| |
| |||||||
Log-Analyse und Auswertung: Adware installiert.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
16.05.2015, 17:07
| #16 |
 |  Adware installiert. Letzte Teil von FRST: Code:
ATTFilter 2015-04-19 21:25 - 2014-10-29 03:30 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MuiUnattend.exe 2015-04-19 21:25 - 2014-10-29 03:29 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\wmiclnt.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gptext.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\FileAppxStreamingDataSource.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\dpapi.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mprext.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\dabapi.dll 2015-04-19 21:25 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2015-04-19 21:25 - 2014-10-29 03:28 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL 2015-04-19 21:25 - 2014-10-29 03:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\mprmsg.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\mspatchc.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\sc.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\dfscli.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\mskeyprotect.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\scext.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Websocket.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\perfproc.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\icacls.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\hid.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RdpSa.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\mfcsubs.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\w32topl.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\sdhcinst.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\snmpapi.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinFax.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.TimeBroker.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerClient.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\attrib.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fltLib.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\mskeyprotcli.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\PATHPING.EXE 2015-04-19 21:25 - 2014-10-29 03:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\rasadhlp.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\mountvol.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wmsgapi.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL 2015-04-19 21:25 - 2014-10-29 03:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\whhelper.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\sscoreext.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE 2015-04-19 21:25 - 2014-10-29 03:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msidle.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\TcpipSetup.dll 2015-04-19 21:25 - 2014-10-29 03:28 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\backgroundTaskHost.exe 2015-04-19 21:25 - 2014-10-29 03:28 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\irprops.cpl 2015-04-19 21:25 - 2014-10-29 03:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\loadperf.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\netsh.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\esentprf.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\setx.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\lodctr.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\mspatcha.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\perfos.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\SecEdit.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\virtdisk.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\format.com 2015-04-19 21:25 - 2014-10-29 03:27 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wcmapi.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cacls.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\EventAggregation.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\dsparse.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\more.com 2015-04-19 21:25 - 2014-10-29 03:27 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\fltMC.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\sysntfy.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\fvecerts.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE 2015-04-19 21:25 - 2014-10-29 03:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\adhapi.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\PING.EXE 2015-04-19 21:25 - 2014-10-29 03:27 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\CSystemEventsBrokerClient.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerClient.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\TRACERT.EXE 2015-04-19 21:25 - 2014-10-29 03:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Register-CimProvider.exe 2015-04-19 21:25 - 2014-10-29 03:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll 2015-04-19 21:25 - 2014-10-29 03:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE 2015-04-19 21:25 - 2014-10-29 03:27 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TetheringIeProvider.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\ntdsapi.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\pnrpnsp.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe 2015-04-19 21:25 - 2014-10-29 03:26 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2015-04-19 21:25 - 2014-10-29 03:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wlidnsp.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\srumapi.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSEXT32.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\NetEvtFwdr.exe 2015-04-19 21:25 - 2014-10-29 03:26 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\MirrorDrvCompat.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\crypttpmeksvc.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uicom.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\XInput1_4.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appsruprov.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\pots.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\VaultCmd.exe 2015-04-19 21:25 - 2014-10-29 03:26 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\chkdsk.exe 2015-04-19 21:25 - 2014-10-29 03:26 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\userinitext.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimgvw.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE 2015-04-19 21:25 - 2014-10-29 03:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\ProximityRtapiPal.dll 2015-04-19 21:25 - 2014-10-29 03:26 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\DevDispItemProvider.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\winlogonext.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tpmcompc.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtffilt.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShextAutoplay.exe 2015-04-19 21:25 - 2014-10-29 03:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\ncuprov.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\wininitext.