Hallo Schrauber,
bin leicht frustriert. Die automatische Reparatur funktioniert leider nicht.
PC auffrischen: Fehlermeldung -> Probleme beim aktualisieren. Es wurden keine Änderungen vorgenommen.
Systemwiederherstellung: Fehlermeldung -> Lokaler Datenträger C: Sie müssen für dieses Laufwerk Computerschutz aktivieren.
Aus lauter Verzweiflung habe ich heute die CD DE-Cleaner Rettungssystem aus 2012 versucht. Aktualisierung der Datenbank wurde verweigert. Ich habe dann auf den Stand von 2012 gescannt und war verblüfft. Hier nur ein Auszug, weil Datei zu groß.

Avira / Linux Version 1.9.150.0
Copyright (c) 2010 by Avira GmbH
All rights reserved.

WARNING: [This key has expired] Initialization
engine set:         8.2.4.242
VDF Version:        7.11.8.98 

key file:           /AntiVir/rescue_cd.key
registered user:    DE-Cleaner Rettungssystem
serial number:      2213856893
key expires:        Mär 31 2012
update service:     unavailable!

Scan start time: Mo 16 Feb 2015 11:03:29 UTC
Command line: /AntiVir/scancl --allfiles --defaultaction=clean,rename --withtype=dial,spr,adspy,bdc,heur-dblext,pck --log=/tmp/rescue-system_scan_20150216-1103.log --logformat=singleline --quarantine=/tmp/quarantine --heurlevel=2 --nolinks -z --archivemaxsize=2602MB /media 

auto excluding /sys from scanning (is a special fs)
auto excluding /proc from scanning (is a special fs)
configuration file: /AntiVir/scancl.conf
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/Microsoft Shared/Ink/micaut.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadox.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msjro.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Windows Defender/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/XAudio2_8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/mfdvdec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..d-searchintegration_31bf3856ad364e35_6.3.9600.17415_none_811756d5977fe2fd/IMESEARCHPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/IMEPADSM.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs404.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs411.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs804.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-directshow-asf_31bf3856ad364e35_6.3.9600.17415_none_161d250f06a8a6d4/qasf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-displayswitch_31bf3856ad364e35_6.3.9600.17415_none_e82156322c99a971/DisplaySwitch.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17415_none_5f733065cb885d62/eappgnui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-ehome-tvratings_31bf3856ad364e35_6.3.9600.17415_none_1ef232dee221adb0/tvratings.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-fax-common_31bf3856ad364e35_6.3.9600.17415_none_0764542258bebc92/FXSCOMEX.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-fax-mapi_31bf3856ad364e35_6.3.9600.17415_none_4affa9b48005d622/FXSEXT32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
   ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-commonpal_31bf3856ad364e35_6.3.9600.17415_none_8ac33df9f6359d3f/ProximityCommonPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-common_31bf3856ad364e35_6.3.9600.17415_none_b90b112f5f123bd8/ProximityCommon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-rtapipal_31bf3856ad364e35_6.3.9600.17415_none_c348997356d3f23e/ProximityRtapiPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/g711codc.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/tapi3.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapicore_31bf3856ad364e35_6.3.9600.17415_none_df997dc34eb4cf4e/tapiperf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/VBICodec.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/WSTPager.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-video-tvvideocontrol_31bf3856ad364e35_6.3.9600.17415_none_ea0fef988b373dc7/MSVidCtl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.17415_none_664a77d902ccd130/vds_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17415_none_d046838989dfe045/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17467_none_d01274818a069ea8/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisdecd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
   ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.3.9600.17415_none_6b06644b95924abb/IMEDICAPICCPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-cacpad_31bf3856ad364e35_6.3.9600.17415_none_056e049f9dcd597f/imkrcac.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-migration_31bf3856ad364e35_6.3.9600.17415_none_bd5c810fbf7bc997/imkrmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-padresource_31bf3856ad364e35_6.3.9600.17415_none_d7b77cf0a4e91448/padrs412.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-skfpad_31bf3856ad364e35_6.3.9600.17415_none_e175c59c77fa076c/imkrskf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..simple-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_547d7f35e052ae6f/msdaosp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/oeimport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/WinMail.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-media-mp3acm_31bf3856ad364e35_6.3.9600.17415_none_00c18a254406a5d4/l3codecp.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpps_31bf3856ad364e35_6.3.9600.17415_none_4376af3b575d4893/wmpps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-n..iagnosticsframework_31bf3856ad364e35_6.3.9600.17415_none_714721adfc2a38c2/ndfetw.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..ponents-mdac-sqlxml_31bf3856ad364e35_6.3.9600.17415_none_ae5f9cb388dff938/sqlxmlx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntlanui2_31bf3856ad364e35_6.3.9600.17415_none_cb11b3a7f9d286d9/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-p..ellextensionhandler_31bf3856ad364e35_6.3.9600.17415_none_908ce85aadbead14/XPSSHHDR.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-panmap_31bf3856ad364e35_6.3.9600.17415_none_fe48b39f3a852b67/panmap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-peertopeeradmin_31bf3856ad364e35_6.3.9600.17415_none_dc35c99eeb475272/p2pnetsh.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_9e2c4d65e2c1ef06/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
         

ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadco.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadds.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msdaprst.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/Ole DB/msdatt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
Avira / Linux Version 1.9.150.0
Copyright (c) 2010 by Avira GmbH
All rights reserved.

WARNING: [This key has expired] Initialization
engine set: 8.2.4.242
VDF Version: 7.11.8.98

key file: /AntiVir/rescue_cd.key
registered user: DE-Cleaner Rettungssystem
serial number: 2213856893
key expires: Mär 31 2012
update service: unavailable!



Scan start time: Mo 16 Feb 2015 11:03:29 UTC
Command line: /AntiVir/scancl --allfiles --defaultaction=clean,rename --withtype=dial,spr,adspy,bdc,heur-dblext,pck --log=/tmp/rescue-system_scan_20150216-1103.log --logformat=singleline --quarantine=/tmp/quarantine --heurlevel=2 --nolinks -z --archivemaxsize=2602MB /media

