| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: weis nicht mehr weiter ist mein PC noch sicherWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.11.2015, 08:06
| #1 |
 |  weis nicht mehr weiter ist mein PC noch sicher Meine Daten: Betriebssystem: Windows 10 Browser: Microsoft Edge Antivirus: Kaspersky Internet Security 2016 gestern haben die Probleme angefangen nachdem ich eine Externe Festplatte angeschlossen hatte zumindest war ich der Meinung dass es der Auslöser war. Kaspersky hatte mir keine Warnmeldung gegeben aber nachdem ständig meine VPN Verbindung nach 1-2 Minuten abbricht habe ich Malwarebytes durchlaufen lassen dieser hat auch einiges gefunden: Trojan.Tracur im Ordner: C:Windows/Installer/14fff6.msi pup.optional.opencandy: mehrmals pup.optional.conduit: mehrmals nachdem diese in den Quarantäne Ordner verschoben wurden habe ich noch Eset und TFC durchlaufen lassen ESET hat auch 8 Sachen gefunden eines davon war aber der Chip Installer. Nun bin ich mir nicht Sicher ob alles gut ist oder ich lieber mein Windows neu aufsetzen sollte ich hoffe es kann mir hier jemand helfen dass herauszufinden Die Programme die man vor der Themen Erstellung runterladen und durchlassen lassen soll(defogger,FRST,Gmer lassen sich bei mir nicht runterladen warum verstehe ich nicht Gruß Daniel |
|
07.11.2015, 10:35
| #2 |
| /// the machine /// TB-Ausbilder   | weis nicht mehr weiter ist mein PC noch sicher hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
07.11.2015, 12:48
| #3 | |
| | weis nicht mehr weiter ist mein PC noch sicherZitat:
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-11-2015 durchgeführt von welke (Administrator) auf DESKTOP-0TMHTJS (07-11-2015 13:46:48) Gestartet von C:\Users\welke\Desktop Geladene Profile: welke (Verfügbare Profile: welke) Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (eVenture Limited) C:\Program Files (x86)\hide.me VPN\vpnsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe (Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (AppWork GmbH) C:\Users\welke\AppData\Local\JDownloader v2.0\JDownloader2.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6310.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6310.42251.0_x64__8wekyb3d8bbwe\HxMail.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1510.13020.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6310.42251.0_x64__8wekyb3d8bbwe\HxCalendarAppImm.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15081.0_x64__8wekyb3d8bbwe\Video.UI.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-05] (Valve Corporation) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\..\Interfaces\{09d778c2-159c-4627-8850-313c6594d538}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{2E89B5ED-2271-4B61-BB21-C76C097C77AD}: [NameServer] 46.166.179.36 46.166.179.38 Tcpip\..\Interfaces\{FB8C04E2-C129-437B-8CE9-CD1231B3003C}: [DhcpNameServer] 109.201.143.2 109.201.143.3 Internet Explorer: ================== BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-21] (AO Kaspersky Lab) BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-21] (AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-21] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-21] (AO Kaspersky Lab) FireFox: ======== FF ProfilePath: C:\Users\welke\AppData\Roaming\Mozilla\Firefox\Profiles\tgee1udb.default FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-02] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-02] (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2015-10-21] [ist nicht signiert] StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe Chrome: ======= CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-10-07] (Kaspersky Lab ZAO) R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [20512 2014-03-13] (Micro-Star Int'l Co., Ltd.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation) R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\vpnsvc.exe [184528 2015-11-06] (eVenture Limited) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert] R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-10-07] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation) S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-08] (AO Kaspersky Lab) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] () R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-05] (Kaspersky Lab ZAO) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-10-21] (AO Kaspersky Lab) R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [227512 2015-10-21] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [925064 2015-10-21] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39608 2015-06-11] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-10-07] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87944 2015-10-21] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-07] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-10-07] (Intel Corporation) R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2241848 2015-10-07] (MediaTek Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation) S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-06-18] (Realtek ) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-11-07 13:46 - 2015-11-07 13:47 - 00014618 _____ C:\Users\welke\Desktop\FRST.txt 2015-11-07 13:46 - 2015-11-07 13:46 - 00000000 ____D C:\FRST 2015-11-07 13:45 - 2015-11-07 13:46 - 02198528 _____ (Farbar) C:\Users\welke\Desktop\FRST64.exe 2015-11-07 13:44 - 2015-11-07 13:44 - 00000993 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-11-07 13:44 - 2015-11-07 13:44 - 00000000 ____D C:\Users\welke\AppData\Roaming\Mozilla 2015-11-07 13:44 - 2015-11-07 13:44 - 00000000 ____D C:\Users\welke\AppData\Local\Mozilla 2015-11-07 13:44 - 2015-11-07 13:44 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-11-07 13:44 - 2015-11-07 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-11-07 13:41 - 2015-11-07 13:41 - 00016148 _____ C:\Windows\system32\DESKTOP-0TMHTJS_welke_HistoryPrediction.bin 2015-11-07 13:41 - 2015-11-07 13:41 - 00000000 _____ C:\Users\welke\Downloads\Firefox Setup Stub 42_0_exe.wsnh0m2.partial 2015-11-07 08:24 - 2015-11-07 08:24 - 00000000 _____ C:\Users\welke\Downloads\Defogger_exe.ykl7ybv.partial 2015-11-07 08:16 - 2015-11-07 08:16 - 00000000 ___HD C:\OneDriveTemp 2015-11-06 22:48 - 2015-11-07 13:09 - 00000275 _____ C:\Windows\WindowsUpdate.log 2015-11-06 21:12 - 2015-11-06 21:12 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\7129515D.sys 2015-11-06 21:06 - 2015-11-06 21:42 - 00448512 _____ (OldTimer Tools) C:\Users\welke\Downloads\TFC.exe 2015-11-06 21:06 - 2015-11-06 21:06 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-11-06 20:45 - 2015-11-06 20:45 - 00000000 ____D C:\Program Files (x86)\ESET 2015-11-06 20:44 - 2015-11-06 20:45 - 02870984 _____ (ESET) C:\Users\welke\Downloads\esetsmartinstaller_deu.exe 2015-11-06 20:40 - 2015-11-06 20:40 - 01713664 _____ C:\Users\welke\Downloads\adwcleaner_5.018.exe 2015-11-06 20:40 - 2015-11-06 20:40 - 00000000 ____D C:\AdwCleaner 2015-11-05 19:50 - 2015-11-05 19:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bitComposer Games 2015-11-05 17:25 - 2015-11-02 14:18 - 00102520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-11-05 17:24 - 2015-11-02 23:49 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 42914096 _____ C:\Windows\system32\nvcompiler.