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2015-04-19 21:25 - 2014-10-29 03:25 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\dnsext.dll 2015-04-19 21:25 - 2014-10-29 03:24 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\wlanext.exe 2015-04-19 21:25 - 2014-10-29 03:24 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2015-04-19 21:25 - 2014-10-29 03:24 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\procinst.dll 2015-04-19 21:25 - 2014-10-29 03:23 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll 2015-04-19 21:25 - 2014-10-29 03:23 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.ps.dll 2015-04-19 21:25 - 2014-10-29 03:23 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Custom.ps.dll 2015-04-19 21:25 - 2014-10-29 03:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Background.ps.dll 2015-04-19 21:25 - 2014-10-29 03:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\AppxStreamingDataSourcePS.dll 2015-04-19 21:25 - 2014-10-29 03:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll 2015-04-19 21:25 - 2014-10-29 03:22 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\msauserext.dll 2015-04-19 21:25 - 2014-10-29 03:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll 2015-04-19 21:25 - 2014-10-29 03:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll 2015-04-19 21:25 - 2014-10-29 03:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\TaskSchdPS.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\cngcredui.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\perfctrs.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe 2015-04-19 21:25 - 2014-10-29 03:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\cfmifs.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundTransferHost.exe 2015-04-19 21:25 - 2014-10-29 03:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\WsmAgent.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Display.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.SystemManufacturers.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\wpnsruprov.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\CallButtons.ProxyStub.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE 2015-04-19 21:25 - 2014-10-29 03:21 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.RemoteDesktop.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\defragproxy.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\AuthHostProxy.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\TtlsExt.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\TimeSyncTask.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\cfmifsproxy.dll 2015-04-19 21:25 - 2014-10-29 03:21 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dllhst3g.exe 2015-04-19 21:25 - 2014-10-29 03:20 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll 2015-04-19 21:25 - 2014-10-29 03:20 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapimig.exe 2015-04-19 21:25 - 2014-10-29 03:20 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE 2015-04-19 21:25 - 2014-10-29 03:20 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\dimsjob.dll 2015-04-19 21:25 - 2014-10-29 03:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll 2015-04-19 21:25 - 2014-10-29 03:20 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\ProximityCommonPal.dll 2015-04-19 21:25 - 2014-10-29 03:20 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentTask.dll 2015-04-19 21:25 - 2014-10-29 03:20 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\keepaliveprovider.dll 2015-04-19 21:25 - 2014-10-29 03:19 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll 2015-04-19 21:25 - 2014-10-29 03:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\sxshared.dll 2015-04-19 21:25 - 2014-10-29 03:19 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\pnrpauto.dll 2015-04-19 21:25 - 2014-10-29 03:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\raschapext.dll 2015-04-19 21:25 - 2014-10-29 03:19 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\rastlsext.dll 2015-04-19 21:25 - 2014-10-29 03:18 - 00184832 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2015-04-19 21:25 - 2014-10-29 03:18 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll 2015-04-19 21:25 - 2014-10-29 03:18 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2015-04-19 21:25 - 2014-10-29 03:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll 2015-04-19 21:25 - 2014-10-29 03:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll 2015-04-19 21:25 - 2014-10-29 03:16 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2015-04-19 21:25 - 2014-10-29 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2015-04-19 21:25 - 2014-10-29 03:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2015-04-19 21:25 - 2014-10-29 03:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll 2015-04-19 21:25 - 2014-10-29 03:15 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\FDResPub.dll 2015-04-19 21:25 - 2014-10-29 03:15 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe 2015-04-19 21:25 - 2014-10-29 03:14 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\certCredProvider.dll 2015-04-19 21:25 - 2014-10-29 03:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\ProximityServicePal.dll 2015-04-19 21:25 - 2014-10-29 03:14 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2015-04-19 21:25 - 2014-10-29 03:12 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe 2015-04-19 21:25 - 2014-10-29 03:12 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wwaninst.dll 2015-04-19 21:25 - 2014-10-29 03:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\DsmUserTask.exe 2015-04-19 21:25 - 2014-10-29 03:11 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll 2015-04-19 21:25 - 2014-10-29 03:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll 2015-04-19 21:25 - 2014-10-29 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe 2015-04-19 21:25 - 2014-10-29 03:06 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmiclnt.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapi.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprext.dll 2015-04-19 21:25 - 2014-10-29 03:06 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_ISCII.DLL 2015-04-19 21:25 - 2014-10-29 03:06 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dabapi.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00589824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elslad.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL 2015-04-19 21:25 - 2014-10-29 03:05 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprmsg.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspatchc.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\reg.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sc.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ndiscapCfg.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lodctr.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfscli.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfproc.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspatcha.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfos.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Websocket.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unlodctr.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfdisk.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\virtdisk.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icacls.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32topl.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcsubs.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\snmpapi.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hid.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\more.com 2015-04-19 21:25 - 2014-10-29 03:05 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinit.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfnet.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsparse.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsperf.