Downloads\FRST.exe
2017-01-06 18:57 - 2017-01-06 19:02 - 00251192 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_18.57.43_log.txt
2017-01-06 15:11 - 2017-01-06 15:11 - 01663040 _____ (Malwarebytes) C:\Users\ms\Downloads\JRT.exe
2017-01-06 14:45 - 2017-01-06 18:30 - 00000000 ____D C:\AdwCleaner
2017-01-06 14:45 - 2017-01-06 14:45 - 03977168 _____ C:\Users\ms\Downloads\AdwCleaner_6.041.exe
2017-01-06 13:48 - 2017-01-06 13:58 - 00251190 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_13.48.13_log.txt
2017-01-06 13:42 - 2017-01-06 13:47 - 00497118 _____ C:\TDSSKiller.3.1.0.12_06.01.2017_13.42.48_log.txt
2017-01-06 13:21 - 2017-01-06 18:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-06 13:20 - 2017-01-06 18:52 - 00000000 ____D C:\Users\ms\Desktop\mbar
2017-01-06 13:20 - 2017-01-06 13:42 - 04747704 _____ (AO Kaspersky Lab) C:\Users\ms\Downloads\tdsskiller.exe
2017-01-06 13:19 - 2017-01-06 13:20 - 16563352 _____ (Malwarebytes Corp.) C:\Users\ms\Downloads\mbar-1.09.3.1001.exe
2017-01-06 10:35 - 2017-01-06 18:37 - 00000543 _____ C:\Users\ms\Desktop\JRT.txt
2017-01-06 10:34 - 2017-01-08 12:24 - 00000000 ____D C:\FRST
2017-01-06 10:33 - 2017-01-06 10:34 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-06 09:18 - 2017-01-06 09:19 - 00000000 _____ C:\Recovery.txt
2017-01-06 02:22 - 2017-01-06 02:22 - 00005962 _____ C:\Users\ms\Desktop\tttt.txt
2017-01-06 01:33 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.Vexe
2017-01-06 01:32 - 2017-01-06 01:32 - 00001414 _____ C:\Users\ms\Desktop\eset.txt
2017-01-06 01:26 - 2017-01-06 01:26 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-01-06 01:25 - 2017-01-06 01:25 - 00001552 _____ C:\Users\ms\Desktop\mbam2.txt
2017-01-06 00:42 - 2017-01-06 00:42 - 00003272 _____ C:\Users\ms\Desktop\mbam.txt
2017-01-06 00:30 - 2017-01-06 07:32 - 00000000 ____D C:\ProgramData\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00001074 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-01-06 00:30 - 2017-01-06 00:30 - 00000000 ____D C:\Program Files\RogueKiller
2017-01-06 00:28 - 2017-01-06 00:30 - 34631352 _____ (Adlice Software ) C:\Users\ms\Downloads\setup.exe
2017-01-06 00:16 - 2016-12-31 06:24 - 01229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.exe
2017-01-06 00:13 - 2017-01-06 00:13 - 00000000 ____D C:\Users\ms\AppData\Local\ESET
2017-01-06 00:12 - 2017-01-06 00:13 - 06771840 _____ (ESET spol. s r.o.) C:\Users\ms\Downloads\esetonlinescanner_enu.exe
2017-01-06 00:09 - 2017-01-06 00:10 - 00005534 _____ C:\Users\ms\Desktop\Rkill.txt
2017-01-06 00:08 - 2017-01-06 00:09 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\ms\Downloads\rkill.com
2017-01-05 19:29 - 2017-01-05 19:28 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-01-05 19:22 - 2017-01-07 21:07 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-05 19:19 - 2017-01-05 19:22 - 06253640 _____ (AVAST Software) C:\Users\ms\Downloads\avast_free_antivirus_setup_online.exe
2017-01-05 19:08 - 2017-01-06 11:30 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-05 19:08 - 2017-01-06 08:43 - 00000000 _RSHD C:\Program Files\Assemblies
2017-01-05 19:07 - 2017-01-06 11:58 - 00000000 ____D C:\Windows\pss
2017-01-04 22:58 - 2017-01-04 22:58 - 00150238 _____ C:\Users\ms\Documents\RNSDG170104072487 1 (2).pdf
2017-01-04 22:38 - 2017-01-04 22:38 - 00153024 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-04 22:37 - 2017-01-08 12:22 - 00219072 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-04 22:37 - 2017-01-06 13:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-04 22:37 - 2017-01-06 09:20 - 00087496 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-04 22:37 - 2017-01-06 09:19 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-04 22:37 - 2017-01-06 08:15 - 00073152 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-04 22:37 - 2017-01-04 22:37 - 00002097 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-04 22:37 - 2017-01-04 22:37 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-04 22:37 - 2016-12-14 12:55 - 00059968 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-04 22:34 - 2017-01-04 22:36 - 54199488 _____ (Malwarebytes ) C:\Users\ms\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-04 18:44 - 2017-01-04 18:45 - 00116612 _____ C:\Users\ms\Downloads\boarding-pass.pdf
2017-01-04 18:37 - 2017-01-04 18:37 - 00000000 ____D C:\Users\ms\AppData\Local\ElevatedDiagnostics
2017-01-02 16:27 - 2017-01-02 16:27 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2017-01-02 16:26 - 2017-01-02 16:26 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canneverbe Limited
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Users\ms\AppData\Local\AvgSetupLog
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\ProgramData\Avg
2017-01-02 16:10 - 2017-01-02 16:33 - 00000000 ____D C:\Program Files\AVG
2017-01-02 16:10 - 2017-01-02 16:13 - 00000000 ____D C:\Users\ms\AppData\Local\Avg
2017-01-02 15:53 - 2017-01-02 15:53 - 00000000 ____D C:\Users\ms\Downloads\amok27
2017-01-02 14:46 - 2017-01-02 14:46 - 00000000 ____D C:\Users\ms\Documents\AnyDVDHD
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\RedFox
2017-01-02 14:36 - 2017-01-02 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-01-02 14:36 - 2017-01-02 14:36 - 00000000 ____D C:\Program Files\RedFox
2017-01-02 14:35 - 2017-01-02 14:35 - 00000000 ____D C:\Users\ms\Downloads\A996
2017-01-02 13:32 - 2017-01-02 16:33 - 00000043 ___SH C:\ProgramData\.zreglib
2017-01-02 13:32 - 2017-01-02 13:33 - 00000000 ____D C:\ProgramData\Elaborate Bytes
2017-01-02 13:31 - 2017-01-06 01:33 - 00000000 _RSHD C:\ProgramData\Assemblies
2017-01-02 13:31 - 2017-01-02 13:31 - 00000000 _RSHD C:\Users\ms\AppData\Roaming\Assemblies
2017-01-02 13:29 - 2017-01-02 13:29 - 01110564 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1604.exe
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-01-02 13:29 - 2017-01-02 13:29 - 00000000 ____D C:\Program Files\7-Zip
2017-01-02 13:06 - 2017-01-02 13:06 - 00001180 _____ C:\Users\ms\Desktop\Die Installation von Java fortsetzen.lnk
2017-01-02 12:48 - 2017-01-02 17:59 - 00000000 ____D C:\Program Files\Elaborate Bytes
2016-12-31 16:36 - 2016-12-31 16:36 - 00085590 _____ C:\Users\ms\Desktop\s-l1601.jpg
2016-12-31 16:35 - 2016-12-31 16:35 - 00264105 _____ C:\Users\ms\Desktop\s-l1600.jpg
2016-12-30 16:21 - 2016-12-30 16:21 - 00394682 _____ C:\Users\ms\Documents\Rudolf stoehr rp tavanic 2016.oxps
2016-12-29 18:47 - 2016-12-29 18:47 - 00010777 _____ C:\Users\ms\Documents\Maria Luiza da Silva Kündigung MOVE.docx
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagwrn.xml
2016-12-25 16:57 - 2017-01-06 10:34 - 00001908 _____ C:\Windows\diagerr.xml
2016-12-24 13:36 - 2016-12-24 13:36 - 02496120 _____ C:\Users\ms\Documents\kleiner lovenox.oxps
2016-12-24 11:19 - 2016-12-24 11:19 - 02558985 _____ C:\Users\ms\Documents\Kleiner Targin u Nolotil 2.oxps
2016-12-24 11:18 - 2016-12-24 11:18 - 02495274 _____ C:\Users\ms\Documents\Kleiner Targin u. Nolotil.oxps
2016-12-22 16:14 - 2017-01-08 12:19 - 00000000 ____D C:\Users\ms\AppData\Local\CrashDumps
2016-12-21 14:32 - 2017-01-08 12:19 - 00957482 _____ C:\Windows\system32\prfh0816.dat
2016-12-21 14:32 - 2017-01-08 12:19 - 00307606 _____ C:\Windows\system32\prfc0816.dat
2016-12-21 14:32 - 2016-12-24 11:31 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT
2016-12-21 14:32 - 2016-12-21 14:32 - 00341016 _____ C:\Windows\system32\prfi0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00042642 _____ C:\Windows\system32\prfd0816.dat
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\pt
2016-12-21 14:32 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\pt-PT
2016-12-20 22:43 - 2016-07-15 18:45 - 05032448 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0816.dll
2016-12-20 22:43 - 2016-07-15 18:42 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0816.dll
2016-12-20 22:43 - 2016-07-15 18:38 - 04384256 _____ (Microsoft Corporation) C:\Windows\system32\MLS6.dll
2016-12-20 22:25 - 2016-12-20 22:25 - 00001051 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-12-19 10:59 - 2016-12-19 11:05 - 200982907 _____ C:\Users\ms\Downloads\SteuerSparErklaerung_21.37.107.zip
2016-12-19 10:49 - 2016-12-19 10:49 - 00000000 ____D C:\Windows\tiinst
2016-12-19 10:11 - 2016-12-19 10:17 - 07086792 _____ (Hewlett Packard Company ) C:\Users\ms\Downloads\sp33439.exe
2016-12-18 22:13 - 2016-12-18 22:23 - 06711232 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp43509.exe
2016-12-18 21:51 - 2016-12-18 21:51 - 00000386 _____ C:\Users\ms\Documents\dr scheuber carvoeiro.xml
2016-12-18 21:33 - 2016-12-18 21:33 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\Roaming\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Sun
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Oracle
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-12-18 21:32 - 2016-12-18 21:32 - 00000000 ____D C:\Program Files\Java
2016-12-18 19:39 - 2016-12-18 19:39 - 00737344 _____ (Oracle Corporation) C:\Users\ms\Downloads\JavaSetup8u111.exe
2016-12-18 19:38 - 2016-12-18 19:38 - 00000000 ____D C:\Users\ms\Downloads\gnucrawlandmap
2016-12-18 19:37 - 2016-12-18 19:37 - 00045304 _____ C:\Users\ms\Downloads\gnucrawlandmap.zip
2016-12-18 19:23 - 2016-12-18 19:23 - 00000000 ____D C:\Users\ms\AppData\Roaming\FileZilla Server
2016-12-18 19:22 - 2016-12-18 19:22 - 02238848 _____ (FileZilla Project) C:\Users\ms\Downloads\FileZilla_Server-0_9_59.exe
2016-12-17 23:48 - 2016-12-17 23:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-12-16 12:26 - 2016-12-16 12:26 - 00011487 _____ C:\Users\ms\Documents\Certificate of good standing Schleswig.docx
2016-12-16 12:19 - 2016-12-16 12:20 - 00192368 _____ C:\Users\ms\Downloads\DHL-Marke-VW27MH7RND.pdf
2016-12-16 11:46 - 2016-12-16 11:46 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-12-16 10:39 - 2012-04-16 05:00 - 00314880 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2016-12-16 09:38 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-15 19:39 - 2016-12-15 19:39 - 01960776 _____ (SCM Microsystems ) C:\Users\ms\Downloads\SCR3_DriversOnly_V8.41.exe
2016-12-15 19:39 - 2016-12-15 19:39 - 00000880 _____ C:\Windows\HBCIKRNL.INI
2016-12-15 19:39 - 2016-12-15 19:39 - 00000000 ____D C:\Program Files\SCM Microsystems
2016-12-15 19:32 - 2016-12-15 19:33 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS(1).msi