auto excluding /sys from scanning (is a special fs)
auto excluding /proc from scanning (is a special fs)
configuration file: /AntiVir/scancl.conf
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/Microsoft Shared/Ink/micaut.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadox.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msjro.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/msadc/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/msadc/msadco.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/Microsoft.NET/Framework/sbs_microsoft.jscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/Microsoft.NET/Framework/sbs_mscordbi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/intl.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/iprtprio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/umdmxfrm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AdvancedInstallers/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AdvancedInstallers/cmiv2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/amstream.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/appmgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AuditNativeSnapIn.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AuthFWGP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/avicap32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/colorui.dll <<< Is the ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/cmcfg32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dot3hc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dplaysvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dplayx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpmodemx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
/SysWOW64/dxmasf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/IME/IMEJP/IMJPPRED.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/IME/IMEJP/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/msdxm.ocx <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/npmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/ntasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-n..ty-assistant-client_31bf3856ad364e35_6.3.9600.17415_none_0ba9b734590de510/NcaApi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-narrator_31bf3856ad364e35_6.3.9600.17415_none_b97d7e29abd72d30/Narrator.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-networkprofile_31bf3856ad364e35_6.3.9600.17415_none_73faf6937e43fccc/nlmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-networkprofile_31bf3856ad364e35_6.3.9600.17415_none_73faf6937e43fccc/npmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-mfdvdec_31bf3856ad364e35_6.3.9600.17415_none_0411a0754fea29c4/mfdvdec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-p..ntalcontrolsservice_31bf3856ad364e35_6.3.9600.17415_none_b3ac3252aa5a5b6b/wpcsvc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.3.9600.17415_none_97696364a9122507/sysmon.ocx <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.3.9600.17415_none_97696364a9122507/wvc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.3.9600.17415_none_0f363fab279eeda4/dmocx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-commonpal_31bf3856ad364e35_6.3.9600.17415_none_8ac33df9f6359d3f/ProximityCommonPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-common_31bf3856ad364e35_6.3.9600.17415_none_b90b112f5f123bd8/ProximityCommon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-rtapipal_31bf3856ad364e35_6.3.9600.17415_none_c348997356d3f23e/ProximityRtapiPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17415_none_09400d1a828d7a10/rascfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17415_none_09400d1a828d7a10/rasmxs.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17484_none_08f35d5c82c72450/rascfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17484_none_08f35d5c82c72450/rasmxs.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.3.9600.17415_none_5a7fe4aa68a3c1e6/cmcfg32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.3.9600.17415_none_a708de906feb1606/iprtprio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-regctrl_31bf3856ad364e35_6.3.9600.17415_none_0bc16e6b88555956/RegCtrl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.3.9600.17415_none_ef8e5a9de3f6db8e/clb.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.3.9600.17415_none_32b7bc650a04033e/racpldlg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.3.9600.17415_none_05e17c5d2c61bacd/wshext.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scanprofiles_31bf3856ad364e35_6.3.9600.17415_none_42c6d9925b401d44/scansetting.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scanprofiles_31bf3856ad364e35_6.3.9600.17415_none_42c6d9925b401d44/wiascanprofiles.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/dispex.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/scrobj.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/wscript.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/wshcon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17238_none_4c39062452bd4a6f/delegatorprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17238_none_4c39062452bd4a6f/storagewmi_passthru.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17415_none_4c4ba8ea52afc0d6/delegatorprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17415_none_4c4ba8ea52afc0d6/storagewmi_passthru.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-streambufferengine_31bf3856ad364e35_6.3.9600.17415_none_2deb5e6ab98ad4f1/sbeio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17415_none_cc1f1314c7680b8c/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.3.9600.17415_none_6c3031069fd50051/syssetup.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.3.9600.17090_none_41e3ecb6bba29f59/srclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.3.9600.17415_none_423f7520bb5d3320/srclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-t..lservices-workspace_31bf3856ad364e35_6.3.9600.17415_none_cc4ea5a3623cff49/TSWorkspace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-t..s-sessionenvservice_31bf3856ad364e35_6.3.9600.17415_none_da3dfac6efc53db4/rdvvmtransport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/g711codc.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/tapi3.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapicore_31bf3856ad364e35_6.3.9600.17415_none_df997dc34eb4cf4e/tapiperf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapisetup_31bf3856ad364e35_6.3.9600.17415_none_6552cffca3483ad8/TapiSysprep.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..d-manager-psfactory_31bf3856ad364e35_6.3.9600.17415_none_6b29e085a4926e77/VscMgrPS.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/cca.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/VBICodec.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/WSTPager.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-video-tvvideocontrol_31bf3856ad364e35_6.3.9600.17415_none_ea0fef988b373dc7/MSVidCtl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.17415_none_664a77d902ccd130/vds_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17415_none_d046838989dfe045/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17467_none_d01274818a069ea8/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/Mpeg2Data.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/MSDvbNP.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/MSNP.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisdecd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisrndr.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..eakerstemmer-korean_31bf3856ad364e35_7.0.9600.17415_none_b6d73288a53c184b/korwbrkr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.3.9600.17415_none_ffe4a7a6ff793060/winsockhc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17238_none_32c9e58909305059/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17238_none_32c9e58909305059/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17415_none_32dc884f0922c6c0/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17415_none_32dc884f0922c6c0/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17489_none_3294da030957efb3/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17489_none_3294da030957efb3/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.9.9600.17489_none_dc9f9a43af0f21af/wuwebv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.3.9600.17415_none_2df3e04abb7190fe/wiatrace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.9.9600.17415_none_dce7488faed9f8bc/wuwebv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-wordpad_31bf3856ad364e35_6.3.9600.17415_none_291a1e6c7503b9b8/WordpadFilter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_networking-mpssvc_31bf3856ad364e35_6.3.9600.17415_none_05d92c12c148d771/WfHC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_srpuxnativesnapin_31bf3856ad364e35_6.3.9600.17415_none_e3e2bb450a0a57de/SrpUxNativeSnapIn.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17079_none_c0c8e20f5f17e14f/MpClient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17079_none_c0c8e20f5f17e14f/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17347_none_c0e756f15f015243/MpClient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17347_none_c0e756f15f015243/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_devicepairingproxy_31bf3856ad364e35_6.3.9600.17415_none_c55a71773132c587/DevicePairingProxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_fdwnet_31bf3856ad364e35_6.3.9600.17415_none_d0150c888f71bca9/fdWNet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-a..c-performance-layer_31bf3856ad364e35_6.3.9600.17415_none_a523710bba6f4205/dmscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_fdssdp_31bf3856ad364e35_6.3.9600.17415_none_cfca51fa8f9e6327/fdSSDP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-hyper-v-g..aller-win6x-package_31bf3856ad364e35_6.3.9600.16384_none_6903587fe444ef1b/Windows6.2-HyperVIntegrationServices-x86.cab --> x86_microsoft-hyper-v-integration-services_31bf3856ad364e35_6.3.9600.16385_none_366657450c182ac2\vmictimeprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [archive scan abort]
[renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-hyper-v-g..aller-win6x-package_31bf3856ad364e35_6.3.9600.16384_none_6903587fe444ef1b/Windows6.x-HyperVIntegrationServices-x86.cab --> x86_wvmic.inf_31bf3856ad364e35_6.3.9600.16385_none_968283a5680527fe\vmictimeprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [archive scan abort]
[renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-acledit_31bf3856ad364e35_6.3.9600.17415_none_fccddfab77f1f80c/acledit.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-acmcorecodecs_31bf3856ad364e35_6.3.9600.17415_none_b5c13af2152862c8/msadp32.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-acmcorecodecs_31bf3856ad364e35_6.3.9600.17415_none_b5c13af2152862c8/msg711.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.3.9600.17415_none_dae07b54ab02d120/dswave.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mcicda.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mciseq.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mciwave.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.3.9600.17415_none_21ea27672befe36c/msacm32.drv <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-authorizationmanagerui_31bf3856ad364e35_6.3.9600.17415_none_b6c656001b057afc/azroleui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-btpanui_31bf3856ad364e35_6.3.9600.17415_none_017c1588126b7149/btpanui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-bwcontexthandler_31bf3856ad364e35_6.3.9600.17415_none_73e277349e5b96f8/BWContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-c..gureexpandedstorage_31bf3856ad364e35_6.3.9600.17415_none_3160fa8c94d1ca5c/ConfigureExpandedStorage.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cfmifs_31bf3856ad364e35_6.3.9600.17415_none_850d34717464fa78/cfmifsproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cmi_31bf3856ad364e35_6.3.9600.16384_none_3e6e0ecf762473d7/cmiv2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cmiadapter_31bf3856ad364e35_6.3.9600.16384_none_52b4fe842cccb496/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-console_31bf3856ad364e35_6.3.9600.17415_none_2b45b9c4c7d701a9/console.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-content-filter-office_31bf3856ad364e35_7.0.9600.17415_none_3710b3d4feaedfe5/offfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cpfilters_31bf3856ad364e35_6.3.9600.17415_none_cc5750ebf98e5150/CPFilters.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-charcodedictionary_31bf3856ad364e35_6.3.9600.17415_none_be4d2e451414d65d/IMJPCD.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.3.9600.17415_none_a352a625a146deac/imjpmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.3.9600.17415_none_2b73bcc2710b6220/IMEAPIS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-lmprofile_31bf3856ad364e35_6.3.9600.17105_none_dd5756ef722dd77a/IMJPLMP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-lmprofile_31bf3856ad364e35_6.3.9600.17415_none_dd4c8cb57235eae0/IMJPLMP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-nameinput_31bf3856ad364e35_6.3.9600.17415_none_e84a9e115c8a2211/IMJPCMLD.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.3.9600.17415_none_821d9e488d7aab82/IMJPDCTP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..anese-softkeyapplet_31bf3856ad364e35_6.3.9600.17415_none_0658d6dbdd903f47/imjpskey.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_6.3.9600.17415_none_3c50128a41c63c77/IMEFILES.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_6.3.9600.17415_none_1bfd7bb0f8338a5b/IMELM.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..characterlistapplet_31bf3856ad364e35_6.3.9600.17415_none_165f3d6a8735b3e7/IMJPCLST.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ctx-directinput-cpl_31bf3856ad364e35_6.3.9600.17415_none_266c583a4a8970db/joy.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dplaysvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dplayx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dpmodemx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dpwsockx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnlobby.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnsvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.3.9600.17415_none_d2aeaf50b8e377ca/IMJKAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..e-handwritingapplet_31bf3856ad364e35_6.3.9600.17415_none_a3953d9e0b999b79/IMJPCAC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..hared-versiondialog_31bf3856ad364e35_6.3.9600.17415_none_9f7baf1b5567f5aa/imever.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.3.9600.17415_none_27ad803a858bbbc9/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-customizer_31bf3856ad364e35_6.3.9600.17415_none_f7d57eb572607d7d/imjpcus.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-prediction_31bf3856ad364e35_6.3.9600.17415_none_144ed86c6198d6f9/IMJPPRED.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..lekanjifinderapplet_31bf3856ad364e35_6.3.9600.17415_none_77a00128642f25bb/IMJPSKF.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..me-japanese-dictapi_31bf3856ad364e35_6.3.9600.17415_none_6147a09330d203fa/IMJPDAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..njifinderdictionary_31bf3856ad364e35_6.3.9600.17415_none_db031faed131aee3/IMJPKDIC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/iyuv_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/msyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/tsbyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfmps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..oragecontexthandler_31bf3856ad364e35_6.3.9600.17415_none_5b7f350e4a9bccc6/StorageContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.3.9600.17415_none_7cedfbbfb2ac4657/ksuser.