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schedcli.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE 2015-04-19 21:25 - 2014-10-29 03:05 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\attrib.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mskeyprotcli.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fltLib.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TimeBrokerClient.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PATHPING.EXE 2015-04-19 21:25 - 2014-10-29 03:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshqos.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mountvol.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TRACERT.EXE 2015-04-19 21:25 - 2014-10-29 03:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SystemEventsBrokerClient.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmsgapi.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasadhlp.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\whhelper.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL 2015-04-19 21:25 - 2014-10-29 03:05 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrssrv.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdBthProxy.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TCPSVCS.EXE 2015-04-19 21:25 - 2014-10-29 03:05 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msidle.dll 2015-04-19 21:25 - 2014-10-29 03:05 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\backgroundTaskHost.exe 2015-04-19 21:25 - 2014-10-29 03:05 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnrpnsp.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentprf.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollCtrl.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SecEdit.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumapi.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findstr.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pots.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcmapi.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cacls.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fltMC.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ARP.EXE 2015-04-19 21:25 - 2014-10-29 03:04 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinitext.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Register-CimProvider.exe 2015-04-19 21:25 - 2014-10-29 03:04 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll 2015-04-19 21:25 - 2014-10-29 03:04 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\HOSTNAME.EXE 2015-04-19 21:25 - 2014-10-29 03:04 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpcsvc.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\LaunchTM.exe 2015-04-19 21:25 - 2014-10-29 03:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidnsp.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.Fontgroups.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MirrorDrvCompat.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypttpmeksvc.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XInput1_4.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll 2015-04-19 21:25 - 2014-10-29 03:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chkdsk.exe 2015-04-19 21:25 - 2014-10-29 03:03 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRINFO.EXE 2015-04-19 21:25 - 2014-10-29 03:03 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityRtapiPal.dll 2015-04-19 21:25 - 2014-10-29 03:02 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll 2015-04-19 21:25 - 2014-10-29 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2015-04-19 21:25 - 2014-10-29 03:02 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll 2015-04-19 21:25 - 2014-10-29 03:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininitext.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TaskSchdPS.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vss_ps.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdProxy.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.ps.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Custom.ps.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Background.ps.dll 2015-04-19 21:25 - 2014-10-29 03:01 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguageProfileCallback.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngcredui.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfctrs.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Portable.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NETSTAT.EXE 2015-04-19 21:25 - 2014-10-29 03:00 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipconfig.exe 2015-04-19 21:25 - 2014-10-29 03:00 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsjob.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxlegih.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundTransferHost.exe 2015-04-19 21:25 - 2014-10-29 03:00 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfmifs.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAgent.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxdm.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elsTrans.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvps.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Display.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Profile.SystemManufacturers.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ROUTE.EXE 2015-04-19 21:25 - 2014-10-29 03:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.RemoteDesktop.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmproxy.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TtlsExt.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommonPal.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallButtons.ProxyStub.dll 2015-04-19 21:25 - 2014-10-29 03:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfmifsproxy.dll 2015-04-19 21:25 - 2014-10-29 02:59 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\dot3gpclnt.dll 2015-04-19 21:25 - 2014-10-29 02:59 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll 2015-04-19 21:25 - 2014-10-29 02:59 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschapext.dll 2015-04-19 21:25 - 2014-10-29 02:59 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastlsext.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\fdPHost.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Startupscan.dll 2015-04-19 21:25 - 2014-10-29 02:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\bootim.exe 2015-04-19 21:25 - 2014-10-29 02:57 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll 2015-04-19 21:25 - 2014-10-29 02:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetmib1.dll 2015-04-19 21:25 - 2014-10-29 02:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll 2015-04-19 21:25 - 2014-10-29 02:57 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\datusage.dll 2015-04-19 21:25 - 2014-10-29 02:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe 2015-04-19 21:25 - 2014-10-29 02:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrshost.exe 2015-04-19 21:25 - 2014-10-29 02:57 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll 2015-04-19 21:25 - 2014-10-29 02:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2015-04-19 21:25 - 2014-10-29 02:56 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certCredProvider.dll 2015-04-19 21:25 - 2014-10-29 02:56 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2015-04-19 21:25 - 2014-10-29 02:56 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll 2015-04-19 21:25 - 2014-10-29 02:56 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll 2015-04-19 21:25 - 2014-10-29 02:55 