2016-12-15 19:29 - 2016-12-15 19:29 - 07645416 _____ (Hewlett-Packard Company ) C:\Users\ms\Downloads\sp47728.exe
2016-12-15 19:25 - 2016-12-15 19:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2016-12-15 19:18 - 2016-12-15 19:18 - 00000107 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-15 19:18 - 2016-12-15 19:18 - 00000000 ____D C:\Users\ms\AppData\Roaming\MedicineOne
2016-12-14 00:40 - 2016-12-09 11:14 - 06019936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-14 00:40 - 2016-12-09 11:09 - 00133296 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-14 00:40 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-14 00:40 - 2016-12-09 11:00 - 00523784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 00:40 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-14 00:40 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-14 00:40 - 2016-12-09 10:52 - 01344992 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 00:40 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 00:40 - 2016-12-09 10:37 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-14 00:40 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-12-14 00:40 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-14 00:40 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-14 00:40 - 2016-12-09 10:22 - 03776000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-14 00:40 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 00:40 - 2016-12-09 10:18 - 01235456 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-14 00:40 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-14 00:40 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-14 00:40 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-14 00:40 - 2016-12-09 10:16 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-14 00:40 - 2016-09-15 17:53 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 01415520 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-14 00:39 - 2016-12-09 11:54 - 00115552 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-14 00:39 - 2016-12-09 11:16 - 00890984 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-14 00:39 - 2016-12-09 11:16 - 00784064 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-14 00:39 - 2016-12-09 11:12 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-14 00:39 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-14 00:39 - 2016-12-09 11:10 - 00583136 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-14 00:39 - 2016-12-09 11:01 - 01897824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00551264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-14 00:39 - 2016-12-09 11:01 - 00342880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-14 00:39 - 2016-12-09 11:00 - 00117720 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 00:39 - 2016-12-09 10:55 - 00198496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-14 00:39 - 2016-12-09 10:52 - 01413664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-14 00:39 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-14 00:39 - 2016-12-09 10:37 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-14 00:39 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-14 00:39 - 2016-12-09 10:35 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-14 00:39 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-14 00:39 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-14 00:39 - 2016-12-09 10:28 - 01284096 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-14 00:39 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 00:39 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 00:39 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-14 00:39 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-14 00:39 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-14 00:39 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-14 00:39 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 22:36 - 2016-12-13 22:36 - 00001052 _____ C:\Users\Public\Desktop\ISO to USB.lnk
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-12-13 22:36 - 2016-12-13 22:36 - 00000000 ____D C:\Program Files\ISO to USB
2016-12-13 22:35 - 2016-12-13 22:36 - 01733751 _____ (isotousb.com ) C:\Users\ms\Downloads\isotousb_setup.exe
2016-12-13 22:22 - 2016-12-13 22:26 - 00000000 ____D C:\Users\ms\Downloads\windows 10 usb
2016-12-13 20:20 - 2016-12-13 20:20 - 00000000 __SHD C:\RECYCLER
2016-12-13 15:36 - 2016-12-16 11:46 - 00000000 ____D C:\Users\ms\AppData\Roaming\Canon
2016-12-13 15:35 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMXLMAD.DLL
2016-12-13 15:33 - 2016-12-13 15:33 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 15:32 - 2016-12-13 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2016-12-13 15:32 - 2016-12-13 15:32 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-13 15:32 - 2012-03-14 05:00 - 00311296 _____ (CANON INC.) C:\Windows\system32\CNMLMAD.DLL
2016-12-13 15:32 - 2010-03-11 08:56 - 00180224 _____ (CANON INC.) C:\Windows\system32\CNMIUAD.DLL
2016-12-13 15:31 - 2016-12-13 15:32 - 23940240 _____ C:\Users\ms\Downloads\mp68-win-mg5100-1_02-ea24.exe
2016-12-13 15:30 - 2016-12-13 15:30 - 23719064 _____ C:\Users\ms\Downloads\xp68-win-mg5100-5_56-ea24.exe
2016-12-13 15:17 - 2016-12-13 15:17 - 00002118 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 4.0.lnk
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-13 15:17 - 2016-12-13 15:17 - 00000000 ____D C:\Program Files\Canon
2016-12-13 15:02 - 2016-12-13 15:16 - 49819216 _____ C:\Users\ms\Downloads\mpnx_4_0-win-4_03-ea23_2.exe
2016-12-13 10:22 - 2016-12-13 10:22 - 00001665 _____ C:\Users\ms\Desktop\MED7 Neuer Patient.lnk
2016-12-13 10:20 - 2016-12-13 10:23 - 00000000 ____D C:\Users\ms\Downloads\runasdate
2016-12-13 10:20 - 2016-12-13 10:20 - 00035563 _____ C:\Users\ms\Downloads\runasdate.zip
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Scavenger 3.2
2016-12-12 18:09 - 2016-12-12 18:09 - 00000000 ____D C:\Program Files\File Scavenger 3.2
2016-12-12 18:08 - 2016-12-12 18:09 - 01632488 _____ (QueTek Consulting Corporation) C:\Users\ms\Downloads\32fsg32.exe
2016-12-12 15:06 - 2016-12-12 15:07 - 00000000 ____D C:\Program Files\Hardcopy
2016-12-12 15:06 - 2016-12-12 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardcopy - Bildschirmausdruck
2016-12-12 15:06 - 2016-01-28 06:19 - 01720088 _____ (www.sw4you.de Siegfried Weckmann) C:\Windows\SwSetupu.exe
2016-12-12 14:58 - 2016-12-12 15:05 - 07108168 _____ C:\Users\ms\Downloads\hc.exe
2016-12-12 14:21 - 2016-12-12 14:21 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-12 11:21 - 2016-12-12 11:21 - 00000000 ____D C:\Users\ms\AppData\Local\PeerDistRepub
2016-12-12 09:54 - 2016-12-12 09:54 - 00000000 ____D C:\ProgramData\ODIR
2016-12-11 23:47 - 2016-12-11 23:47 - 00000000 ____D C:\temp
2016-12-11 23:46 - 2016-12-11 23:47 - 00000000 ____D C:\Users\ms\AppData\Roaming\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00001262 _____ C:\Users\ms\Desktop\VoipConnect.lnk
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2016-12-11 23:46 - 2016-12-11 23:46 - 00000000 ____D C:\Program Files\VoipConnect.com
2016-12-11 23:45 - 2016-12-11 23:46 - 07289336 _____ (Finarea S.A. Switzerland ) C:\Users\ms\Downloads\SetupVoipConnect-voipbuster.exe
2016-12-11 23:28 - 2017-01-02 14:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Adobe
2016-12-11 23:17 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Local\CEF
2016-12-11 23:12 - 2016-12-15 09:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-12-11 23:12 - 2016-12-11 23:12 - 00000000 ____D C:\Program Files\Adobe
2016-12-11 23:11 - 2016-12-11 23:17 - 00000000 ____D C:\ProgramData\Adobe
2016-12-11 23:10 - 2016-12-11 23:30 - 00000000 ____D C:\Users\ms\AppData\Local\Adobe
2016-12-11 23:07 - 2016-12-11 22:46 - 02219540 _____ (Vaita ) C:\Users\ms\Downloads\ODIR.exe
2016-12-11 23:07 - 2016-11-20 20:10 - 00042050 _____ C:\Users\ms\Downloads\Kuendigungsschreiben_1411-3956-1650-75.pdf
2016-12-11 23:07 - 2016-10-05 21:51 - 08244656 _____ (Piriform Ltd) C:\Users\ms\Downloads\ccsetup522.exe
2016-12-11 23:07 - 2016-09-16 21:33 - 02907822 _____ C:\Users\ms\Downloads\skriptum-wolfgang-aufermann.pdf
2016-12-11 23:07 - 2016-09-12 23:38 - 02254413 _____ (Dr. Olaf Jacobsen ) C:\Users\ms\Downloads\cmsetup.exe
2016-12-11 23:07 - 2016-09-12 23:23 - 00000920 _____ C:\Users\ms\Downloads\datev07.cer
2016-12-11 23:07 - 2016-09-02 16:34 - 02536914 _____ C:\Users\ms\Downloads\ebook.pdf
2016-12-11 23:07 - 2016-08-30 15:40 - 00094057 _____ C:\Users\ms\Downloads\faturaRecibo_41.pdf
2016-12-11 23:07 - 2016-08-27 21:44 - 00347648 _____ C:\Users\ms\Downloads\document.pdf
2016-12-11 23:07 - 2016-08-04 23:44 - 00853491 _____ C:\Users\ms\Downloads\PBBooking 3.x Docs.pdf
2016-12-11 23:07 - 2016-07-05 13:35 - 224073588 _____ C:\Users\ms\Downloads\Med7v806.exe
2016-12-11 23:07 - 2016-05-04 08:17 - 01098961 _____ (Igor Pavlov) C:\Users\ms\Downloads\7z1514.exe
2016-12-11 23:07 - 2016-03-26 21:46 - 00030723 _____ C:\Users\ms\Downloads\mysql.tar.gz
2016-12-11 23:07 - 2016-03-26 21:46 - 00000120 _____ C:\Users\ms\Downloads\files.tar.gz
2016-12-11 23:07 - 2016-03-14 22:00 - 00000053 _____ C:\Users\ms\Downloads\googlef3d513425c3c6eb5.html
2016-12-11 23:07 - 2016-01-14 23:39 - 02122336 _____ (Irfan Skiljan) C:\Users\ms\Downloads\iview441_setup.exe
2016-12-11 23:07 - 2015-11-04 23:53 - 00001257 _____ C:\Users\ms\Downloads\index.php
2016-12-11 23:07 - 2015-07-23 11:17 - 00036562 _____ C:\Users\ms\Downloads\Herz.jpg
2016-12-11 23:07 - 2015-02-10 22:10 - 167180781 _____ C:\Users\ms\Downloads\Med7voll.exe
2016-12-11 23:07 - 1997-11-28 21:08 - 00018944 _____ (Corel Corporation) C:\Users\ms\Downloads\Install.exe
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ODIR
2016-12-11 22:47 - 2016-12-11 22:47 - 00000000 ____D C:\Program Files\ODIR
2016-12-11 22:47 - 2000-12-05 23:00 - 00209608 _____ (Microsoft Corporation) C:\Windows\system32\Tabctl32.ocx
2016-12-11 22:47 - 1999-03-26 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-11 22:19 - 2016-12-15 19:39 - 00000000 ____D C:\Windows\Downloaded Installations
2016-12-11 21:33 - 2016-12-11 21:33 - 00000000 ____D C:\Users\ms\AppData\Local\Dropbox
2016-12-11 21:32 - 2016-12-11 21:33 - 00688536 _____ (Dropbox, Inc.) C:\Users\ms\Downloads\DropboxInstaller.exe
2016-12-11 21:24 - 2016-12-11 21:24 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-11 21:24 - 2016-12-11 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-11 21:23 - 2016-12-11 21:24 - 00000000 ____D C:\Program Files\CCleaner