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..txvideoacceleration_31bf3856ad364e35_6.3.9600.17415_none_00c111f15d92f1de/dxva2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-data-pdf_31bf3856ad364e35_6.3.9600.17054_none_8b14dab8af3047a0/Windows.Data.Pdf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-data-pdf_31bf3856ad364e35_6.3.9600.17415_none_8b41224aaf0ee5cf/Windows.Data.Pdf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deskadp_31bf3856ad364e35_6.3.9600.17415_none_449830e399e9e074/deskadp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deskmon_31bf3856ad364e35_6.3.9600.17415_none_43c02b679a722165/deskmon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingfolder_31bf3856ad364e35_6.3.9600.17415_none_e11e9a9843074ad4/DevicePairingFolder.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicesetupui_31bf3856ad364e35_6.3.9600.17415_none_0a5efa7385e4337d/Dsui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/adprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/capiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/cngprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/wincredprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.3.9600.17415_none_e90e8a34ef389522/qdvd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicecenter_31bf3856ad364e35_6.3.9600.17415_none_3d5115311a6e8281/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17415_none_02ef9fb11e7054fa/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17481_none_029fef151eacb335/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.3.9600.17415_none_7f36c26655490681/DeviceProperties.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deviceuxres_31bf3856ad364e35_6.3.9600.17415_none_b55b0bbce9576733/DeviceUxRes.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dfsui_31bf3856ad364e35_6.3.9600.17415_none_eeac620a1862de51/DfsShlEx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-difxapi_31bf3856ad364e35_6.3.9600.17415_none_9d2ffcf1b1921e23/difxapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-capture_31bf3856ad364e35_6.3.9600.16384_none_4d78e7ba3b244b5d/qcap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-devenum_31bf3856ad364e35_6.3.9600.17415_none_ee2a0b6f5b4b731f/devenum.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dmo_31bf3856ad364e35_6.3.9600.17415_none_af82a0b11a091615/msdmo.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dv_31bf3856ad364e35_6.3.9600.17415_none_91c325a63b8286a9/qdv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.3.9600.17415_none_4afb8a00bda52bca/mpg2splt.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.3.9600.17415_none_a23de75cfc1a91d9/amstream.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.3.9600.17415_none_a23de75cfc1a91d9/mciqtz32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-vfw-capture_31bf3856ad364e35_6.3.9600.17415_none_6b6a8627425004ad/vfwwdm32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.3.9600.16384_none_f7cfbe6c52e952c4/sbs_mscordbi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.3.9600.16384_none_e1f0b5a502b18fd9/sbscmp20_perfcounter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/dinput.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/dinput8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/pid.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-xaudio2_8_31bf3856ad364e35_6.3.9600.17415_none_db6e9d21588acfad/XAudio2_8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-diskcopy_31bf3856ad364e35_6.3.9600.17415_none_fc9d6413b2148894/diskcopy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-diskmanagement_31bf3856ad364e35_6.3.9600.17415_none_9684151a8b1d4126/dmintf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-docprop_31bf3856ad364e35_6.3.9600.17415_none_2e85dadb717b7381/docprop.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dot3gpui_31bf3856ad364e35_6.3.9600.17415_none_2a73fc6cb02642cf/dot3gpui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dot3helperclass_31bf3856ad364e35_6.3.9600.17415_none_1407cd8c61dadb82/dot3hc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dssec_31bf3856ad364e35_6.3.9600.17415_none_ef5236e617e7d464/dssec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-xinput_31bf3856ad364e35_6.3.9600.17415_none_c7e4258d5952896c/XInput9_1_0.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-enhancedstorage-api_31bf3856ad364e35_6.3.9600.17415_none_6a1b2e4d2b267af4/EhStorAPI.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-es-configurepassword_31bf3856ad364e35_6.3.9600.17415_none_7ce6ae220c384492/EhStorPwdMgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-eventviewer_31bf3856ad364e35_6.3.9600.17415_none_02d77ffab77a9474/els.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..nese-eacommonapijpn_31bf3856ad364e35_6.3.9600.17415_none_26e00a97eb83d11f/IMJPAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.3.9600.17415_none_74a1f1a06c1e56a5/frprov.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.3.9600.17415_none_74a1f1a06c1e56a5/ustprov.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/adrclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmshell.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmstormod.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmtrace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srm_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..licy-admin-scrptadm_31bf3856ad364e35_6.3.9600.17415_none_6655ef22803181f8/scrptadm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.3.9600.17415_none_86a86a73d52f755d/AdmTmpl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..policy-admin-appmgr_31bf3856ad364e35_6.3.9600.17415_none_8fa5bb64d159776b/appmgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-gameuxmig_31bf3856ad364e35_6.3.9600.17415_none_bb04ab042deaf78e/gameuxmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-gdi-painting_31bf3856ad364e35_6.3.9600.17415_none_0c58377e376c1387/mf3216.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.3.9600.17415_none_cc3c2bedaa66d1dc/gptext.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.3.9600.17415_none_fa0397e58b0c44b3/gpscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-healthcenter_31bf3856ad364e35_6.3.9600.17238_none_4036ded07f42070c/ActionCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-healthcenter_31bf3856ad364e35_6.3.9600.17415_none_404981967f347d73/ActionCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.3.9600.17415_none_8b904c772f1a3ee5/itircl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.3.9600.17415_none_8b904c772f1a3ee5/itss.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17416_none_955b38163e0f319f/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17498_none_95630cd63e082f99/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17631_none_95480aba3e1d1c0a/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-help-clientproxy_31bf3856ad364e35_6.3.9600.17415_none_5a3663f82f14ad07/HelpPaneProxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCCAC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCDIC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCSKF.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ice-transliteration_31bf3856ad364e35_6.3.9600.17415_none_ed995eb3422dc9bf/elsTrans.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..escriptdetectiondll_31bf3856ad364e35_6.3.9600.17415_none_b7d80e4ab2ef1f80/elslad.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..l-chinese-migration_31bf3856ad364e35_6.3.9600.17415_none_0ff9341c1075b300/imtcmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..nal-nlsdownleveldll_31bf3856ad364e35_6.3.9600.17415_none_9d9562bf73632740/Nlsdl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..odepage-57002-57011_31bf3856ad364e35_6.3.9600.17415_none_ce57f849f3b34ebb/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..odepage-iso2022core_31bf3856ad364e35_6.3.9600.17415_none_f51660738ba6b684/C_IS2022.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..onal-codepage-54936_31bf3856ad364e35_6.3.9600.17415_none_6fe7a5b95b0f6b65/C_G18030.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17416_none_5d5c10fac37028d1/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17498_none_5d63e5bac36926cb/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17631_none_5d48e39ec37e133c/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-icsigd_31bf3856ad364e35_6.3.9600.17415_none_cf57f46dbc6c2d23/icsigd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17498_none_717df5977a917477/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17631_none_7162f37b7aa660e8/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17416_none_e339d5bd6a7c1bd7/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17498_none_e341aa7d6a7519d1/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17631_none_e326a8616a8a0642/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17416_none_59be358fa20a052b/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17498_none_59c60a4fa2030325/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17631_none_59ab0833a217ef96/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17416_none_717620d77a98767d/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.0.9600.17416_none_30d507b5bbc6b4e5/F12Tools.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-imagingengine_31bf3856ad364e35_6.3.9600.17415_none_c0d55b40497b05aa/ImagingEngine.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.3.9600.17415_none_6b06644b95924abb/IMEDICAPICCPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-cacpad_31bf3856ad364e35_6.3.9600.17415_none_056e049f9dcd597f/imkrcac.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-migration_31bf3856ad364e35_6.3.9600.17415_none_bd5c810fbf7bc997/imkrmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-padresource_31bf3856ad364e35_6.3.9600.17415_none_d7b77cf0a4e91448/padrs412.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-skfpad_31bf3856ad364e35_6.3.9600.17415_none_e175c59c77fa076c/imkrskf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-tools_31bf3856ad364e35_6.3.9600.17415_none_98e7d099991da57a/imkrudt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo4-codecs_31bf3856ad364e35_6.3.9600.17415_none_d0ba7dec72b49b4b/ir41_qc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo4-codecs_31bf3856ad364e35_6.3.9600.17415_none_d0ba7dec72b49b4b/ir41_qcx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo5-codecs_31bf3856ad364e35_6.3.9600.17415_none_b9ece2b48c5be9ea/ir50_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-setup_31bf3856ad364e35_11.0.9600.17416_none_40d42493726e0aee/inseng.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-commonapi_31bf3856ad364e35_6.3.9600.17415_none_6e83c2c36690cf52/imkrapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-international-els-core_31bf3856ad364e35_6.3.9600.17415_none_1d035c974fe7dae3/ELSCore.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-languagesdb_31bf3856ad364e35_6.3.9600.17415_none_05a7293d2f70b435/UserLanguageProfileCallback.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-luainstaller_31bf3856ad364e35_6.3.9600.17415_none_ada2d0d983ab52c2/luainstall.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-legacyhwui_31bf3856ad364e35_6.3.9600.17415_none_776081c663a0eb14/hdwwiz.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..-mdac-rds-shape-dll_31bf3856ad364e35_6.3.9600.17415_none_64fbce61d87e94c9/msadds.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..-temptable-provider_31bf3856ad364e35_6.3.9600.17415_none_b2e9d7ccd8819122/msdatt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..dac-rds-persist-dll_31bf3856ad364e35_6.3.9600.17415_none_29998b1b42b5a066/msdaprst.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..drivercompatibility_31bf3856ad364e35_6.3.9600.17415_none_80c4bc7402ac3df7/MirrorDrvCompat.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..ac-sql-cliconfg-dll_31bf3856ad364e35_6.3.9600.17415_none_ff6bb76775b659fc/cliconfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..b-odbc-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_b89ba2e32c82b9bd/msdasql.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..factory-handler-dll_31bf3856ad364e35_6.3.9600.17415_none_0047a4f8d6ff6fe7/msdfmap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..mdac-sql-netlibs-np_31bf3856ad364e35_6.3.9600.17415_none_83c84e6895d7f478/dbnmpntw.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..nents-mdac-ado15-rh_31bf3856ad364e35_6.3.9600.17415_none_c8c2733369f76f7a/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.3.9600.17415_none_f6dd53f65d1f317c/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..oracle-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_280f5aafae9d5a25/msdaora.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..server-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_f9e5952ca15938ce/sqloledb.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..simple-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_547d7f35e052ae6f/msdaosp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/oeimport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/WinMail.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-media-mp3acm_31bf3856ad364e35_6.3.9600.17415_none_00c18a254406a5d4/l3codecp.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpps_31bf3856ad364e35_6.3.9600.17415_none_4376af3b575d4893/wmpps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpshell_31bf3856ad364e35_6.3.9600.17415_none_a0b3b91b60aed27a/wmpshell.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..remote-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_3d10651cbad4d376/msdarem.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-msasn1_31bf3856ad364e35_6.3.9600.17415_none_5c46752dc0c164f1/msasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-msidle_31bf3856ad364e35_6.3.9600.17415_none_606e3c3dbe06e810/msidle.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-networkprovisioning_31bf3856ad364e35_6.3.9600.17415_none_623e608ed5a11f35/xmlprovi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntasn1-dll_31bf3856ad364e35_6.3.9600.17415_none_4f204f69e034bc88/ntasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntfstransactionapi_31bf3856ad364e35_6.3.9600.17415_none_6dc54772dc9aa78b/txfw32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntlanui2_31bf3856ad364e35_6.3.9600.17415_none_cb11b3a7f9d286d9/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17631_none_2986fb37d16e617f/iesysprep.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.3.9600.17415_none_135ce4dd72111d59/SCardDlg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17086_none_cbd45c52c79ff3de/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17221_none_cc103e34c773c7d3/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_windows-media-speechsynthesis-winrt_31bf3856ad364e35_6.3.9600.17415_none_148a01188942cbc3/Windows.Media.SpeechSynthesis.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/SysWOW64/C_IS2022.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/SysWOW64/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_networking-mpssvc-admin_31bf3856ad364e35_6.3.9600.17415_none_3a3e8d569d2ef7d0/AuthFWGP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_windows-media-speechsynthesis-winrt_31bf3856ad364e35_6.3.9600.17415_none_148a01188942cbc3/Windows.Media.SpeechSynthesis.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]