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\CheckNetIsolation.exe 2015-04-19 21:25 - 2014-10-29 02:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\RdpSaProxy.exe 2015-04-19 21:25 - 2014-10-29 02:54 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RdpSaUacHelper.exe 2015-04-19 21:25 - 2014-10-29 02:53 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\WSDPrintProxy.DLL 2015-04-19 21:25 - 2014-10-29 02:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll 2015-04-19 21:25 - 2014-10-29 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifmon.dll 2015-04-19 21:25 - 2014-10-29 02:52 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrs.exe 2015-04-19 21:25 - 2014-10-29 02:51 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ndiscapCfg.dll 2015-04-19 21:25 - 2014-10-29 02:50 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchTM.exe 2015-04-19 21:25 - 2014-10-29 02:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnrollCtrl.exe 2015-04-19 21:25 - 2014-10-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2015-04-19 21:25 - 2014-10-29 02:48 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll 2015-04-19 21:25 - 2014-10-29 02:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3gpclnt.dll 2015-04-19 21:25 - 2014-10-29 02:46 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll 2015-04-19 21:25 - 2014-10-29 02:46 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PSModuleDiscoveryProvider.dll 2015-04-19 21:25 - 2014-10-29 02:46 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ByteCodeGenerator.exe 2015-04-19 21:25 - 2014-10-29 02:46 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Startupscan.dll 2015-04-19 21:25 - 2014-10-29 02:45 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll 2015-04-19 21:25 - 2014-10-29 02:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll 2015-04-19 21:25 - 2014-10-29 02:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CheckNetIsolation.exe 2015-04-19 21:25 - 2014-10-29 02:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RdpSaUacHelper.exe 2015-04-19 21:25 - 2014-10-29 02:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RdpSaProxy.exe 2015-04-19 21:25 - 2014-10-29 02:42 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll 2015-04-19 21:25 - 2014-10-29 02:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll 2015-04-19 21:25 - 2014-10-07 08:54 - 00324928 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2015-04-19 21:25 - 2014-10-07 08:54 - 00189248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS 2015-04-19 21:25 - 2014-10-07 08:44 - 00069952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys 2015-04-19 21:25 - 2014-08-15 02:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2015-04-19 21:25 - 2014-07-24 13:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-04-19 21:25 - 2014-07-24 13:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-04-19 21:25 - 2014-07-24 13:45 - 00076800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-04-19 21:25 - 2014-07-24 13:41 - 00118272 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2015-04-19 21:25 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2015-04-19 21:25 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2015-04-19 21:25 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2015-04-19 21:25 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2015-04-19 21:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2015-04-19 21:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2015-04-19 21:25 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2015-04-19 21:25 - 2014-06-21 09:33 - 00212736 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2015-04-19 21:25 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-04-19 21:17 - 2015-04-19 22:24 - 00000000 ____D () C:\Users\Stefano\AppData\Local\Thunderbird 2015-04-19 21:17 - 2015-04-19 21:17 - 00002114 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2015-04-19 21:17 - 2015-04-19 21:17 - 00002102 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2015-04-19 21:17 - 2015-04-19 21:17 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Thunderbird 2015-04-19 21:17 - 2015-04-19 21:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2015-04-19 21:15 - 2015-05-16 17:43 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-04-19 21:13 - 2015-05-16 15:31 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-04-19 21:13 - 2015-05-16 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-04-19 21:13 - 2015-05-16 15:31 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-04-19 21:13 - 2015-04-19 21:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-04-19 21:13 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-04-19 21:13 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-04-19 21:13 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-04-19 21:11 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2015-04-19 21:11 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe 2015-04-19 21:11 - 2014-10-31 01:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-04-19 21:11 - 2014-10-31 01:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-04-19 21:10 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2015-04-19 21:10 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2015-04-19 21:10 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-04-19 21:10 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll 2015-04-19 21:10 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll 2015-04-19 21:10 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2015-04-19 21:10 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2015-04-19 21:10 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2015-04-19 21:10 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2015-04-19 21:10 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2015-04-19 21:10 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2015-04-19 21:10 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll 2015-04-19 21:10 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2015-04-19 21:10 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll 2015-04-19 21:10 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-04-19 21:10 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-04-19 21:10 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-04-19 21:10 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-04-19 21:10 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-04-19 21:10 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2015-04-19 21:10 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll 2015-04-19 21:10 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll 2015-04-19 21:10 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2015-04-19 21:10 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2015-04-19 21:10 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-04-19 21:10 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-04-19 21:10 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-04-19 21:10 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls 2015-04-19 21:10 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\system32\locale.nls 2015-04-19 21:10 - 2014-11-10 04:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll 2015-04-19 21:10 - 2014-11-10 03:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll 2015-04-19 21:10 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe 2015-04-19 21:10 - 2014-10-29 04:34 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2015-04-19 21:10 - 2014-10-29 04:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe 2015-04-19 21:10 - 2014-10-29 