2016-12-11 21:14 - 2016-12-11 21:33 - 00000000 ____D C:\Program Files\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Users\ms\AppData\Local\Google
2016-12-11 21:14 - 2016-12-11 21:14 - 00000000 ____D C:\Program Files\GUM5B71.tmp
2016-12-11 20:52 - 2016-12-11 20:52 - 00000000 ____D C:\Users\ms\AppData\Roaming\hpqLog
2016-12-11 20:37 - 2016-12-19 10:18 - 00000000 ____D C:\SWSETUP
2016-12-11 19:50 - 2016-12-11 20:10 - 00000000 ____D C:\Users\ms\AppData\Local\Diagnostics
2016-12-11 19:35 - 2016-12-11 19:35 - 00000017 _____ C:\Users\ms\AppData\Local\resmon.resmoncfg
2016-12-11 18:41 - 2016-12-11 18:41 - 00066496 _____ C:\Users\ms\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 18:16 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00448864 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-11 18:16 - 2016-11-11 09:07 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-11 18:16 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-11 18:16 - 2016-11-11 09:00 - 01725136 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 01586736 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-11 18:16 - 2016-11-11 08:59 - 00292192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-11 18:16 - 2016-11-11 08:59 - 00106336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-11 18:16 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-11 18:16 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-11 18:16 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-11 18:16 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-11 18:16 - 2016-11-11 08:46 - 00186720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-11 18:16 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-11 18:16 - 2016-11-11 08:45 - 00355680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-11 18:16 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00313088 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-12-11 18:16 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-11 18:16 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-11 18:16 - 2016-11-11 08:41 - 01384704 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00802608 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-11 18:16 - 2016-11-11 08:41 - 00675568 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-11 18:16 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-11 18:16 - 2016-11-11 08:37 - 00381720 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-11 18:16 - 2016-11-11 08:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-11 18:16 - 2016-11-11 08:29 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-11 18:16 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-11 18:16 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-11 18:16 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-11 18:16 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-11 18:16 - 2016-11-11 08:25 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-11 18:16 - 2016-11-11 08:24 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:24 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-11 18:16 - 2016-11-11 08:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-11 18:16 - 2016-11-11 08:22 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-11 18:16 - 2016-11-11 08:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-11 18:16 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-11 18:16 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-11 18:16 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00384512 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-11 18:16 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-11 18:16 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-11 18:16 - 2016-11-11 08:18 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-11 18:16 - 2016-11-11 08:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-12-11 18:16 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-11 18:16 - 2016-11-11 08:16 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-11 18:16 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01722368 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-11 18:16 - 2016-11-11 08:15 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-11 18:16 - 2016-11-11 08:14 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-11 18:16 - 2016-11-11 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-11 18:16 - 2016-11-11 08:13 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-11 18:16 - 2016-11-11 08:12 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-11 18:16 - 2016-11-11 08:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-11 18:16 - 2016-11-11 08:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-11 18:16 - 2016-11-11 08:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00786432 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-11 18:16 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-11 18:16 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01948160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 01136128 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-11 18:16 - 2016-11-11 08:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-11 18:16 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-11 18:16 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-11 18:16 - 2016-11-11 08:05 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-11 18:16 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00920576 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00706048 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-11 18:16 - 2016-11-11 08:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-11 18:16 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-11 18:16 - 2016-11-11 08:02 - 00612352 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-11 18:16 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-12-11 18:16 - 2016-11-02 12:23 - 01073816 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-11 18:16 - 2016-11-02 12:23 - 00945760 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-11 18:16 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-12-11 18:16 - 2016-11-02 12:21 - 01957216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-12-11 18:16 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-12-11 18:16 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-12-11 18:16 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-12-11 18:16 - 2016-11-02 12:06 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-12-11 18:16 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-12-11 18:16 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-12-11 18:16 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-12-11 18:16 - 2016-11-02 12:00 - 00042336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-12-11 18:16 - 2016-11-02 11:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-12-11 18:16 - 2016-11-02 11:53 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-12-11 18:16 - 2016-11-02 11:51 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-12-11 18:16 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-12-11 18:16 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-12-11 18:16 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-12-11 18:16 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-12-11 18:16 - 2016-11-02 11:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-12-11 18:16 - 2016-11-02 11:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-12-11 18:16 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\AuthExt.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-12-11 18:16 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-12-11 18:16 - 2016-11-02 11:42 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-12-11 18:16 - 2016-11-02 11:41 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-12-11 18:16 - 2016-11-02 11:40 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-12-11 18:16 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-12-11 18:16 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-12-11 18:16 - 2016-11-02 11:38 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-12-11 18:16 - 2016-11-02 11:36 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-12-11 18:16 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-12-11 18:16 - 2016-11-02 11:33 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-12-11 18:16 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-12-11 18:16 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-12-11 18:16 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 01056768 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-12-11 18:16 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 03595776 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-11 18:16 - 2016-11-02 11:26 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-12-11 18:16 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-12-11 18:16 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-12-11 18:16 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls
2016-12-11 18:16 - 2016-10-28 04:11 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-11 18:16 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-12-11 18:16 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-12-11 18:16 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-12-11 18:16 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-12-11 18:16 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-12-11 18:16 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-12-11 18:16 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-11 18:16 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-12-11 18:16 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-12-11 18:16 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-12-11 18:16 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-12-11 18:16 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-12-11 18:16 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-12-11 18:16 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-12-11 18:16 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-12-11 18:16 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-12-11 18:16 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-12-11 18:16 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