Statistics :
Directories............... : 50011
Archives.................. : 497
Files..................... : 355269
Infected.............. : 1849
Renamed........... : 1849
Warnings.............. : 1
Suspicious............ : 1
Ignored........... : 1
Infections................ : 1850
Time...................... : 00:25:39

NT/Accessories/WordpadFilter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp20_mscorwks.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp20_perfcounter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbs_diasymreader.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbs_microsoft.jscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
_ ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnlobby.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnsvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.3.9600.17415_none_d2aeaf50b8e377ca/IMJKAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..e-handwritingapplet_31bf3856ad364e35_6.3.9600.17415_none_a3953d9e0b999b79/IMJPCAC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..hared-versiondialog_31bf3856ad364e35_6.3.9600.17415_none_9f7baf1b5567f5aa/imever.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.3.9600.17415_none_27ad803a858bbbc9/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..japanese-customizer_31bf3856ad364e35_6.3.9600.17415_none_f7d57eb572607d7d/imjpcus.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..lekanjifinderapplet_31bf3856ad364e35_6.3.9600.17415_none_77a00128642f25bb/IMJPSKF.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..me-japanese-dictapi_31bf3856ad364e35_6.3.9600.17415_none_6147a09330d203fa/IMJPDAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..njifinderdictionary_31bf3856ad364e35_6.3.9600.17415_none_db031faed131aee3/IMJPKDIC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/iyuv_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/msyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/tsbyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfmps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..oragecontexthandler_31bf3856ad364e35_6.3.9600.17415_none_5b7f350e4a9bccc6/StorageContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.3.9600.17415_none_7cedfbbfb2ac4657/ksuser.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..txvideoacceleration_31bf3856ad364e35_6.3.9600.17415_none_00c111f15d92f1de/dxva2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deskadp_31bf3856ad364e35_6.3.9600.17415_none_449830e399e9e074/deskadp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deskmon_31bf3856ad364e35_6.3.9600.17415_none_43c02b679a722165/deskmon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingfolder_31bf3856ad364e35_6.3.9600.17415_none_e11e9a9843074ad4/DevicePairingFolder.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicesetupui_31bf3856ad364e35_6.3.9600.17415_none_0a5efa7385e4337d/Dsui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/adprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/capiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/cngprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/wincredprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.3.9600.17415_none_e90e8a34ef389522/qdvd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicecenter_31bf3856ad364e35_6.3.9600.17415_none_3d5115311a6e8281/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17415_none_02ef9fb11e7054fa/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17481_none_029fef151eacb335/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.3.9600.17415_none_7f36c26655490681/DeviceProperties.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deviceuxres_31bf3856ad364e35_6.3.9600.17415_none_b55b0bbce9576733/DeviceUxRes.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dfsui_31bf3856ad364e35_6.3.9600.17415_none_eeac620a1862de51/DfsShlEx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-difxapi_31bf3856ad364e35_6.3.9600.17415_none_9d2ffcf1b1921e23/difxapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-capture_31bf3856ad364e35_6.3.9600.16384_none_4d78e7ba3b244b5d/qcap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-devenum_31bf3856ad364e35_6.3.9600.17415_none_ee2a0b6f5b4b731f/devenum.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dmo_31bf3856ad364e35_6.3.9600.17415_none_af82a0b11a091615/msdmo.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dv_31bf3856ad364e35_6.3.9600.17415_none_91c325a63b8286a9/qdv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sa2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.3.9600.17415_none_4afb8a00bda52bca/mpg2splt.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-ie-setup_31bf3856ad364e35_11.0.9600.17498_none_40dbf953726708e8/inseng.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

Statistics :
Directories............... : 50011
Archives.................. : 497
Files..................... : 355269
Infected.............. : 1849
Renamed........... : 1849
Warnings.............. : 1
Suspicious............ : 1
Ignored........... : 1
Infections................ : 1850
Time...................... : 00:25:39

Was nun? So sah der gesamte Scann aus.

Viele Grüße

Entweder, du hast den Fileinfector des Jahrhunderts drauf, ohne dass ma nen konkreter name der Infektion gezeigt wird (wie ich diese Crypt.XPack.Gen Scheisse hasse.....). oder das sind alles Fehlalarme.

Mach bitte nochmal nen Scan mit FRST in der Recovery.

Hi,
hier der Scan.


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 01
Ran by SYSTEM on MININT-7DR47NT on 17-02-2015 11:41:59
Running from D:\
Platform: WIN_81 (X64) OS Language: Deutsch (Deutschland)
Boot Mode: Recovery
Attention: Could not load system hive.
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Winlogon: [Userinit] 
HKLM-x32\...\Winlogon: [Userinit]  [X]
HKLM\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION
HKLM-x32\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION
HKLM\...\InprocServer32: [Default-wbemess]  ATTENTION! ====> ZeroAccess?
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  ATTENTION! ====> ZeroAccess?
HKLM\...26dfa299cadb\InprocServer32: [Authentication UI Logon UI]  <==== ATTENTION!