04:34 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe 2015-04-19 21:10 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll 2015-04-19 21:10 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe 2015-04-19 21:10 - 2014-10-29 03:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll 2015-04-19 21:10 - 2014-10-29 03:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-04-19 21:10 - 2014-10-29 03:45 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2015-04-19 21:10 - 2014-10-29 03:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll 2015-04-19 21:10 - 2014-10-29 03:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\atlthunk.dll 2015-04-19 21:10 - 2014-10-29 03:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2015-04-19 21:10 - 2014-10-29 03:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll 2015-04-19 21:10 - 2014-10-29 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-04-19 21:10 - 2014-10-29 03:15 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2015-04-19 21:10 - 2014-10-29 03:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2015-04-19 21:10 - 2014-10-29 03:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2015-04-19 21:10 - 2014-10-29 03:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll 2015-04-19 21:10 - 2014-10-29 02:55 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2015-04-19 21:10 - 2014-10-29 02:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2015-04-19 21:10 - 2014-10-29 02:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2015-04-19 21:10 - 2014-10-29 02:41 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2015-04-19 21:10 - 2014-10-29 02:35 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2015-04-19 21:09 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-19 21:09 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-19 21:09 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2015-04-19 21:09 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2015-04-19 21:09 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2015-04-19 21:09 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll 2015-04-19 21:09 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2015-04-19 21:09 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2015-04-19 21:09 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll 2015-04-19 21:09 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll 2015-04-19 21:09 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll 2015-04-19 21:09 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll 2015-04-19 21:09 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-04-19 21:09 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-04-19 21:09 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-04-19 21:09 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2015-04-19 21:09 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe 2015-04-19 21:09 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-19 21:09 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll 2015-04-19 21:09 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll 2015-04-19 21:04 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-04-19 21:04 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-04-19 21:04 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-04-19 21:04 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll 2015-04-19 21:04 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll 2015-04-19 20:58 - 2015-01-16 00:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-19 20:58 - 2014-12-09 03:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-04-19 20:58 - 2014-10-29 04:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-19 20:58 - 2014-10-29 04:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-19 20:58 - 2014-10-29 04:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-19 20:58 - 2014-10-29 04:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-19 20:57 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-04-19 20:57 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-04-19 20:57 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-04-19 20:57 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-04-19 20:57 - 2014-12-09 05:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-04-19 20:57 - 2014-12-09 03:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-04-19 20:57 - 2014-10-29 04:49 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-04-19 20:57 - 2014-10-29 04:44 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-04-19 20:57 - 2014-10-29 04:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-04-19 20:57 - 2014-10-29 04:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-04-19 20:57 - 2014-10-29 04:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-04-19 20:57 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-04-19 20:51 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys 2015-04-19 20:51 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys 2015-04-19 20:51 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-04-19 20:51 - 2014-10-31 06:50 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe 2015-04-19 20:51 - 2014-10-31 05:30 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2015-04-19 20:51 - 2014-10-31 05:22 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2015-04-19 20:51 - 2014-10-31 04:12 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2015-04-19 20:51 - 2014-10-29 04:46 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2015-04-19 20:51 - 2014-10-29 04:46 - 00053248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys 2015-04-19 20:51 - 2014-10-29 04:45 - 01198080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-04-19 20:51 - 2014-10-29 04:03 - 00241152 ____C (Microsoft Corporation) C:\Windows\system32\fsquirt.exe 2015-04-19 20:51 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-04-19 20:51 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-04-19 20:50 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-19 20:50 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-19 20:50 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-04-19 20:50 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-19 20:50 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-04-19 20:50 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2015-04-19 20:50 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-19 20:50 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-19 20:50 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-04-19 20:50 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-04-19 20:50 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-04-19 20:50 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-04-19 20:50 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2015-04-19 20:50 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-04-19 20:50 - 2014-10-31 06:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-19 20:50 - 2014-10-31 06:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-04-19 20:50 - 2014-10-31 04:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-04-19 20:50 - 2014-10-31 04:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-04-19 20:50 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll 2015-04-19 20:50 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-04-19 20:50 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-04-19 20:50 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-04-19 20:50 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-19 20:50 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-04-19 20:50 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-04-19 