pingodoce 08.01.2017 12:51
Code:
2016-12-11 18:16 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-12-11 18:16 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-11 18:16 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-12-11 18:16 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-12-11 18:16 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-12-11 18:16 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-12-11 18:16 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-12-11 18:16 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-12-11 18:16 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-12-11 18:16 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-12-11 18:16 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-12-11 18:16 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-11 18:16 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-12-11 18:16 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-12-11 18:16 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-12-11 18:16 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-11 18:16 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-12-11 18:16 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-12-11 18:16 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-12-11 18:16 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-12-11 18:16 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-11 18:16 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-12-11 18:16 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-11 18:16 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-12-11 18:16 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-12-11 18:16 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-12-11 18:16 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-12-11 18:16 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-12-11 18:16 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-12-11 18:16 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-12-11 18:16 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-12-11 18:16 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-12-11 18:16 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2016-12-11 18:16 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2016-12-11 18:16 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2016-12-11 18:16 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-12-11 18:16 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2016-12-11 18:16 - 2016-10-05 10:24 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-12-11 18:16 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2016-12-11 18:16 - 2016-10-05 10:23 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-12-11 18:16 - 2016-10-05 10:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2016-12-11 18:16 - 2016-10-05 10:22 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-12-11 18:16 - 2016-10-05 10:21 - 00498176 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2016-12-11 18:16 - 2016-10-05 10:20 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-12-11 18:16 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-12-11 18:16 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-11 18:16 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-12-11 18:16 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-12-11 18:16 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-12-11 18:16 - 2016-10-05 10:11 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-12-11 18:16 - 2016-10-05 10:10 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 01700864 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2016-12-11 18:16 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-11 18:16 - 2016-10-05 10:09 - 00608256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-12-11 18:16 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-12-11 18:16 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-12-11 18:16 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-12-11 18:16 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-11 18:16 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-12-11 18:16 - 2016-09-15 18:37 - 00320152 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-12-11 18:16 - 2016-09-15 18:36 - 00021344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-12-11 18:16 - 2016-09-15 18:35 - 00356704 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-12-11 18:16 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-12-11 18:16 - 2016-09-15 18:32 - 00279416 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2016-12-11 18:16 - 2016-09-15 18:27 - 00868704 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-12-11 18:16 - 2016-09-15 18:26 - 00581672 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-12-11 18:16 - 2016-09-15 18:23 - 00170448 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-12-11 18:16 - 2016-09-15 18:22 - 00111968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2016-12-11 18:16 - 2016-09-15 18:21 - 00557920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-12-11 18:16 - 2016-09-15 18:20 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2016-12-11 18:16 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-12-11 18:16 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-12-11 18:16 - 2016-09-15 18:17 - 00125792 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-12-11 18:16 - 2016-09-15 18:16 - 00093984 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2016-12-11 18:16 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-12-11 18:16 - 2016-09-15 18:06 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-12-11 18:16 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2016-12-11 18:16 - 2016-09-15 18:01 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-12-11 18:16 - 2016-09-15 18:00 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2016-12-11 18:16 - 2016-09-15 18:00 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-12-11 18:16 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2016-12-11 18:16 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-11 18:16 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 03716096 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-12-11 18:16 - 2016-09-15 17:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00823808 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00265728 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2016-12-11 18:16 - 2016-09-15 17:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-12-11 18:16 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-12-11 18:16 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2016-12-11 18:16 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2016-12-11 18:16 - 2016-09-15 17:54 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2016-12-11 18:16 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-12-11 18:16 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-11 18:16 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-12-11 18:16 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2016-12-11 18:16 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-12-11 18:16 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-12-11 18:16 - 2016-09-15 17:48 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-12-11 18:16 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2016-12-11 18:16 - 2016-09-15 17:47 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2016-12-11 18:16 - 2016-09-15 17:46 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-12-11 18:16 - 2016-09-15 17:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2016-12-11 18:16 - 2016-09-15 17:45 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-12-11 18:16 - 2016-09-15 17:45 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00734208 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2016-12-11 18:16 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-12-11 18:16 - 2016-09-15 17:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2016-12-11 18:16 - 2016-09-15 17:44 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2016-12-11 18:16 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-12-11 18:16 - 2016-09-15 17:43 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2016-12-11 18:16 - 2016-09-15 17:42 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-12-11 18:16 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-12-11 18:16 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2016-12-11 18:16 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-12-11 18:16 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-12-11 18:16 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-12-11 18:16 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2016-12-11 18:16 - 2016-09-15 17:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 01438720 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-12-11 18:16 - 2016-09-15 17:35 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2016-12-11 18:16 - 2016-09-07 06:35 - 00315736 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-12-11 18:16 - 2016-09-07 06:33 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-11 18:16 - 2016-09-07 06:29 - 00341344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-12-11 18:16 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-12-11 18:16 - 2016-09-07 06:18 - 00290264 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00782176 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-12-11 18:16 - 2016-09-07 06:17 - 00509792 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-12-11 18:16 - 2016-09-07 06:16 - 00589144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-12-11 18:16 - 2016-09-07 06:16 - 00399712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-11 18:16 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-12-11 18:16 - 2016-09-07 06:13 - 00432328 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2016-12-11 18:16 - 2016-09-07 06:12 - 00321792 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-12-11 18:16 - 2016-09-07 06:07 - 00043944 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-11 18:16 - 2016-09-07 06:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2016-12-11 18:16 - 2016-09-07 06:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-12-11 18:16 - 2016-09-07 05:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2016-12-11 18:16 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-11 18:16 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-11 18:16 - 2016-09-07 05:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-12-11 18:16 - 2016-09-07 05:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-12-11 18:16 - 2016-09-07 05:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2016-12-11 18:16 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00392704 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2016-12-11 18:16 - 2016-09-07 05:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-11 18:16 - 2016-09-07 05:51 - 06534656 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-12-11 18:16 - 2016-09-07 05:50 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-12-11 18:16 - 2016-09-07 05:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 02318336 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-11 18:16 - 2016-09-07 05:47 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 01774080 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-11 18:16 - 2016-09-07 05:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-12-11 18:16 - 2016-09-07 05:45 - 05398016 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 01842688 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-12-11 18:16 - 2016-09-07 05:44 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2016-12-11 18:16 - 2016-09-07 05:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-12-11 18:16 - 2016-09-07 05:40 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00895488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-12-11 18:16 - 2016-09-07 05:39 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-12-11 18:16 - 2016-09-07 05:37 - 00640000 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-12-11 18:16 - 2016-09-07 05:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 04557824 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00860672 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-12-11 18:16 - 2016-09-07 05:34 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-12-11 18:16 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-12-11 18:16 - 2016-09-07 05:31 - 00461312 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2016-12-11 18:16 - 2016-09-07 05:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-11 18:16 - 2016-08-27 05:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-12-11 18:16 - 2016-08-27 05:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-12-11 18:16 - 2016-08-20 06:49 - 00092000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-12-11 18:16 - 2016-08-20 06:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-12-11 18:16 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-12-11 18:16 - 2016-08-20 06:12 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-12-11 18:16 - 2016-08-20 06:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-12-11 18:16 - 2016-08-20 06:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-12-11 18:16 - 2016-08-20 06:11 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-12-11 