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 12:45 - 2015-02-16 12:45 - 00000000 ____D () C:\.Trash-0
2015-02-13 17:14 - 2015-02-13 17:14 - 00000000 ____D () C:\Windows\System32\config\HiveBackup
2015-02-11 19:07 - 2015-02-17 11:41 - 00000000 ____D () C:\FRST
2015-02-10 20:46 - 2015-02-17 11:40 - 00000000 _____ () C:\Recovery.txt
2015-02-10 20:40 - 2015-02-13 07:47 - 00000464 _____ () C:\Windows\setupact.log
2015-02-10 20:40 - 2015-02-10 20:40 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 20:39 - 2015-02-11 15:43 - 00005232 _____ () C:\Windows\PFRO.log
2015-02-10 20:15 - 2015-02-10 20:15 - 00000000 ____D () C:\Windows\System32\appmgmt
2015-02-10 20:07 - 2015-02-10 20:07 - 00000000 ____D () C:\Windows\System32\appraiser
2015-02-10 20:04 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\System32\ApnDatabase.xml
2015-02-10 20:01 - 2015-02-10 20:01 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Zuhause\Downloads\autodetectutility.exe
2015-02-10 19:59 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2015-02-10 19:59 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2015-02-10 19:59 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2015-02-10 19:59 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2015-02-10 19:59 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2015-02-10 19:40 - 2015-02-10 19:40 - 00001171 ____N () C:\Users\Public\Desktop\CDBurnerXP.lnk
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Canneverbe Limited
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2015-02-10 19:35 - 2015-02-10 19:35 - 00001034 ____N () C:\Users\Public\Desktop\PDF-Viewer.lnk
2015-02-10 19:35 - 2015-02-10 19:35 - 00000000 ____D () C:\Program Files\Tracker Software
2015-02-10 19:33 - 2015-02-10 19:33 - 00000000 ____D () C:\Users\Zuhause\Documents\PDFXVwer
2015-02-10 19:05 - 2015-02-10 19:05 - 00002271 ____N () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Google
2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543
2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543.job
2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AppEx Networks
2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AMD
2015-02-10 18:45 - 2015-02-10 20:39 - 00065536 _____ () C:\Windows\System32\spu_storage.bin
2015-02-10 18:43 - 2015-02-10 18:43 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\library_dir
2015-02-10 18:42 - 2015-02-10 18:42 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201502101842092726.log
2015-02-10 18:42 - 2015-02-10 18:42 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-02-10 18:40 - 2015-02-10 18:41 - 00000000 ____D () C:\Program Files\AMD
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\ProgramData\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-02-10 18:31 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-02-10 18:31 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\System32\aspnet_counters.dll
2015-02-10 18:26 - 2014-12-16 12:48 - 00286376 _____ (UltraVnc) C:\Users\Zuhause\Documents\asc_fernwartung.exe
2015-02-10 18:25 - 2015-02-10 18:25 - 00001440 ____N () C:\Users\Zuhause\Desktop\asc_fernwartung - Verknüpfung.lnk
2015-02-10 18:20 - 2015-02-10 18:42 - 00000000 ____D () C:\ProgramData\AMD
2015-02-10 18:20 - 2015-02-10 18:20 - 00060817 _____ () C:\Windows\SysWOW64\CCCInstall_201502101820310764.log
2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-02-10 18:19 - 2015-02-10 19:30 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-10 18:11 - 2015-02-10 18:11 - 00003180 _____ () C:\Windows\System32\Tasks\{F1C5CEEC-A8B2-419C-8221-66C8EA772BE8}
2015-02-10 17:45 - 2015-02-10 20:08 - 00000000 ____D () C:\Windows\System32\MRT
2015-02-10 17:45 - 2015-02-10 20:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-02-10 17:43 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-02-10 17:43 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2015-02-10 17:43 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-02-10 17:43 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-02-10 17:43 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-02-10 17:43 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll
2015-02-10 17:43 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-02-10 17:43 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2015-02-10 17:43 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-02-10 17:43 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-02-10 17:43 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-02-10 17:43 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-02-10 17:43 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-02-10 17:43 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll.vir
2015-02-10 17:43 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-02-10 17:43 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll.vir
2015-02-10 17:43 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-02-10 17:43 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-02-10 17:43 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2015-02-10 17:43 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2015-02-10 17:43 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2015-02-10 17:43 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys
2015-02-10 17:43 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\agilevpn.sys
2015-02-10 17:43 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2015-02-10 17:43 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2015-02-10 17:43 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2015-02-10 17:43 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vpnike.dll
2015-02-10 17:43 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-02-10 17:43 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\System32\rasapi32.dll
2015-02-10 17:43 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2015-02-10 17:43 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-02-10 17:43 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-02-10 17:43 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll
2015-02-10 17:43 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-02-10 17:43 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys
2015-02-10 17:43 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys
2015-02-10 17:43 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rasl2tp.sys
2015-02-10 17:43 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys
2015-02-10 17:43 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp
2015-02-10 17:43 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\rasmxs.dll
2015-02-10 17:43 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\rasser.dll
2015-02-10 17:43 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\rasdiag.dll
2015-02-10 17:43 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-02-10 17:43 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll.vir
2015-02-10 17:43 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-02-10 17:43 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-02-10 17:43 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\System32\AppxAllUserStore.dll
2015-02-10 17:43 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-02-10 17:43 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\System32\rascfg.dll
2015-02-10 17:43 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveTelemetry.dll
2015-02-10 17:43 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll.vir
2015-02-10 17:43 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll
2015-02-10 17:43 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
2015-02-10 17:43 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2015-02-10 17:43 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-02-10 17:43 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\System32\QSHVHOST.DLL
2015-02-10 17:43 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\QSVRMGMT.DLL
2015-02-10 17:43 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll
2015-02-10 17:43 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2015-02-10 17:43 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2015-02-10 17:43 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll
2015-02-10 17:43 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-02-10 17:43 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-02-10 17:43 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll.vir
2015-02-10 17:43 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\WSDApi.dll
2015-02-10 17:43 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-02-10 17:43 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-02-10 17:43 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll
2015-02-10 17:43 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-02-10 17:43 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys
2015-02-10 17:43 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys
2015-02-10 17:43 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys
2015-02-10 17:43 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys
2015-02-10 17:43 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-02-10 17:43 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2015-02-10 17:43 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2015-02-10 17:43 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-02-10 17:43 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2015-02-10 17:43 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-10 17:43 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-02-10 17:43 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-10 17:43 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2015-02-10 17:43 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vhdmp.sys
2015-02-10 17:43 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-02-10 17:43 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-02-10 17:43 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-02-10 17:43 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll
2015-02-10 17:43 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-02-10 17:43 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-02-10 17:43 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-02-10 17:43 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-02-10 17:43 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-02-10 17:43 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-02-10 17:43 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\eventcls.dll
2015-02-10 17:43 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll.vir
2015-02-10 17:43 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\System32\vsstrace.dll
2015-02-10 17:43 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\System32\vssapi.dll
2015-02-10 17:43 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-02-10 17:43 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\System32\VSSVC.exe
2015-02-10 17:43 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-02-10 17:43 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-02-10 17:43 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-02-10 17:43 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll.vir
2015-02-10 17:43 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll
2015-02-10 17:43 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2015-02-10 17:43 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2015-02-10 17:43 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys
2015-02-10 17:43 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2015-02-10 17:42 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe
2015-02-10 17:42 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
2015-02-10 17:42 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsDatabase.dll
2015-02-10 17:42 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettings.Handlers.dll
2015-02-10 17:42 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlowUI.dll
2015-02-10 17:42 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll
2015-02-10 17:42 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll
2015-02-10 17:42 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-02-10 17:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwififlt.sys
2015-02-10 17:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwifimp.sys
2015-02-10 17:36 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-02-10 17:36 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2015-02-10 17:36 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-02-10 17:36 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupStatusProvider.dll
2015-02-10 17:36 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-02-10 17:36 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2015-02-10 17:36 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-10 17:35 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-02-10 17:35 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-02-10 17:35 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys
2015-02-10 17:35 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-02-10 17:35 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-10 17:35 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll
2015-02-10 17:35 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-02-10 17:35 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-02-10 17:35 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-02-10 17:35 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2015-02-10 17:35 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys
2015-02-10 17:35 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2015-02-10 17:35 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\winshfhc.dll
2015-02-10 17:35 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-02-10 17:34 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-02-10 17:34 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-02-10 17:34 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-02-10 17:34 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2015-02-10 17:34 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-02-10 17:34 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2015-02-10 17:34 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-02-10 17:34 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-10 17:34 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-02-10 17:34 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-10 17:34 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-02-10 17:34 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2015-02-10 17:34 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-02-10 17:34 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll.vir
2015-02-10 17:34 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-10 17:34 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2015-02-10 17:34 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-10 17:34 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2015-02-10 17:34 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-02-10 17:34 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-02-10 17:34 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-02-10 17:34 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-02-10 17:34 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-02-10 17:34 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-10 17:34 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-10 17:34 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-10 17:34 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-10 17:34 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-10 17:34 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-02-10 17:34 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-10 17:34 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-10 17:34 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-10 17:34 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-10 17:34 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-02-10 17:34 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-10 17:34 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-02-10 17:34 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-10 17:34 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-10 17:34 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-10 17:34 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-02-10 17:34 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe
2015-02-10 17:33 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-02-10 17:33 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll
2015-02-10 17:16 - 2015-02-10 17:22 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AviraSpeedup
2015-02-10 17:16 - 2015-02-10 17:16 - 00003364 _____ () C:\Windows\System32\Tasks\AviraSpeedup
2015-02-10 17:16 - 2015-02-10 17:16 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-02-10 17:11 - 2015-02-10 20:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1670470879-3129505335-4165064613-1001
2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\ProgramData\ESET
2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\Program Files\ESET
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieUserList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieSiteList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieBrowserModeList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Macromedia
2015-02-10 17:04 - 2015-02-10 18:29 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\VirtualStore
2015-02-10 17:04 - 2015-02-10 17:04 - 00009752 _____ () C:\Users\Zuhause\Desktop\Entfernte Anwendungen.html
2015-02-10 17:04 - 2015-02-10 17:04 - 00000020 ___SH () C:\Users\Zuhause\ntuser.ini
2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Adobe
2015-02-10 17:03 - 2015-02-10 20:37 - 01067835 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-02-10 17:01 - 2015-02-10 17:04 - 00000000 ____D () C:\users\Zuhause
2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagwrn.xml
2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagerr.xml
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Vorlagen
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Startmenü
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Netzwerkumgebung
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Lokale Einstellungen
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Eigene Dateien
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Druckumgebung
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Musik
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Bilder
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Verlauf
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Anwendungsdaten
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Anwendungsdaten
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 ____D () C:\Windows\CSC
2015-02-10 16:59 - 2015-02-10 16:59 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-02-10 16:58 - 2015-02-10 18:34 - 00000000 ___DC () C:\Windows\Panther
2015-02-10 16:58 - 2015-02-10 16:58 - 00000000 ____D () C:\Windows.old
2015-02-10 16:57 - 2015-02-10 16:57 - 00262144 _____ () C:\Windows\System32\config\userdiff
2015-02-10 16:46 - 2015-02-10 16:46 - 00000000 ____D () C:\$WINDOWS.~BT
2015-02-10 13:15 - 2015-02-10 13:15 - 00302011 _____ () C:\Users\Zuhause\Downloads\WindowsUpdateDiagnostic.diagcab
2015-02-10 11:56 - 2015-02-10 11:56 - 00000000 ___RD () C:\Users\Zuhause\OneDrive
2015-02-10 11:47 - 2015-02-10 11:47 - 01064632 _____ (Microsoft Corporation) C:\Users\Zuhause\Downloads\Setup.X86.de-DE_O365HomePremRetail_bebf202b-a52e-46f6-baef-9f4bdaac995a_TX_DB_.exe
2015-02-09 19:19 - 2015-02-09 19:19 - 37987520 ____N (Microsoft Corporation) C:\Users\Zuhause\Downloads\Windows-KB890830-x64-V5.20.exe
2015-02-09 14:20 - 2013-08-22 07:47 - 00001108 ____N () C:\Users\Zuhause\Desktop\Calculator.lnk
2015-02-09 14:18 - 2015-02-09 14:18 - 00001893 ____N () C:\Users\Zuhause\Desktop\Datensicherung starten.lnk
2015-02-09 14:18 - 2014-11-19 13:37 - 00007413 _____ () C:\Users\Zuhause\ASC_Datensicherung.cmd
2015-02-09 14:17 - 2015-02-10 17:04 - 00000000 ____D () C:\Program Files (x86)\ASC
2015-02-09 13:53 - 2015-02-09 13:53 - 00000000 ____D () C:\Program Files (x86)\gs
2015-02-09 13:44 - 2015-02-10 17:05 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-02-09 13:24 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Packages
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Programme
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-02-09 13:20 - 2015-02-10 16:58 - 00000000 __SHD () C:\Recovery