20:50 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-04-19 20:50 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-19 20:50 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-19 20:50 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-19 20:50 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-19 20:50 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-19 20:50 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-04-19 20:50 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-04-19 20:49 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-04-19 20:49 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-04-19 20:49 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-19 20:49 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-19 20:49 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-19 20:49 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-19 20:49 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-19 20:49 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-04-19 20:49 - 2014-10-31 07:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-04-19 20:49 - 2014-10-31 07:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-04-19 20:49 - 2014-10-31 07:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-04-19 20:49 - 2014-10-31 07:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-04-19 20:49 - 2014-10-31 07:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-04-19 20:49 - 2014-10-31 07:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-04-19 20:49 - 2014-10-31 07:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-19 20:49 - 2014-10-31 07:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-19 20:49 - 2014-10-31 06:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-19 20:49 - 2014-10-31 06:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-19 20:49 - 2014-10-31 06:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-04-19 20:49 - 2014-10-31 06:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2015-04-19 20:49 - 2014-10-31 06:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-19 20:49 - 2014-10-31 06:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-19 20:49 - 2014-10-31 06:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-04-19 20:49 - 2014-10-31 06:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-04-19 20:49 - 2014-10-31 06:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-04-19 20:49 - 2014-10-31 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-19 20:49 - 2014-10-31 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-04-19 20:49 - 2014-10-31 05:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-04-19 20:49 - 2014-10-31 05:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2015-04-19 20:49 - 2014-10-31 05:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2015-04-19 20:49 - 2014-10-31 05:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2015-04-19 20:49 - 2014-10-31 05:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2015-04-19 20:49 - 2014-10-31 05:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2015-04-19 20:49 - 2014-10-31 05:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2015-04-19 20:49 - 2014-10-31 05:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-19 20:49 - 2014-10-31 05:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-19 20:49 - 2014-10-31 05:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-19 20:49 - 2014-10-31 05:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-19 20:49 - 2014-10-31 05:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2015-04-19 20:49 - 2014-10-31 05:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-19 20:49 - 2014-10-31 05:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2015-04-19 20:49 - 2014-10-31 05:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-19 20:49 - 2014-10-31 05:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-19 20:49 - 2014-10-31 05:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2015-04-19 20:49 - 2014-10-31 04:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-19 20:49 - 2014-10-31 04:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2015-04-19 20:49 - 2014-10-31 04:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-04-19 20:49 - 2014-10-31 04:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-04-19 20:49 - 2014-10-31 04:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-19 20:49 - 2014-10-31 04:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2015-04-19 20:49 - 2014-10-31 04:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2015-04-19 20:49 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Mozilla 2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Stefano\AppData\Local\Mozilla 2015-04-19 20:42 - 2015-05-04 17:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-19 20:42 - 2015-04-19 20:42 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-04-19 20:42 - 2015-04-19 20:42 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-04-19 20:39 - 2015-04-19 20:39 - 00000000 __SHD () C:\Users\Stefano\AppData\Local\EmieUserList 2015-04-19 20:39 - 2015-04-19 20:39 - 00000000 __SHD () C:\Users\Stefano\AppData\Local\EmieSiteList 2015-04-19 20:39 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-19 20:39 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-19 20:38 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-19 20:36 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-04-19 20:36 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-04-19 20:35 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2015-04-19 20:35 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-19 20:35 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-19 20:35 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-04-19 20:35 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-04-19 20:35 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2015-04-19 20:35 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-04-19 20:35 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-04-19 20:35 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-04-19 20:35 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2015-04-19 20:35 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-04-19 20:35 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-04-19 20:35 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-04-19 20:35 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-04-19 20:35 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-04-19 20:35 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-04-19 20:35 - 2014-12-06 03:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-04-19 20:35 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-04-19 20:35 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-04-19 20:35 - 2014-10-29 06:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2015-04-19 20:35 - 2014-10-29 06:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2015-04-19 20:35 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-04-19 20:35 - 2014-10-29 05:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-04-19 20:35 - 2014-10-29 05:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-04-19 20:35 - 2014-10-29 05:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-04-19 20:35 - 2014-10-29 05:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-04-19 20:35 - 2014-10-29 05:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-04-19 20:35 - 2014-10-29 05:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-04-19 20:35 - 2014-10-29 05:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-04-19 20:35 - 2014-10-29 05:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-04-19 