18:16 - 2016-08-20 06:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-12-11 18:16 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-12-11 18:16 - 2016-08-20 06:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-12-11 18:16 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-12-11 18:16 - 2016-08-20 05:59 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-12-11 18:16 - 2016-08-20 05:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-12-11 18:16 - 2016-08-20 05:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-12-11 18:16 - 2016-08-09 03:13 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-12-11 18:16 - 2016-08-06 05:26 - 00036704 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-12-11 18:16 - 2016-08-06 05:22 - 00173408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-12-11 18:16 - 2016-08-06 05:16 - 00798504 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-11 18:16 - 2016-08-06 05:15 - 00292184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-12-11 18:16 - 2016-08-06 05:14 - 00145248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-11 18:16 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-12-11 18:16 - 2016-08-06 05:06 - 00023776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-11 18:16 - 2016-08-06 05:03 - 01343928 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-12-11 18:16 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-12-11 18:16 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-11 18:16 - 2016-08-06 04:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-12-11 18:16 - 2016-08-06 04:48 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-12-11 18:16 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-12-11 18:16 - 2016-08-06 04:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-12-11 18:16 - 2016-08-06 04:47 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-12-11 18:16 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-12-11 18:16 - 2016-08-06 04:46 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-12-11 18:16 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-12-11 18:16 - 2016-08-06 04:45 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-12-11 18:16 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-12-11 18:16 - 2016-08-06 04:43 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-12-11 18:16 - 2016-08-06 04:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-12-11 18:16 - 2016-08-06 04:40 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-12-11 18:16 - 2016-08-06 04:39 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-12-11 18:16 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-12-11 18:16 - 2016-08-06 04:37 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-12-11 18:16 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-12-11 18:16 - 2016-08-06 04:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-12-11 18:16 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-12-11 18:16 - 2016-08-06 04:25 - 01997824 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-12-11 18:16 - 2016-08-06 04:23 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-12-11 18:16 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-12-11 18:16 - 2016-08-05 10:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-12-11 18:16 - 2016-08-05 09:54 - 00564488 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-12-11 18:16 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-12-11 18:16 - 2016-08-05 09:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-12-11 18:16 - 2016-08-05 09:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-12-11 18:16 - 2016-08-02 05:47 - 00094528 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-12-11 18:16 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-12-11 18:16 - 2016-07-22 02:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2016-12-11 18:15 - 2016-11-11 08:45 - 00261984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-11 18:15 - 2016-11-11 08:45 - 00175968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-11 18:15 - 2016-11-11 08:26 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-11 18:15 - 2016-11-11 08:25 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-11 18:15 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-11 18:15 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-11 18:15 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-11 18:15 - 2016-11-11 08:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-11 18:15 - 2016-11-11 08:15 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-11 18:15 - 2016-11-11 08:06 - 01602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-11 18:15 - 2016-11-02 12:21 - 00570720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-12-11 18:15 - 2016-11-02 12:09 - 00544088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-12-11 18:15 - 2016-11-02 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-12-11 18:15 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-12-11 18:15 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-12-11 18:15 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 01026400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00496992 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-12-11 18:15 - 2016-10-15 06:11 - 00192864 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-12-11 18:15 - 2016-10-15 05:40 - 01126496 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-12-11 18:15 - 2016-10-15 05:27 - 00421216 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-12-11 18:15 - 2016-10-15 05:18 - 00458592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-12-11 18:15 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-12-11 18:15 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-12-11 18:15 - 2016-10-15 04:55 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-12-11 18:15 - 2016-10-15 04:54 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-12-11 18:15 - 2016-10-15 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-12-11 18:15 - 2016-10-15 04:43 - 00500736 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-12-11 18:15 - 2016-10-05 11:10 - 00231776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-12-11 18:15 - 2016-10-05 10:53 - 00154976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-12-11 18:15 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2016-12-11 18:15 - 2016-10-05 10:46 - 00056672 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2016-12-11 18:15 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-12-11 18:15 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00614752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2016-12-11 18:15 - 2016-09-15 18:42 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2016-12-11 18:15 - 2016-09-15 18:42 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2016-12-11 18:15 - 2016-09-15 18:00 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-12-11 18:15 - 2016-09-15 17:58 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-12-11 18:15 - 2016-09-15 17:55 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2016-12-11 18:15 - 2016-09-15 17:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2016-12-11 18:15 - 2016-09-15 17:52 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-12-11 18:15 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-12-11 18:15 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2016-12-11 18:15 - 2016-09-07 06:13 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2016-12-11 18:15 - 2016-09-07 05:54 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-12-11 18:15 - 2016-08-20 06:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-12-11 18:15 - 2016-08-06 04:47 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-12-11 18:14 - 2010-03-18 19:25 - 00307200 _____ (CANON INC.) C:\Windows\system32\CNC5100L.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 01335296 _____ (CANON INC.) C:\Windows\system32\CNC5100C.dll
2016-12-11 18:14 - 2010-03-18 17:12 - 00114688 _____ (CANON INC.) C:\Windows\system32\CNC5100I.dll
2016-12-11 18:14 - 2010-03-18 17:11 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC5100U.dll
2016-12-11 18:14 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\system32\CNHMCA.dll
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-12-11 15:28 - 2016-12-11 15:28 - 00000000 ____D C:\Program Files\Microsoft
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-12-11 15:24 - 2016-12-11 15:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-12-11 15:11 - 2016-12-20 17:01 - 00000000 ____D C:\Program Files\Kingston_SSD_Manager
2016-12-11 15:11 - 2016-12-11 15:11 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-11 15:02 - 2016-12-11 15:10 - 63327456 _____ (Kingston Digital, Inc ) C:\Users\ms\Downloads\KSM_setup_1.0.1.3.exe
2016-12-11 13:35 - 2016-12-11 13:35 - 00000000 ____D C:\Users\ms\AppData\Roaming\Identities
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AWP
2016-12-11 03:23 - 2016-12-11 03:23 - 00000000 ____D C:\Program Files\Oberthur Technologies
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 __HDC C:\ProgramData\{F9068F7D-ADD2-4370-8E57-E5C54FAD3F79}
2016-12-11 03:20 - 2016-12-11 03:20 - 00000000 ____D C:\Users\ms\AppData\Local\MedicineOne
2016-12-11 03:19 - 2016-12-21 14:32 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-12-11 03:19 - 2016-12-11 03:19 - 00001280 _____ C:\Users\Public\Desktop\My MedicineOne.lnk
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MedicineOne
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MSBuild
2016-12-11 03:19 - 2016-12-11 03:19 - 00000000 ____D C:\Program Files\MedicineOne
2016-12-11 03:19 - 2016-12-01 13:45 - 26220284 _____ C:\Users\ms\Downloads\AWP_v4_6_SR12_SIBS.msi
2016-12-11 03:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-12-11 03:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-12-11 02:58 - 2017-01-06 14:55 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-11 02:42 - 2016-12-11 02:42 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-10 18:23 - 2016-12-10 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-12-10 18:22 - 2016-12-10 18:25 - 00000000 ____D C:\Program Files\Microsoft Works
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-10 18:22 - 2016-12-10 18:22 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2016-12-10 13:29 - 2016-12-10 18:20 - 00000000 ____D C:\Windows\SHELLNEW
2016-12-10 13:20 - 2016-12-10 13:20 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft Help
2016-12-10 13:16 - 2016-12-25 18:09 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-10 13:15 - 2016-12-13 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-10 13:06 - 2016-12-10 13:06 - 00000000 __RHD C:\MSOCache
2016-12-10 11:40 - 2016-12-13 22:34 - 00000000 ____D C:\Windows\system32\MRT
2016-12-10 11:38 - 2016-12-13 22:32 - 133430776 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-10 11:34 - 2016-12-10 11:34 - 00000000 ____D C:\Users\ms\AppData\Local\Programs
2016-12-10 11:22 - 2016-12-10 11:34 - 00000220 _____ C:\Users\ms\Downloads\results.txt
2016-12-10 11:22 - 2016-12-10 11:27 - 00002503 _____ C:\HCT.Log
2016-12-10 11:21 - 2016-12-16 16:34 - 00000000 ____D C:\Program Files\SpeedFan
2016-12-10 11:21 - 2016-12-10 11:21 - 00001038 _____ C:\Users\ms\Desktop\SpeedFan.lnk
2016-12-10 11:21 - 2016-12-10 11:21 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2016-12-10 11:21 - 2016-12-10 11:21 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-12-10 11:14 - 2016-12-10 11:15 - 00000158 _____ C:\Users\ms\Downloads\prime.txt
2016-12-10 11:14 - 2016-12-10 11:14 - 00000100 _____ C:\Users\ms\Downloads\local.txt
2016-12-10 11:13 - 2016-12-10 11:13 - 00000000 ____D C:\Users\ms\AppData\Local\Downloaded Installations
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 00000000 _____ C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:19 - 2017-01-07 21:09 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Mozilla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\joomla
2016-12-10 10:19 - 2016-12-11 23:13 - 00000000 ____D C:\Users\ms\Downloads\homepage Datenbank backup
2016-12-10 10:19 - 2016-12-10 10:34 - 00000000 ____D C:\Users\ms\AppData\Local\Mozilla
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\homepage AKEEBA
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\FOBI BERLIN
2016-12-10 10:19 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\AppData\Roaming\Mozilla
2016-12-10 10:18 - 2016-12-18 21:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-10 10:18 - 2016-12-10 10:19 - 00000000 ____D C:\Users\ms\Downloads\DJI_WIN_Driver_Installer
2016-12-10 10:18 - 2016-12-10 10:18 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-10 10:18 - 2016-12-10 10:18 - 00001178 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-10 10:14 - 2016-12-10 10:18 - 00000000 ____D C:\Users\ms\Downloads\Ant Videos
2016-12-10 10:10 - 2017-01-06 01:33 - 00000000 ____D C:\Users\ms\Downloads\android apk
2016-12-10 10:09 - 2016-10-18 20:58 - 00007113 _____ C:\Users\ms\Downloads\sitemap.xml
2016-12-10 10:09 - 2016-10-05 09:25 - 00004574 _____ C:\Users\ms\Downloads\subscribers_list_0_2016.30.09.csv
2016-12-10 10:09 - 2016-08-10 18:07 - 54811422 _____ C:\Users\ms\Downloads\site-www.dr-scheuber-carvoeiro.com-20160810-185738.jpa
2016-12-10 09:56 - 2017-01-03 15:42 - 00000000 ____D C:\Users\ms\Documents\Dokumente Privat
2016-12-10 09:54 - 2017-01-07 20:50 - 00000000 ____D C:\Users\ms\Documents\Dokumente Praxis