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 37882160 _____ C:\Windows\SysWOW64\nvcompiler.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 22343800 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 18389112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 16561128 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 15932376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 15839200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 14844304 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 13533416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 12040952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 02876536 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 02496632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 01905272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435887.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435887.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 01016544 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 01013960 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00877688 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00823232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00820672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00689784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00601240 _____ C:\Windows\system32\nvmcumd.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00539464 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00503416 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00501056 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00446584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00445216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00422568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00413816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-11-05 17:24 - 2015-11-02 18:03 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-11-04 13:03 - 2015-11-04 13:03 - 00000000 ____D C:\Users\welke\Documents\Anno 2205 2015-11-03 11:42 - 2015-11-04 06:46 - 00000000 ____D C:\Windows\Minidump 2015-11-03 05:23 - 2015-11-03 05:27 - 00000000 ____D C:\Users\welke\AppData\Roaming\endless-sky 2015-10-30 12:03 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2015-10-30 12:03 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2015-10-30 12:03 - 2015-10-21 13:45 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-10-30 12:03 - 2015-10-21 13:44 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-10-30 12:03 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll 2015-10-30 12:03 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-30 12:03 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-30 12:03 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2015-10-30 12:03 - 2015-10-21 12:59 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll 2015-10-30 12:03 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2015-10-30 12:03 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2015-10-30 12:03 - 2015-10-21 12:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll 2015-10-30 12:03 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-10-30 12:03 - 2015-10-21 12:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll 2015-10-30 12:03 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2015-10-30 12:03 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-30 12:03 - 2015-10-21 12:44 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll 2015-10-30 12:03 - 2015-10-21 12:44 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2015-10-30 12:03 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll 2015-10-30 12:03 - 2015-10-21 12:42 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll 2015-10-30 12:03 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2015-10-30 12:03 - 2015-10-21 12:40 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll 2015-10-30 12:03 - 2015-10-21 12:38 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll 2015-10-30 12:03 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll 2015-10-30 12:03 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-30 12:03 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-30 12:03 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2015-10-30 12:03 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2015-10-30 12:03 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2015-10-30 12:03 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-30 12:03 - 2015-10-21 06:03 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll 2015-10-30 12:03 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll 2015-10-30 12:03 - 2015-10-21 05:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll 2015-10-30 12:03 - 2015-10-21 05:55 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll 2015-10-29 19:46 - 2015-10-29 19:46 - 00000000 ____D C:\Users\welke\Documents\Stronghold 2015-10-29 19:45 - 2015-10-29 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios 2015-10-29 14:46 - 2015-10-29 14:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange 2015-10-29 14:31 - 2015-10-29 14:31 - 00000000 ____D C:\Steamapp 2015-10-29 06:54 - 2015-10-29 06:54 - 00002759 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Device Recovery Tool.lnk 2015-10-29 06:54 - 2015-10-29 06:54 - 00002747 _____ C:\Users\Public\Desktop\Windows Device Recovery Tool.lnk 2015-10-29 06:54 - 2015-10-29 06:54 - 00000000 ____D C:\ProgramData\HTC 2015-10-29 06:54 - 2015-10-29 06:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Care Suite 2015-10-26 14:28 - 2015-10-26 14:28 - 00000118 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc 2015-10-26 14:28 - 2015-10-26 14:28 - 00000000 ____D C:\Users\welke\AppData\Roaming\Fatshark 2015-10-26 14:24 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-10-26 14:24 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-10-26 14:24 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-10-26 14:24 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-10-26 14:23 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-10-26 14:23 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-10-26 14:23 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-10-26 14:23 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-10-26 14:23 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-10-26 14:23 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-10-26 14:23 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-10-26 14:23 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-10-26 14:23 