20:35 - 2014-10-29 05:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-04-19 20:35 - 2014-10-29 04:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-04-19 20:35 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll 2015-04-19 20:35 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-04-19 20:35 - 2014-10-29 03:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-04-19 20:35 - 2014-10-29 03:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-04-19 20:35 - 2014-10-29 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-04-19 20:35 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2015-04-19 20:35 - 2014-05-31 12:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2015-04-19 20:35 - 2014-05-31 12:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2015-04-19 20:35 - 2014-05-31 12:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2015-04-19 20:35 - 2014-05-31 08:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2015-04-19 20:26 - 2015-05-04 17:30 - 00000000 ____D () C:\Users\Stefano\AppData\Local\Spotify 2015-04-19 20:26 - 2015-05-04 17:18 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Spotify 2015-04-19 20:21 - 2015-04-19 20:21 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk 2015-04-19 20:14 - 2015-05-14 19:40 - 00000000 ____D () C:\Users\Stefano\AppData\Local\CrashDumps 2015-04-19 20:10 - 2015-04-19 20:10 - 00000000 ____D () C:\Users\Public\Pokki 2015-04-19 20:09 - 2015-05-14 20:34 - 00002321 _____ () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2015-04-19 20:08 - 2015-05-13 14:24 - 00000000 ____D () C:\Users\Stefano\AppData\Local\clear.fi 2015-04-19 20:08 - 2015-04-19 20:08 - 00000000 ____D () C:\Users\Stefano\PicStream 2015-04-19 20:08 - 2015-04-19 20:08 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Macromedia 2015-04-19 20:06 - 2015-05-14 20:33 - 00000000 ____D () C:\Users\Stefano\AppData\Local\AOP SDK 2015-04-19 20:06 - 2015-04-19 20:06 - 00001276 _____ () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk 2015-04-19 20:06 - 2015-04-19 20:06 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Atheros 2015-04-19 20:06 - 2015-04-19 20:06 - 00000000 ____D () C:\Users\Stefano\AppData\Local\NVIDIA 2015-04-19 20:06 - 2015-04-19 20:06 - 00000000 ____D () C:\Users\Stefano\AppData\Local\iGware 2015-04-19 20:06 - 2015-04-19 20:06 - 00000000 ____D () C:\Program Files (x86)\OEM 2015-04-19 20:05 - 2015-04-20 20:30 - 00000000 ____D () C:\Users\Stefano\AppData\Local\Packages 2015-04-19 20:05 - 2015-04-19 20:05 - 00001454 _____ () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\Windows\oem 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Adobe 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\Users\Stefano\AppData\Local\VirtualStore 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\Users\Stefano\AppData\Local\OEM 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2015-04-19 20:05 - 2015-04-19 20:05 - 00000000 ____D () C:\Program Files\Accessory Store 2015-04-19 20:04 - 2015-04-19 20:08 - 00000000 ____D () C:\Users\Stefano 2015-04-19 20:04 - 2015-04-19 20:04 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-04-19 20:04 - 2015-04-19 20:04 - 00000020 ___SH () C:\Users\Stefano\ntuser.ini 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Vorlagen 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Startmenü 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Netzwerkumgebung 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Lokale Einstellungen 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Eigene Dateien 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Druckumgebung 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Documents\Eigene Musik 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Documents\Eigene Bilder 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\AppData\Local\Verlauf 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\AppData\Local\Anwendungsdaten 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 _SHDL () C:\Users\Stefano\Anwendungsdaten 2015-04-19 20:04 - 2014-07-14 19:53 - 00000000 ___RD () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-19 20:04 - 2014-03-18 12:33 - 00000000 ___RD () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-19 20:04 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-04-19 20:04 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-04-19 20:04 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-19 20:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Stefano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-04-19 19:59 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-19 19:59 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-19 19:59 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-19 19:59 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-19 19:59 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-19 19:59 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-19 19:59 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-19 19:59 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-19 19:59 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-19 19:59 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2015-04-19 19:59 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-04-19 19:59 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-19 19:59 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-19 19:59 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-19 19:59 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-19 19:59 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-19 19:59 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-19 19:59 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-19 19:59 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-05-16 17:35 - 2014-09-26 17:55 - 01100158 _____ () C:\Windows\WindowsUpdate.log 2015-05-16 17:16 - 2014-09-26 17:15 - 00006463 _____ () C:\Windows\SysWOW64\Gms.log 2015-05-16 17:14 - 2013-08-22 16:46 - 00025174 _____ () C:\Windows\setupact.log 2015-05-16 17:14 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-05-16 17:13 - 2014-03-18 11:54 - 00153840 _____ () C:\Windows\PFRO.log 2015-05-16 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2015-05-16 12:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache 2015-05-15 13:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-05-15 12:58 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2015-05-15 12:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help 2015-05-14 20:34 - 2014-07-14 19:58 - 00000000 ____D () C:\ProgramData\McAfee 2015-05-14 20:29 - 2013-08-22 16:44 - 00381512 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-05-14 20:27 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2015-05-14 20:27 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-05-14 18:37 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-05-14 18:34 - 2014-09-26 17:30 - 00000000 ____D () C:\Users\Public\CyberLink 2015-05-14 18:34 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\CyberLink 2015-05-14 18:23 - 2014-03-18 11:45 - 00000000 ____D () C:\Program Files\Windows Journal 2015-05-13 14:26 - 2014-09-26 17:18 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2015-05-13 14:23 - 2014-09-26 17:18 - 00000000 ____D () C:\Program Files (x86)\Acer 2015-05-13 14:19 - 2014-07-14 20:33 - 00000000 ___HD () C:\OEM 2015-05-04 15:04 - 2014-09-26 17:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2015-05-04 15:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-05-04 15:01 - 2014-03-18 11:45 - 00000000 ____D () C:\Windows\ShellNew 2015-04-23 02:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat 2015-04-22 12:15 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery 2015-04-20 21:56 - 2014-07-14 19:56 - 00027874 _____ () C:\Windows\DirectX.log 2015-04-20 20:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2015-04-20 20:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup 2015-04-20 17:29 - 2014-09-27 02:13 - 00765582 _____ () C:\Windows\system32\perfh007.dat 2015-04-20 17:29 - 2014-09-27 02:13 - 00159366 _____ () C:\Windows\system32\perfc007.dat 2015-04-20 17:29 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-20 17:26 - 2014-09-26 16:55 - 00000000 ____D () C:\ProgramData\Package Cache 2015-04-20 01:03 - 2013-08-22 17:37 - 00005111 _____ () C:\Windows\DtcInstall.log 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___SD () C:\Windows\system32\dsc 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\sppui 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sppui 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-04-20 00:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism 2015-04-20 00:56 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing 2015-04-20 00:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2015-04-20 00:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\WindowsPowerShell 2015-04-20 00:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2015-04-20 00:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2015-04-20 00:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform 2015-04-20 00:49 - 2013-08-22 17:36 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2015-04-20 00:49 - 2013-08-22 17:36 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2015-04-20 00:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2015-04-20 00:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2015-04-20 00:13 - 2014-07-14 19:58 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2015-04-20 00:11 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-04-20 00:08 - 2014-07-14 19:36 - 00000000 ____D () C:\Users\Administrator 2015-04-19 23:46 - 2014-07-14 19:55 - 00000000 ____D () C:\ProgramData\WildTangent 2015-04-19 22:23 - 2014-09-26 17:19 - 00000000 ____D () C:\ProgramData\OEM 2015-04-19 22:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2015-04-19 22:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-04-19 21:46 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-04-19 20:21 - 2014-09-26 17:19 - 00000000 ____D () C:\ProgramData\Acer 2015-04-19 20:11 - 2014-09-26 17:09 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2015-04-19 20:11 - 2014-09-26 17:08 - 00000000 ____D () C:\ProgramData\Intel 2015-04-19 20:05 - 2014-07-14 20:34 - 00000000 ____D () C:\Windows\Panther 2015-04-19 19:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore ==================== Files in the root of some directories ======= 2014-09-26 17:11 - 2014-09-26 17:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Some content of TEMP: ==================== C:\Users\Stefano\AppData\Local\Temp\130760985781032834.exe C:\Users\Stefano\AppData\Local\Temp\13076098586598913092.exe C:\Users\Stefano\AppData\Local\Temp\avgnt.exe C:\Users\Stefano\AppData\Local\Temp\Foxit PhantomPDF Updater.exe C:\Users\Stefano\AppData\Local\Temp\oct559C.tmp.exe C:\Users\Stefano\AppData\Local\Temp\octAE5A.tmp.exe C:\Users\Stefano\AppData\Local\Temp\ose00000.exe C:\Users\Stefano\AppData\Local\Temp\Quarantine.exe C:\Users\Stefano\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-05-16 12:14 ==================== End Of Log ============================ |
|
17.05.2015, 12:18
| #17 |
| /// TB-Ausbilder   | Adware installiert. Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
__________________Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
Task: {8455C889-8046-45E4-822E-C3EBA3A6BF32} - \Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-1001 No Task File <==== ATTENTION
Task: {BE35143B-C212-4351-B67A-8576A1DE5CEB} - \Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-500 No Task File <==== ATTENTION
RemoveProxy:
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade Dir bitte  SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
|
17.05.2015, 18:32
| #18 |
| | Adware installiert. Security Check:
__________________Code:
ATTFilter Results of screen317's Security Check version 1.001
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Antivirus
Windows Defender
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Secunia PSI (3.0.0.10004)
VirusTotal Uploader 2.2
Adobe Flash Player 17.0.0.188
Mozilla Firefox (37.0.2)
Mozilla Thunderbird (31.6.0)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
Avira Antivirus sched.exe
Avira Antivirus avshadow.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-05-2015 02
Ran by Stefano at 2015-05-17 18:14:47 Run:1
Running from C:\Users\Stefano\Downloads
Loaded Profiles: Stefano & (Available profiles: Stefano)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
CloseProcesses:
Task: {8455C889-8046-45E4-822E-C3EBA3A6BF32} - \Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-1001 No Task File <==== ATTENTION
Task: {BE35143B-C212-4351-B67A-8576A1DE5CEB} - \Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-500 No Task File <==== ATTENTION
RemoveProxy:
EmptyTemp:
end
*****************
Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8455C889-8046-45E4-822E-C3EBA3A6BF32}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8455C889-8046-45E4-822E-C3EBA3A6BF32}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-1001" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE35143B-C212-4351-B67A-8576A1DE5CEB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE35143B-C212-4351-B67A-8576A1DE5CEB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-2153896721-935911264-1805070617-500" => Key deleted successfully.
========= RemoveProxy: =========
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-21-2153896721-935911264-1805070617-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-2153896721-935911264-1805070617-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-21-2153896721-935911264-1805070617-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-2153896721-935911264-1805070617-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
========= End of RemoveProxy: =========
EmptyTemp: => Removed 1.6 GB temporary data.
The system needed a reboot.
==== End of Fixlog 18:15:54 ====
Dort stand aufjedenfall: All ok Würde morgen dann nochmal einen neuen Scan machen und die Logfile posten wenn das ok ist. |
|
17.05.2015, 20:41
| #19 | ||||||||||
| /// TB-Ausbilder | Adware installiert. Servus, wenn ESET gesagt hat, alles ok, dann passt das. Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Ghostery Erkennt und blockiert Tracker, Web Bugs, Pixel und Beacons und weitere Scripte, die das Surfverhalten ausspähen/beobachten. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
18.05.2015, 16:34
| #20 |
| | Adware installiert. Ist alles erledigt und sauber nun ; ) Danke für deine Hilfe und deine Tipps für die Zukunft ; ) Kriegst eine gute Bewertung und auch eine kleine Spende sobald der Lohn da ist  |
|
19.05.2015, 13:05
| #21 |
| /// TB-Ausbilder | Adware installiert. Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!  Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu Adware installiert. |
| acer, adware, appdata, code, explorer, folge, frage, internet, internet explorer, internetseite, malwarebytes, microsoft, neue, omnibox, programm, scan, schutz, seite, software, startseite, suchmaschine, temp, update, webseiten, werbung, windows |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