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\Documents\dokumente knie
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Users\ms\AppData\LocalLow\Temp
2016-12-10 09:54 - 2016-12-10 09:54 - 00000000 ____D C:\Program Files\AuthenTec
2016-12-10 09:53 - 2016-12-19 10:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-10 09:53 - 2016-12-11 20:52 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Windows\QLB
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\ms\Downloads\Neuer Ordner
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-12-10 09:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\hpqLog
2016-12-10 09:53 - 2016-10-25 12:26 - 00288059 _____ C:\Users\ms\Desktop\Diploma I.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00465616 _____ C:\Users\ms\Desktop\certificado Bahrain.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00397695 _____ C:\Users\ms\Desktop\certificado Roland Klinik.pdf
2016-12-10 09:53 - 2016-10-25 12:23 - 00362311 _____ C:\Users\ms\Desktop\Diploma.pdf
2016-12-10 09:53 - 2016-08-15 09:21 - 00128468 _____ C:\Users\ms\Desktop\elke2.png
2016-12-10 09:53 - 2016-08-13 20:10 - 00019777 _____ C:\Users\ms\Desktop\elke2.eld
2016-12-10 09:53 - 2016-05-03 01:10 - 00621681 _____ C:\Users\ms\Desktop\adresse jpg.jpg
2016-12-10 09:53 - 2016-05-02 14:48 - 00725526 _____ C:\Users\ms\Desktop\briefkopf neu.bmp
2016-12-10 09:53 - 2016-05-02 14:44 - 00028857 _____ C:\Users\ms\Desktop\briefkopf neu.jpg
2016-12-10 09:53 - 2009-04-29 07:46 - 00015872 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\system32\Drivers\HpqKbFiltr.sys
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 ____R (Hewlett-Packard Company) C:\Windows\system32\BttnCmn.dll
2016-12-10 09:53 - 2008-09-08 13:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\system32\BttnCmns.dll
2016-12-10 09:53 - 2006-11-02 06:09 - 01419232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01005.dll
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med7
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\med wh
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\JP_HealthCare
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\Fotos Praxis
2016-12-10 09:52 - 2016-12-10 09:52 - 00000000 ____D C:\Users\ms\Downloads\EBAY
2016-12-10 09:52 - 2016-08-15 11:12 - 00460009 _____ C:\Users\ms\Desktop\npl zum teil ausgefuellt.pdf
2016-12-10 09:52 - 2016-08-13 18:10 - 00107041 _____ C:\Users\ms\Desktop\elke3.png
2016-12-10 09:52 - 2016-05-12 16:12 - 00003407 _____ C:\Users\ms\Desktop\IRS2015
2016-12-10 09:52 - 2015-12-26 03:08 - 00001154 _____ C:\Users\ms\Desktop\IsoBuster.lnk
2016-12-10 09:52 - 2015-11-05 22:57 - 00004781 _____ C:\Users\ms\Desktop\farmaciaservico.png
2016-12-10 09:52 - 2015-09-27 15:07 - 00040814 _____ C:\Users\ms\Desktop\map.pdf
2016-12-10 09:52 - 2014-05-15 18:47 - 00582144 _____ C:\Users\ms\Desktop\Kopie von Scheuber.xls
2016-12-10 09:52 - 2014-03-07 21:48 - 03582301 _____ (Adobe Systems, Inc.) C:\Users\ms\Desktop\lantus_dosisfinder_05_080422_KO.exe
2016-12-10 09:52 - 2011-09-21 21:16 - 01676610 _____ C:\Users\ms\Desktop\PDF-Datei Hilfe.pdf
2016-12-10 09:51 - 2016-12-11 20:43 - 00000000 ____D C:\Program Files\Analog Devices
2016-12-10 09:50 - 2016-12-10 09:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf
2016-12-10 09:49 - 2016-12-10 09:49 - 00000000 ____D C:\Program Files\Synaptics
2016-12-10 09:48 - 2016-12-10 09:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-10 09:28 - 2016-12-10 10:11 - 00000000 ____D C:\Users\ms\AppData\Local\MicrosoftEdge
2016-12-10 09:27 - 2016-12-10 09:27 - 00000000 ____D C:\Users\ms\AppData\Local\NetworkTiles
2016-12-10 09:26 - 2016-12-10 09:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-12-10 09:25 - 2016-12-18 23:38 - 00000000 ___SD C:\Users\ms\AppData\LocalLow\Microsoft
2016-12-10 09:23 - 2017-01-08 12:19 - 04405186 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-10 07:06 - 2016-12-10 07:06 - 00000000 ____D C:\Users\ms\AppData\Local\Comms
2016-12-10 07:00 - 2016-12-10 07:00 - 00002378 _____ C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-10 07:00 - 2016-12-10 07:00 - 00000000 ___RD C:\Users\ms\OneDrive
2016-12-10 06:33 - 2016-12-10 06:33 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-10 06:25 - 2016-12-10 06:25 - 00000000 ____D C:\Users\ms\AppData\Local\Publishers
2016-12-10 06:12 - 2017-01-08 12:25 - 00000000 ____D C:\Users\ms\AppData\Local\Temp
2016-12-10 06:12 - 2017-01-08 12:20 - 02883584 ____H C:\Users\ms\NTUSER.DAT
2016-12-10 06:12 - 2017-01-07 21:07 - 00000000 ____D C:\Users\ms\AppData\Roaming
2016-12-10 06:12 - 2017-01-07 20:31 - 00000000 ___RD C:\Users\ms\Downloads
2016-12-10 06:12 - 2017-01-06 18:31 - 00000000 ____D C:\Users\ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00524288 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 06:12 - 2017-01-06 18:30 - 00065536 ___SH C:\Users\ms\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 06:12 - 2017-01-06 13:39 - 00000000 ____D C:\Users\ms\AppData\Local
2016-12-10 06:12 - 2017-01-06 13:20 - 00000000 ___RD C:\Users\ms\Desktop
2016-12-10 06:12 - 2017-01-04 22:58 - 00000000 ___RD C:\Users\ms\Documents
2016-12-10 06:12 - 2017-01-02 16:58 - 00000000 ____D C:\Users\ms\AppData\Local\Microsoft
2016-12-10 06:12 - 2017-01-02 16:09 - 00000000 ___SD C:\Users\ms\AppData\Roaming\Microsoft
2016-12-10 06:12 - 2017-01-02 12:49 - 00000000 ____D C:\Users\ms\AppData\Local\VirtualStore
2016-12-10 06:12 - 2016-12-22 18:36 - 00000000 ____D C:\Users\ms\AppData\Local\Packages
2016-12-10 06:12 - 2016-12-22 16:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 06:12 - 2016-12-20 22:25 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 06:12 - 2016-12-18 21:41 - 00000000 ____D C:\Users\ms\AppData\LocalLow
2016-12-10 06:12 - 2016-12-13 22:30 - 00000000 ___RD C:\Users\ms\Pictures
2016-12-10 06:12 - 2016-12-11 23:17 - 00000000 ____D C:\Users\ms\AppData\Roaming\Adobe
2016-12-10 06:12 - 2016-12-11 22:14 - 00000402 ___SH C:\Users\ms\Documents\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000174 ___SH C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Videos
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Searches
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Saved Games
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Music
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Links
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Favorites
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\Contacts
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-10 06:12 - 2016-12-11 22:14 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-10 06:12 - 2016-12-10 09:19 - 00000000 ____D C:\Users\ms\AppData\Local\ConnectedDevicesPlatform
2016-12-10 06:12 - 2016-12-10 06:12 - 01007616 ___SH C:\Users\ms\ntuser.dat.LOG1
2016-12-10 06:12 - 2016-12-10 06:12 - 00003340 ____H C:\Users\defaultuser0\AppData\Local\IconCache.db
2016-12-10 06:12 - 2016-12-10 06:12 - 00000020 ___SH C:\Users\ms\ntuser.ini
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Vorlagen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Startmenü
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\SendTo
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Recent
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Netzwerkumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Lokale Einstellungen
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Eigene Dateien
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Druckumgebung
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Videos
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Musik
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Documents\Eigene Bilder
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Cookies
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Verlauf
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Temporary Internet Files
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\AppData\Local\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 _SHDL C:\Users\ms\Anwendungsdaten
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___SH C:\Users\ms\ntuser.dat.LOG2
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ___HD C:\Users\ms\AppData
2016-12-10 06:12 - 2016-12-10 06:12 - 00000000 ____D C:\Users\ms\AppData\Local\TileDataLayer
2016-12-10 06:12 - 2016-12-09 14:01 - 00000084 ___SH C:\Users\ms\Downloads\desktop.ini
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 06:12 - 2016-07-16 09:30 - 00000000 ____D C:\Users\ms\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 06:06 - 2017-01-05 20:45 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-10 06:03 - 2016-12-10 06:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\packages
2016-12-10 06:02 - 2016-12-10 06:02 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2016-12-10 05:59 - 2016-12-10 05:59 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2016-12-10 01:14 - 2016-12-10 01:14 - 00000000 ____D C:\Windows\CSC
2016-12-10 01:01 - 2016-12-10 01:01 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\SendTo
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Recent
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Cookies
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Temporary Internet Files
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2016-12-10 01:01 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0\AppData\LocalLow
2016-12-10 01:00 - 2017-01-06 02:18 - 00262144 ____H C:\Users\defaultuser0\NTUSER.DAT
2016-12-10 01:00 - 2016-12-10 06:12 - 00000000 ____D C:\Users\defaultuser0\AppData\Local
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ___SD C:\Users\defaultuser0\AppData\Roaming\Microsoft
2016-12-10 01:00 - 2016-12-10 06:11 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Microsoft
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 01:00 - 2016-12-10 01:14 - 00065536 ___SH C:\Users\defaultuser0\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___RD C:\Users\defaultuser0\Documents
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ___HD C:\Users\defaultuser0\AppData
2016-12-10 01:00 - 2016-12-10 01:01 - 00000000 ____D C:\Users\defaultuser0
2016-12-10 01:00 - 2016-12-10 01:00 - 00049152 ___SH C:\Users\defaultuser0\ntuser.dat.LOG1
2016-12-10 01:00 - 2016-12-10 01:00 - 00012288 ___SH C:\Users\defaultuser0\ntuser.dat.LOG2
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-10 01:00 - 2016-07-16 09:30 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Videos
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Pictures
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Music
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Links
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Favorites
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Downloads
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\defaultuser0\Desktop
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\Saved Games
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming
2016-12-10 01:00 - 2016-07-16 09:29 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Temp
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-10 00:59 - 2016-12-10 00:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-10 00:55 - 2017-01-08 12:21 - 1445953536 ___SH C:\hiberfil.sys
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-10 00:53 - 2016-12-30 11:48 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{04047a1a-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-10 00:53 - 2016-12-10 00:53 - 00047425 _____ C:\Windows\system32\license.rtf
2016-12-09 23:39 - 2016-12-09 23:39 - 00000000 ___HD C:\Program Files\Uninstall Information
2016-12-09 23:37 - 2016-12-09 23:37 - 00000000 ____D C:\ProgramData\USOShared
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00524288 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:36 - 2016-12-09 23:36 - 00065536 ___SH C:\Windows\system32\config\ELAM{1517b32c-4afc-11e6-80cd-e41d2d18dd40}.TM.blf
2016-12-09 23:24 - 2017-01-06 09:18 - 00000000 __SHD C:\Recovery
2016-12-09 23:15 - 2017-01-08 12:23 - 00067584 ____S C:\Windows\bootstat.dat
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:15 - 2016-12-09 23:15 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{04047a29-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:14 - 2017-01-08 12:22 - 00000000 ____D C:\Windows\Prefetch
2016-12-09 23:13 - 2017-01-08 12:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-09 23:10 - 2017-01-07 20:17 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-09 23:10 - 2016-12-15 09:23 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-09 23:10 - 2016-12-09 23:11 - 00000000 ____D C:\Windows\ServiceProfiles
2016-12-09 23:10 - 2016-12-09 23:10 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-09 23:09 - 2017-01-08 12:21 - 603979776 ___SH C:\pagefile.sys
2016-12-09 23:09 - 2017-01-08 12:21 - 16777216 ___SH C:\swapfile.sys
2016-12-09 23:09 - 2016-12-15 09:22 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000001.regtrans-ms
2016-12-09 23:09 - 2016-12-15 09:22 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TM.blf
2016-12-09 23:09 - 2016-12-09 23:12 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{04047a20-4b7a-11e6-80cc-a4badb2bd75b}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 23:05 - 2016-12-13 17:51 - 00000000 __SHD C:\System Volume Information
2016-12-09 23:04 - 2017-01-06 10:34 - 00000000 ____D C:\Windows\Panther