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 12:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-02-16 12:12 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers
2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-02-13 07:48 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-11 16:46 - 2013-08-22 15:44 - 00338048 _____ () C:\Windows\System32\FNTCACHE.DAT
2015-02-10 20:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-10 20:07 - 2014-11-22 08:33 - 00000000 ___SD () C:\Windows\System32\CompatTel
2015-02-10 20:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppCompat
2015-02-10 20:00 - 2014-11-22 01:06 - 01686150 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-02-10 20:00 - 2014-11-22 00:19 - 00726688 _____ () C:\Windows\System32\perfh007.dat
2015-02-10 20:00 - 2014-11-22 00:19 - 00151380 _____ () C:\Windows\System32\perfc007.dat
2015-02-10 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru
2015-02-10 19:22 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-10 18:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI
2015-02-10 18:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\setup
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-02-10 18:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows NT
2015-02-10 17:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM
2015-02-10 17:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\restore
2015-02-10 17:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-02-10 17:03 - 2013-08-22 14:36 - 00000000 __RHD () C:\users\Default
2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\Recovery
2015-02-10 16:58 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\System32\config\BCD-Template
2015-02-03 20:31 - 2014-11-22 08:40 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-11-22 08:40 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe
[2014-11-22 01:41] - [2014-11-22 01:41] - 0572416 ____A (Microsoft Corporation) EC498BAE1F0D3E0E401C963F8D76C437

C:\Windows\System32\wininit.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0145920 ____A (Microsoft Corporation) A570A64292214C43E0BA50E6A72A6380

C:\Windows\explorer.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 2501368 ____A (Microsoft Corporation) 85D47EB257B06094F052E0C8AEFA3BEE

C:\Windows\SysWOW64\explorer.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 2207488 ____A (Microsoft Corporation) 4B37A33F4F5237BF02E537F8D12D1129

C:\Windows\System32\svchost.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0038792 ____A (Microsoft Corporation) E3A2AD05E24105B35E986CF9CB38EC47

C:\Windows\SysWOW64\svchost.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 0033088 ____A (Microsoft Corporation) D0ABC231C0B3E88C6B612B28ABBF734D

C:\Windows\System32\services.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0411128 ____A (Microsoft Corporation) 5BF02EBEFEDC706318C96E2E60EDCB91

C:\Windows\System32\User32.dll
[2014-11-22 01:42] - [2014-11-22 01:42] - 1540696 ____A (Microsoft Corporation) 25026E350BC3BE37631634EC72B10BD5

C:\Windows\SysWOW64\User32.dll
[2014-11-22 01:41] - [2014-11-22 01:41] - 1376256 ____A (Microsoft Corporation) 76C5CF09F53A3B089B5581B9938F8CAE

C:\Windows\System32\userinit.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0026112 ____A (Microsoft Corporation) 5C131534A3EA4A461A793FB507A8004F

C:\Windows\SysWOW64\userinit.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 0022528 ____A (Microsoft Corporation) D10643FC0095434C819316CA6CD748C0

C:\Windows\System32\rpcss.dll
[2014-11-22 01:40] - [2014-11-22 01:40] - 0817664 ____A (Microsoft Corporation) A6F17C299A03BAFEFB9257C462A19E00

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2014-11-22 01:40] - [2014-11-22 01:40] - 0310080 ____A (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB


==================== Restore Points  =========================

Restore point made on: 2015-02-10 17:16:28

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 3542.71 MB
Available physical RAM: 2955.17 MB
Total Pagefile: 3542.71 MB
Available Pagefile: 2970.02 MB
Total Virtual: 131072 MB
Available Virtual: 131071.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:439.11 GB) (Free:414.61 GB) NTFS
Drive d: (INTENSO) (Removable) (Total:14.44 GB) (Free:14.43 GB) FAT32
Drive f: () (Fixed) (Total:492.06 GB) (Free:491.69 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 25C1CE29)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=439.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=492.1 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 14.5 GB) (Disk ID: C3D5E2B2)
Partition 1: (Not Active) - (Size=14.5 GB) - (Type=0B)


LastRegBack: 2015-02-10 16:58

Gruß
Beby010

==================== End Of Log ============================
         

--- --- ---

Scan bitte wiederholen, die Registry konnte nicht geladen werden.

Hi,
hier noch einmal der Scann.


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 01
Ran by SYSTEM on MININT-58V0SK5 on 18-02-2015 09:10:27
Running from D:\
Platform: WIN_81 (X64) OS Language: Deutsch (Deutschland)
Boot Mode: Recovery
Attention: Could not load system hive.
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Winlogon: [Userinit] 
HKLM-x32\...\Winlogon: [Userinit]  [X]
HKLM\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION
HKLM-x32\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION
HKLM\...\InprocServer32: [Default-wbemess]  ATTENTION! ====> ZeroAccess?
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  ATTENTION! ====> ZeroAccess?
HKLM\...26dfa299cadb\InprocServer32: [Authentication UI Logon UI]  <==== ATTENTION!