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-10-26 14:23 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-10-26 14:23 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-10-26 14:23 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-10-26 14:23 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-10-26 14:23 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-10-26 14:23 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-10-26 14:23 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-10-26 14:23 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-10-26 14:23 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-10-26 14:23 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-10-26 14:23 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-10-26 14:23 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-10-26 14:23 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-10-26 14:23 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-10-26 14:23 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-10-26 14:23 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-10-26 14:23 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-10-26 14:23 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-10-26 14:23 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-10-26 14:23 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-10-26 14:23 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-10-26 14:23 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-10-26 14:23 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-10-26 14:23 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-10-26 14:23 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-10-26 14:23 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-10-26 14:23 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-10-26 14:23 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-10-26 14:23 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-10-26 14:23 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-10-26 14:23 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-10-26 14:23 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-10-26 14:23 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-10-26 14:23 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-10-26 14:23 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-10-26 14:23 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-10-26 14:23 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-10-26 14:23 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-10-26 14:23 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-10-26 14:23 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-10-26 14:23 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-10-26 14:23 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-10-26 14:23 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-10-26 14:23 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-10-26 14:23 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-10-26 14:23 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-10-26 14:23 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-10-26 14:23 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-10-26 14:23 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-10-26 14:23 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-10-26 14:23 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-10-26 14:23 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-10-26 14:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-10-26 14:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-10-26 14:23 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-10-26 14:23 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-10-26 14:23 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-10-26 14:23 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-10-26 14:23 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-10-26 14:23 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-10-26 14:23 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-10-26 14:23 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-10-26 14:23 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-10-26 14:23 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-10-26 14:23 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-10-26 14:23 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-10-26 14:23 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-10-26 14:23 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2015-10-26 14:23 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-10-26 14:23 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-10-26 14:23 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-10-26 14:23 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-10-26 14:23 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-10-26 14:23 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-10-26 14:23 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-10-26 14:23 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-10-26 14:23 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-10-26 14:23 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-10-26 14:23 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-10-26 14:23 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-10-26 14:23 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-10-26 14:23 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-10-26 14:23 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-10-26 14:23 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-10-26 14:23 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-10-26 14:23 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-10-26 14:23 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-10-26 14:23 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-10-26 14:23 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-10-26 14:23 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-10-26 14:23 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-10-26 14:23 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-10-26 14:23 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-10-26 14:23 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-10-26 14:23 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-10-26 14:23 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-10-26 14:23 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-10-26 14:23 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-10-26 14:23 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-10-26 14:23 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-10-26 14:23 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-10-26 14:23 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-10-22 18:30 - 2015-10-22 18:30 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Kyy Games 2015-10-22 09:20 - 2015-10-22 09:20 - 00000000 ____D