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-08 12:20 - 2016-07-16 03:22 - 00524288 _____ C:\Windows\system32\config\BBI
2017-01-08 12:19 - 2016-07-16 18:27 - 01399818 _____ C:\Windows\system32\perfh007.dat
2017-01-08 12:19 - 2016-07-16 18:27 - 00339890 _____ C:\Windows\system32\perfc007.dat
2017-01-07 21:06 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\NDF
2017-01-07 15:32 - 2015-12-11 22:34 - 00000000 ____D C:\med7net
2017-01-07 15:32 - 2015-12-11 22:32 - 00000000 ____D C:\Med7
2017-01-07 12:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\AppReadiness
2017-01-06 13:39 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\TAPI
2017-01-05 22:42 - 2016-07-16 09:28 - 00000000 ____D C:\Windows\INF
2017-01-01 01:29 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-31 12:59 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\config
2016-12-29 16:50 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\rescache
2016-12-25 16:57 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\Logs
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-24 11:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-US
2016-12-24 11:31 - 2016-07-16 09:19 - 00000000 ____D C:\Windows\CbsTemp
2016-12-24 11:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-22 18:36 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-21 14:32 - 2016-07-16 18:32 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\winrm
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\WCN
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\slmgr
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\en
2016-12-21 14:32 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\F12
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\MiracastView
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\oobe
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\MUI
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\migration
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Com
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Boot
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\IME
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Help
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\apppatch
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-21 14:32 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\Dism
2016-12-21 14:32 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\servicing
2016-12-20 22:43 - 2016-07-16 18:28 - 00000000 ____D C:\Windows\OCR
2016-12-19 10:50 - 2016-07-16 03:22 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-18 21:33 - 2016-07-16 03:22 - 00000000 ____D C:\Program Files\Common Files
2016-12-15 19:09 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-15 09:22 - 2016-07-16 09:30 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-15 09:22 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\twain_32
2016-12-13 15:21 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Media
2016-12-12 15:06 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-12 00:56 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-11 22:11 - 2016-07-16 18:27 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 __RSD C:\Windows\Fonts
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-HK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\uk-UA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\th-TH
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sl-SI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\sk-SK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\setup
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ro-RO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pt-BR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\nb-NO
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\hr-HR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\he-IL
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fr-CA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\ar-SA
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\Provisioning
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\bcastdvr
2016-12-11 22:11 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-11 22:10 - 2016-07-16 09:30 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-12-11 21:55 - 2016-07-16 09:30 - 00000167 _____ C:\Windows\win.ini
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-11 15:24 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-11 12:44 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-12-11 12:31 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\appcompat
2016-12-11 03:19 - 2016-07-16 03:22 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-10 17:09 - 2016-07-16 09:29 - 00000000 __SHD C:\$Recycle.Bin
2016-12-10 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-10 11:37 - 2016-07-16 09:25 - 00006656 _____ C:\Windows\system32\lpcio.dll
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default\AppData\Roaming
2016-12-10 09:53 - 2016-07-16 09:29 - 00000000 ____D C:\Users\Default User\AppData\Roaming
2016-12-10 06:12 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public
2016-12-10 06:12 - 2016-07-16 03:22 - 00000000 ___RD C:\Users
2016-12-10 01:16 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\spool
2016-12-10 01:15 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-10 01:06 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Public\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ___RD C:\Users\Default\Documents
2016-12-10 00:59 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows NT
2016-12-10 00:59 - 2016-07-16 03:22 - 00000000 __RHD C:\Users\Default
2016-12-10 00:38 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\Recovery
2016-12-09 23:37 - 2016-07-16 09:29 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-09 23:36 - 2016-07-16 03:22 - 00032768 _____ C:\Windows\system32\config\ELAM
2016-12-09 23:34 - 2016-07-16 09:29 - 00000000 ___RD C:\Windows\PrintDialog
2016-12-09 23:19 - 2016-07-16 09:29 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-09 23:04 - 2016-07-16 09:30 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-06 00:16 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.exe
2017-01-06 01:33 - 2016-12-31 06:24 - 1229808 __RSH (GlavSoft LLC.) C:\Users\ms\AppData\Roaming\assembliesbckp.Vexe
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\AtStart.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\DSwitch.txt
2016-12-10 10:59 - 2016-12-10 10:59 - 0000000 _____ () C:\Users\ms\AppData\Local\QSwitch.txt
2016-12-11 19:35 - 2016-12-11 19:35 - 0000017 _____ () C:\Users\ms\AppData\Local\resmon.resmoncfg
2017-01-02 13:32 - 2017-01-02 16:33 - 0000043 ___SH () C:\ProgramData\.zreglib
2016-12-15 19:18 - 2016-12-15 19:18 - 0000107 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Einige Dateien in TEMP:
====================
C:\Users\ms\AppData\Local\Temp\dllnt_dump.dll
C:\Users\ms\AppData\Local\Temp\libeay32.dll
C:\Users\ms\AppData\Local\Temp\msvcr120.dll
C:\Users\ms\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 11:20