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 12:45 - 2015-02-16 12:45 - 00000000 ____D () C:\.Trash-0
2015-02-13 17:14 - 2015-02-13 17:14 - 00000000 ____D () C:\Windows\System32\config\HiveBackup
2015-02-11 19:07 - 2015-02-18 09:10 - 00000000 ____D () C:\FRST
2015-02-10 20:46 - 2015-02-18 09:01 - 00000000 _____ () C:\Recovery.txt
2015-02-10 20:40 - 2015-02-13 07:47 - 00000464 _____ () C:\Windows\setupact.log
2015-02-10 20:40 - 2015-02-10 20:40 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 20:39 - 2015-02-11 15:43 - 00005232 _____ () C:\Windows\PFRO.log
2015-02-10 20:15 - 2015-02-10 20:15 - 00000000 ____D () C:\Windows\System32\appmgmt
2015-02-10 20:07 - 2015-02-10 20:07 - 00000000 ____D () C:\Windows\System32\appraiser
2015-02-10 20:04 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\System32\ApnDatabase.xml
2015-02-10 20:01 - 2015-02-10 20:01 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Zuhause\Downloads\autodetectutility.exe
2015-02-10 19:59 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2015-02-10 19:59 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2015-02-10 19:59 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2015-02-10 19:59 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2015-02-10 19:59 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2015-02-10 19:59 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2015-02-10 19:40 - 2015-02-10 19:40 - 00001171 ____N () C:\Users\Public\Desktop\CDBurnerXP.lnk
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Canneverbe Limited
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2015-02-10 19:35 - 2015-02-10 19:35 - 00001034 ____N () C:\Users\Public\Desktop\PDF-Viewer.lnk
2015-02-10 19:35 - 2015-02-10 19:35 - 00000000 ____D () C:\Program Files\Tracker Software
2015-02-10 19:33 - 2015-02-10 19:33 - 00000000 ____D () C:\Users\Zuhause\Documents\PDFXVwer
2015-02-10 19:05 - 2015-02-10 19:05 - 00002271 ____N () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Google
2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543
2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543.job
2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AppEx Networks
2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AMD
2015-02-10 18:45 - 2015-02-10 20:39 - 00065536 _____ () C:\Windows\System32\spu_storage.bin
2015-02-10 18:43 - 2015-02-10 18:43 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\library_dir
2015-02-10 18:42 - 2015-02-10 18:42 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201502101842092726.log
2015-02-10 18:42 - 2015-02-10 18:42 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-02-10 18:40 - 2015-02-10 18:41 - 00000000 ____D () C:\Program Files\AMD
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\ProgramData\ATI
2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-02-10 18:31 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-02-10 18:31 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\System32\aspnet_counters.dll
2015-02-10 18:26 - 2014-12-16 12:48 - 00286376 _____ (UltraVnc) C:\Users\Zuhause\Documents\asc_fernwartung.exe
2015-02-10 18:25 - 2015-02-10 18:25 - 00001440 ____N () C:\Users\Zuhause\Desktop\asc_fernwartung - Verknüpfung.lnk
2015-02-10 18:20 - 2015-02-10 18:42 - 00000000 ____D () C:\ProgramData\AMD
2015-02-10 18:20 - 2015-02-10 18:20 - 00060817 _____ () C:\Windows\SysWOW64\CCCInstall_201502101820310764.log
2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-02-10 18:19 - 2015-02-10 19:30 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-10 18:11 - 2015-02-10 18:11 - 00003180 _____ () C:\Windows\System32\Tasks\{F1C5CEEC-A8B2-419C-8221-66C8EA772BE8}
2015-02-10 17:45 - 2015-02-10 20:08 - 00000000 ____D () C:\Windows\System32\MRT
2015-02-10 17:45 - 2015-02-10 20:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-02-10 17:43 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-02-10 17:43 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2015-02-10 17:43 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-02-10 17:43 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-02-10 17:43 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-02-10 17:43 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll
2015-02-10 17:43 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-02-10 17:43 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2015-02-10 17:43 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-02-10 17:43 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-02-10 17:43 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-02-10 17:43 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-02-10 17:43 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-02-10 17:43 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll.vir
2015-02-10 17:43 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-02-10 17:43 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll.vir
2015-02-10 17:43 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-02-10 17:43 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-02-10 17:43 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2015-02-10 17:43 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2015-02-10 17:43 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2015-02-10 17:43 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys
2015-02-10 17:43 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\agilevpn.sys
2015-02-10 17:43 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2015-02-10 17:43 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2015-02-10 17:43 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2015-02-10 17:43 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vpnike.dll
2015-02-10 17:43 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-02-10 17:43 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\System32\rasapi32.dll
2015-02-10 17:43 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2015-02-10 17:43 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-02-10 17:43 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-02-10 17:43 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll
2015-02-10 17:43 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-02-10 17:43 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys
2015-02-10 17:43 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys
2015-02-10 17:43 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rasl2tp.sys
2015-02-10 17:43 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys
2015-02-10 17:43 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp
2015-02-10 17:43 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\rasmxs.dll
2015-02-10 17:43 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\rasser.dll
2015-02-10 17:43 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\rasdiag.dll
2015-02-10 17:43 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-02-10 17:43 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll.vir
2015-02-10 17:43 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-02-10 17:43 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-02-10 17:43 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\System32\AppxAllUserStore.dll
2015-02-10 17:43 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-02-10 17:43 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\System32\rascfg.dll
2015-02-10 17:43 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveTelemetry.dll
2015-02-10 17:43 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll.vir
2015-02-10 17:43 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll
2015-02-10 17:43 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
2015-02-10 17:43 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2015-02-10 17:43 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-02-10 17:43 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\System32\QSHVHOST.DLL
2015-02-10 17:43 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\QSVRMGMT.DLL
2015-02-10 17:43 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll
2015-02-10 17:43 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2015-02-10 17:43 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2015-02-10 17:43 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll
2015-02-10 17:43 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-02-10 17:43 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-02-10 17:43 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll.vir
2015-02-10 17:43 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\WSDApi.dll
2015-02-10 17:43 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-02-10 17:43 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-02-10 17:43 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll
2015-02-10 17:43 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-02-10 17:43 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys
2015-02-10 17:43 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys
2015-02-10 17:43 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys
2015-02-10 17:43 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys
2015-02-10 17:43 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys
2015-02-10 17:43 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-02-10 17:43 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2015-02-10 17:43 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2015-02-10 17:43 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-02-10 17:43 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2015-02-10 17:43 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-10 17:43 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-02-10 17:43 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-10 17:43 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2015-02-10 17:43 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vhdmp.sys
2015-02-10 17:43 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-02-10 17:43 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-02-10 17:43 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-02-10 17:43 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll
2015-02-10 17:43 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-02-10 17:43 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-02-10 17:43 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-02-10 17:43 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-02-10 17:43 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-02-10 17:43 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-02-10 17:43 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\eventcls.dll
2015-02-10 17:43 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll.vir
2015-02-10 17:43 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\System32\vsstrace.dll
2015-02-10 17:43 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\System32\vssapi.dll
2015-02-10 17:43 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-02-10 17:43 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\System32\VSSVC.exe
2015-02-10 17:43 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-02-10 17:43 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-02-10 17:43 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-02-10 17:43 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll.vir
2015-02-10 17:43 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll
2015-02-10 17:43 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2015-02-10 17:43 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2015-02-10 17:43 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys
2015-02-10 17:43 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2015-02-10 17:42 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe
2015-02-10 17:42 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
2015-02-10 17:42 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsDatabase.dll
2015-02-10 17:42 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettings.Handlers.dll
2015-02-10 17:42 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlowUI.dll
2015-02-10 17:42 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll
2015-02-10 17:42 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll
2015-02-10 17:42 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-02-10 17:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwififlt.sys
2015-02-10 17:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwifimp.sys
2015-02-10 17:36 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-02-10 17:36 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2015-02-10 17:36 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-02-10 17:36 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupStatusProvider.dll
2015-02-10 17:36 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-02-10 17:36 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2015-02-10 17:36 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-10 17:35 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-02-10 17:35 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-02-10 17:35 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys
2015-02-10 17:35 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-02-10 17:35 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-10 17:35 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll
2015-02-10 17:35 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-02-10 17:35 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-02-10 17:35 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-02-10 17:35 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2015-02-10 17:35 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys
2015-02-10 17:35 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2015-02-10 17:35 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\winshfhc.dll
2015-02-10 17:35 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-02-10 17:34 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-02-10 17:34 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-02-10 17:34 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-02-10 17:34 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2015-02-10 17:34 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-02-10 17:34 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2015-02-10 17:34 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-02-10 17:34 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-10 17:34 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-02-10 17:34 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-10 17:34 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-02-10 17:34 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2015-02-10 17:34 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-02-10 17:34 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll.vir
2015-02-10 17:34 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-10 17:34 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2015-02-10 17:34 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-10 17:34 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2015-02-10 17:34 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-02-10 17:34 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-02-10 17:34 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-02-10 17:34 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-02-10 17:34 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-02-10 17:34 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-10 17:34 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-10 17:34 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-10 17:34 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-10 17:34 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-10 17:34 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-02-10 17:34 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-10 17:34 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-10 17:34 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-10 17:34 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-10 17:34 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-02-10 17:34 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-10 17:34 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-02-10 17:34 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-10 17:34 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-10 17:34 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-10 17:34 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-02-10 17:34 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-02-10 17:33 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe
2015-02-10 17:33 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-02-10 17:33 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll
2015-02-10 17:16 - 2015-02-10 17:22 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AviraSpeedup
2015-02-10 17:16 - 2015-02-10 17:16 - 00003364 _____ () C:\Windows\System32\Tasks\AviraSpeedup
2015-02-10 17:16 - 2015-02-10 17:16 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-02-10 17:11 - 2015-02-10 20:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1670470879-3129505335-4165064613-1001
2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\ProgramData\ESET
2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\Program Files\ESET
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieUserList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieSiteList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieBrowserModeList
2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Macromedia
2015-02-10 17:04 - 2015-02-10 18:29 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\VirtualStore
2015-02-10 17:04 - 2015-02-10 17:04 - 00009752 _____ () C:\Users\Zuhause\Desktop\Entfernte Anwendungen.html
2015-02-10 17:04 - 2015-02-10 17:04 - 00000020 ___SH () C:\Users\Zuhause\ntuser.ini
2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Adobe
2015-02-10 17:03 - 2015-02-10 20:37 - 01067835 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-02-10 17:01 - 2015-02-10 17:04 - 00000000 ____D () C:\users\Zuhause
2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagwrn.xml
2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagerr.xml
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Vorlagen
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Startmenü
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Netzwerkumgebung
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Lokale Einstellungen
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Eigene Dateien
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Druckumgebung
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Musik
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Bilder
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Verlauf
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Anwendungsdaten
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Anwendungsdaten
2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 ____D () C:\Windows\CSC
2015-02-10 16:59 - 2015-02-10 16:59 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-02-10 16:58 - 2015-02-10 18:34 - 00000000 ___DC () C:\Windows\Panther
2015-02-10 16:58 - 2015-02-10 16:58 - 00000000 ____D () C:\Windows.old
2015-02-10 16:57 - 2015-02-10 16:57 - 00262144 _____ () C:\Windows\System32\config\userdiff
2015-02-10 16:46 - 2015-02-10 16:46 - 00000000 ____D () C:\$WINDOWS.~BT
2015-02-10 13:15 - 2015-02-10 13:15 - 00302011 _____ () C:\Users\Zuhause\Downloads\WindowsUpdateDiagnostic.diagcab
2015-02-10 11:56 - 2015-02-10 11:56 - 00000000 ___RD () C:\Users\Zuhause\OneDrive
2015-02-10 11:47 - 2015-02-10 11:47 - 01064632 _____ (Microsoft Corporation) C:\Users\Zuhause\Downloads\Setup.X86.de-DE_O365HomePremRetail_bebf202b-a52e-46f6-baef-9f4bdaac995a_TX_DB_.exe
2015-02-09 19:19 - 2015-02-09 19:19 - 37987520 ____N (Microsoft Corporation) C:\Users\Zuhause\Downloads\Windows-KB890830-x64-V5.20.exe
2015-02-09 14:20 - 2013-08-22 07:47 - 00001108 ____N () C:\Users\Zuhause\Desktop\Calculator.lnk
2015-02-09 14:18 - 2015-02-09 14:18 - 00001893 ____N () C:\Users\Zuhause\Desktop\Datensicherung starten.lnk
2015-02-09 14:18 - 2014-11-19 13:37 - 00007413 _____ () C:\Users\Zuhause\ASC_Datensicherung.cmd
2015-02-09 14:17 - 2015-02-10 17:04 - 00000000 ____D () C:\Program Files (x86)\ASC
2015-02-09 13:53 - 2015-02-09 13:53 - 00000000 ____D () C:\Program Files (x86)\gs
2015-02-09 13:44 - 2015-02-10 17:05 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-02-09 13:24 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Packages
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Programme
2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-02-09 13:20 - 2015-02-10 16:58 - 00000000 __SHD () C:\Recovery

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 12:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-02-16 12:12 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers
2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-02-13 07:48 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-11 16:46 - 2013-08-22 15:44 - 00338048 _____ () C:\Windows\System32\FNTCACHE.DAT
2015-02-10 20:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-10 20:07 - 2014-11-22 08:33 - 00000000 ___SD () C:\Windows\System32\CompatTel
2015-02-10 20:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppCompat
2015-02-10 20:00 - 2014-11-22 01:06 - 01686150 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-02-10 20:00 - 2014-11-22 00:19 - 00726688 _____ () C:\Windows\System32\perfh007.dat
2015-02-10 20:00 - 2014-11-22 00:19 - 00151380 _____ () C:\Windows\System32\perfc007.dat
2015-02-10 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru
2015-02-10 19:22 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-10 18:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI
2015-02-10 18:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\setup
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-02-10 18:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows NT
2015-02-10 17:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM
2015-02-10 17:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\restore
2015-02-10 17:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-02-10 17:03 - 2013-08-22 14:36 - 00000000 __RHD () C:\users\Default
2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\Recovery
2015-02-10 16:58 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\System32\config\BCD-Template
2015-02-03 20:31 - 2014-11-22 08:40 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-11-22 08:40 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe
[2014-11-22 01:41] - [2014-11-22 01:41] - 0572416 ____A (Microsoft Corporation) EC498BAE1F0D3E0E401C963F8D76C437

C:\Windows\System32\wininit.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0145920 ____A (Microsoft Corporation) A570A64292214C43E0BA50E6A72A6380

C:\Windows\explorer.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 2501368 ____A (Microsoft Corporation) 85D47EB257B06094F052E0C8AEFA3BEE

C:\Windows\SysWOW64\explorer.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 2207488 ____A (Microsoft Corporation) 4B37A33F4F5237BF02E537F8D12D1129

C:\Windows\System32\svchost.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0038792 ____A (Microsoft Corporation) E3A2AD05E24105B35E986CF9CB38EC47

C:\Windows\SysWOW64\svchost.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 0033088 ____A (Microsoft Corporation) D0ABC231C0B3E88C6B612B28ABBF734D

C:\Windows\System32\services.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0411128 ____A (Microsoft Corporation) 5BF02EBEFEDC706318C96E2E60EDCB91

C:\Windows\System32\User32.dll
[2014-11-22 01:42] - [2014-11-22 01:42] - 1540696 ____A (Microsoft Corporation) 25026E350BC3BE37631634EC72B10BD5

C:\Windows\SysWOW64\User32.dll
[2014-11-22 01:41] - [2014-11-22 01:41] - 1376256 ____A (Microsoft Corporation) 76C5CF09F53A3B089B5581B9938F8CAE

C:\Windows\System32\userinit.exe
[2014-11-22 01:40] - [2014-11-22 01:40] - 0026112 ____A (Microsoft Corporation) 5C131534A3EA4A461A793FB507A8004F

C:\Windows\SysWOW64\userinit.exe
[2014-11-22 01:42] - [2014-11-22 01:42] - 0022528 ____A (Microsoft Corporation) D10643FC0095434C819316CA6CD748C0

C:\Windows\System32\rpcss.dll
[2014-11-22 01:40] - [2014-11-22 01:40] - 0817664 ____A (Microsoft Corporation) A6F17C299A03BAFEFB9257C462A19E00

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2014-11-22 01:40] - [2014-11-22 01:40] - 0310080 ____A (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB


==================== Restore Points  =========================

Restore point made on: 2015-02-10 17:16:28

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 3542.71 MB
Available physical RAM: 2964.79 MB
Total Pagefile: 3542.71 MB
Available Pagefile: 2980.29 MB
Total Virtual: 131072 MB
Available Virtual: 131071.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:439.11 GB) (Free:414.61 GB) NTFS
Drive d: (INTENSO) (Removable) (Total:14.44 GB) (Free:14.43 GB) FAT32
Drive f: () (Fixed) (Total:492.06 GB) (Free:491.69 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 25C1CE29)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=439.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=492.1 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 14.5 GB) (Disk ID: C3D5E2B2)
Partition 1: (Not Active) - (Size=14.5 GB) - (Type=0B)


LastRegBack: 2015-02-10 16:58

==================== End Of Log ============================
         

--- --- ---
[/CO

viele Grüße
Baeby010

Attention: Could not load system hive.

Immer noch. Lösche bitte FRST udn lade es neu auf den Stick, versuch es nochmal.

Hi Schrauber,
habe alles noch einmal ganz neu gemacht, leider gleiche Meldung.
Habe beschlossen, System neu zu laden, ein paar Tage abzuwarten und dann mit FRST zu scannen. Kann ich mich dann noch einmal melden?
Vielen lieben Dank erst einmal. Bewundere diese Art der Hilfeleistung.
Gruß
Baeby010

Klar