==================== Ende vom FRST.txt ============================

cosinus 08.01.2017 16:25
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKLM\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> https://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> https://search.avast.com/AV772/search/web?q={searchTerms}
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


pingodoce 08.01.2017 18:16
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version: 08-01-2017
durchgeführt von ms (08-01-2017 18:12:34) Run:1
Gestartet von C:\Users\ms\Downloads
Geladene Profile: ms (Verfügbare Profile: defaultuser0 & ms)
Start-Modus: Normal

==============================================

fixlist Inhalt:
*****************
HKLM\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\05qspcpa.default -> https://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\05qspcpa.default -> Avast Search
FF Keyword.URL: Mozilla\Firefox\Profiles\05qspcpa.default -> https://search.avast.com/AV772/search/web?q={searchTerms}
emptytemp:
       
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Wert erfolgreich entfernt
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => Schlüssel erfolgreich entfernt
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden.
Firefox DefaultSearchUrl erfolgreich entfernt
Firefox SearchEngineOrder.1 erfolgreich entfernt
Firefox "Keyword.URL" erfolgreich entfernt

=========== EmptyTemp: ==========

BITS transfer queue => 1685408 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14877076 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 1545406 B
Edge => 1520635 B
Chrome => 0 B
Firefox => 88688083 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
LocalService => 1256548 B
NetworkService => 128 B
defaultuser0 => 128 B
ms => 65283894 B

RecycleBin => 0 B
EmptyTemp: => 166.8 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende vom Fixlog 18:12:58 ====

cosinus 08.01.2017 18:28
Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

pingodoce 09.01.2017 14:02
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 06.01.17
Scan-Zeit: 00:23
Protokolldatei: mbam2.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.937
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10
CPU: x86
Dateisystem: NTFS
Benutzer: DESKTOP-TGSB6RT\ms

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 307255
Abgelaufene Zeit: 1 Std., 0 Min., 5 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 1
Hijack.ShellA.Gen, HKU\S-1-5-21-1255615618-1242680333-4154777488-1001\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|SHELL, Keine Aktion durch Benutzer, [14985], [187664],1.0.937

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
RiskWare.HeuristicsReservedWordExploit, C:\USERS\MS\APPDATA\LOCAL\TEMP\SVHOST.EXE, Keine Aktion durch Benutzer, [17439], [245923],1.0.937
Trojan.BitCoinMiner.MSIL, C:\USERS\MS\APPDATA\LOCAL\TEMP\KEYGEN.EXE, Keine Aktion durch Benutzer, [965], [256060],1.0.937

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 09.01.2017 14:21
Bitte Anleitung richtig lesen. Da steht was von "Funde entfernen"

pingodoce 09.01.2017 15:13
Code:
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 1/9/17
Scan Time: 2:36 PM
Logfile: malwarbyte.txt
Administrator: Yes

-Software Information-
Version: 3.0.0
Components Version: 1.0.39
Update Package Version: 1.0.958
License: Free

-System Information-
OS: Windows 10
CPU: x86
File System: NTFS
User: DESKTOP-TGSB6RT\ms

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 307426
Time Elapsed: 7 min, 30 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)


(end)

cosinus 09.01.2017 22:42
Was ist mit den anderen beiden Logs?

pingodoce 13.01.2017 02:39
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=827a260b04faf048b2f71b61ac07e0e6
# end=init
# utc_time=2017-01-12 04:04:29
# local_time=2017-01-12 05:04:29 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 32042
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=827a260b04faf048b2f71b61ac07e0e6
# end=updated
# utc_time=2017-01-12 04:10:58
# local_time=2017-01-12 05:10:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=827a260b04faf048b2f71b61ac07e0e6
# engine=32042
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-01-12 05:55:58
# local_time=2017-01-12 06:55:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 7813 15586196 0 0
# scanned=192796
# found=0
# cleaned=0
# scan_time=6299
Code:
Results of screen317's Security Check version 1.009 
  x86 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 CCleaner   
 Java 8 Update 111 
 Java version 32-bit out of Date!
 Adobe Flash Player        24.0.0.186 
 Mozilla Firefox (50.1.0)
````````Process Check: objlist.exe by Laurent```````` 
 Windows Defender MSMpEng.exe
 Windows Defender MSASCui.exe
 Malwarebytes Anti-Malware mbamservice.exe 
 Windows Defender MpCmdRun.exe 
 Windows Defender MSASCuiL.exe 
 Windows Defender MSASCui.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:: 
````````````````````End of Log``````````````````````
was kann man denn alternativ als antivirus software nehmen ? oder reicht der defender aus.
sorry für die späten post der anderen logs..

cosinus 13.01.2017 09:24
Security Check fehlt. Infos zu AVP gibt es im Abschlussposting.

pingodoce 13.01.2017 12:49
Code:
Results of screen317's Security Check version 1.009 
  x86 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 CCleaner   
 Java 8 Update 111 
 Java version 32-bit out of Date!
 Adobe Flash Player        24.0.0.186 
 Mozilla Firefox (50.1.0)
````````Process Check: objlist.exe by Laurent```````` 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:: 
````````````````````End of Log``````````````````````

cosinus 13.01.2017 13:11
Dann wären wir durch! :daumenhoc

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:


Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen - sofern benötigt, wenn nicht benötigt natürlich sinnigerweise deinstallieren oder Alternativen verwenden (und diese aktuell halten).
  • Browser (Internet Explorer, Edge, Firefox, Chrome, ...)
  • Java (bitte wirklich nur installieren/installiert lassen wenn unbedingt nötig!)
  • Flash-Player (nach Möglichkeit deinstallieren und HTML5 verwenden siehe zB https://www.youtube.com/html5 )
  • PDF-Reader (nach Möglichkeit nicht den Adobe Reader verwenden)

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.


Schutzsoftware: Vorab sei erwähnt, dass man niemals die Schutzwirkung eines Virenscanners überbewerten darf! Die Dinger sind mittlerweile auch unter Windows stark umstritten und können Probleme bereiten, die man so ohne AV einfach nicht haben wird. Zudem werden sie auch niemals jeden Schädling finden können. Aussagen der Anbieter dieser Software entpuppen sich regelmäßig als Marketinggeblubber. Lies mal => Aus aktuellem Anlass: Antivirus-Schlangenöl | Elias Schwerdtfeger und Antivirensoftware: Die Schlangenöl-Branche - Golem.de

Verwende also MAXIMAL ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen.

Optional:

http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch

http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

pingodoce 16.01.2017 00:55
Vielen Dank noch einmal für die kompetente Hilfe bei meinem Problem .. Alles sauber und schnell.. Danke:taenzer:


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:31 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131