C:\Users\welke\Documents\Klei 2015-10-22 05:47 - 2015-10-22 05:47 - 00000000 ____D C:\Users\welke\AppData\LocalLow\noio 2015-10-22 05:47 - 2015-10-22 05:47 - 00000000 ____D C:\ProgramData\SkidRow 2015-10-22 05:46 - 2015-10-22 05:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raw Fury 2015-10-20 21:27 - 2015-10-20 21:27 - 00001710 _____ C:\Users\welke\Desktop\Mail.lnk 2015-10-20 19:42 - 2015-10-20 19:42 - 00000000 ____D C:\Users\welke\AppData\Local\BANDAI NAMCO Games 2015-10-20 19:25 - 2015-10-20 19:25 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2015-10-20 19:25 - 2015-10-20 19:25 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2015-10-20 19:25 - 2015-10-20 19:25 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2015-10-20 19:25 - 2015-10-20 19:25 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2015-10-20 19:25 - 2015-10-20 19:25 - 00000000 ____D C:\Program Files (x86)\OpenAL 2015-10-20 19:24 - 2015-10-20 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grandia II Anniversary Edition [GOG.com] 2015-10-19 19:34 - 2015-10-19 19:34 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Jotunn Games 2015-10-18 15:21 - 2015-10-18 15:21 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Zero Sum Games 2015-10-18 13:38 - 2015-10-18 13:38 - 00000000 ____D C:\Users\welke\AppData\Roaming\uplay 2015-10-18 08:30 - 2015-10-18 08:30 - 00000000 ____D C:\Users\welke\Documents\Planetbase 2015-10-18 08:17 - 2015-10-18 08:17 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2015-10-18 08:16 - 2015-10-18 08:17 - 00000000 ____D C:\Users\welke\Documents\Reus 2015-10-18 08:16 - 2015-10-18 08:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reus 2015-10-18 07:42 - 2015-10-18 07:42 - 00000000 ____D C:\Users\welke\AppData\Local\DeathwatchGame 2015-10-18 07:37 - 2015-10-18 07:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warhammer 40000 Deathwatch Enhanced Edition 2015-10-16 21:48 - 2015-10-16 21:48 - 00000734 _____ C:\Users\welke\Desktop\Downloads - Verknüpfung.lnk 2015-10-16 09:13 - 2015-10-16 09:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2015-10-15 21:10 - 2015-10-15 21:10 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Obsidian Entertainment 2015-10-15 20:10 - 2015-10-15 20:15 - 00000000 ____D C:\Users\welke\Documents\Endless Legend 2015-10-15 08:43 - 2015-10-15 08:43 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Adobe 2015-10-15 08:39 - 2015-11-04 12:48 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-15 08:39 - 2015-11-01 09:09 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-10-15 08:39 - 2015-10-15 08:43 - 00000000 ____D C:\ProgramData\Adobe 2015-10-15 08:39 - 2015-10-15 08:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2015-10-15 08:38 - 2015-10-15 08:43 - 00000000 ____D C:\Users\welke\AppData\Local\Adobe 2015-10-14 20:57 - 2015-10-25 10:47 - 00000000 ____D C:\Windows\SysWOW64\directx 2015-10-14 20:29 - 2015-10-14 20:29 - 00000000 ____D C:\Users\welke\AppData\Roaming\Steam 2015-10-14 20:29 - 2015-10-14 20:29 - 00000000 ____D C:\Users\welke\AppData\Local\UnrealEngine 2015-10-14 20:29 - 2015-10-14 20:29 - 00000000 ____D C:\Users\welke\AppData\Local\Ancestory 2015-10-14 20:26 - 2015-10-14 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Age of Decadence 2015-10-14 20:23 - 2015-10-14 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ancestory 2015-10-13 22:06 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-13 22:06 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-10-13 22:06 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-10-13 22:06 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-13 22:06 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-10-13 22:06 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-13 22:06 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-10-13 22:06 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-13 22:06 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-10-13 22:06 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-10-13 22:06 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-10-13 22:06 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-13 22:06 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi 2015-10-13 22:06 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2015-10-13 22:06 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-13 22:06 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll 2015-10-13 22:06 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll 2015-10-13 22:06 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-13 22:06 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll 2015-10-13 22:06 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-13 22:06 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll 2015-10-13 22:06 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll 2015-10-13 22:06 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-13 22:06 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-13 22:06 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2015-10-13 22:06 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll 2015-10-13 22:06 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2015-10-13 22:06 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll 2015-10-13 22:06 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll 2015-10-13 22:06 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-10-13 22:06 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll 2015-10-13 22:06 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-13 22:06 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-13 22:06 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll 2015-10-13 22:06 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll 2015-10-13 22:06 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-10-13 22:06 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll 2015-10-13 19:47 - 2015-10-13 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wasteland 2 - Director's Cut [GOG.com] 2015-10-12 20:39 - 2015-10-12 20:39 - 00000000 ____D C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Gothic 2015-10-11 20:55 - 2015-10-22 18:33 - 00000000 ____D C:\ProgramData\Steam 2015-10-11 20:55 - 2015-10-11 20:55 - 00000000 ____D C:\Users\welke\AppData\Local\My Games 2015-10-11 20:25 - 2015-10-11 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle for Wesnoth 1.12.4 2015-10-11 20:18 - 2015-10-11 20:22 - 357105928 _____ C:\Users\welke\Downloads\wesnoth-1.12.4a-win32.exe 2015-10-09 07:08 - 2015-10-09 07:08 - 00000000 ____D C:\Users\welke\Documents\Wizards of the Coast 2015-10-08 18:40 - 2015-11-07 08:20 - 00004172 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{52210818-7307-40AE-8719-E5B135E42F2B} 2015-10-08 18:29 - 2015-10-08 18:30 - 00002543 _____ C:\Users\welke\Desktop\hide.me VPN.pbk 2015-10-08 12:25 - 2015-10-08 12:25 - 00000000 ____D C:\Windows\system32\SleepStudy 2015-10-08 11:50 - 2015-10-08 11:50 - 00003005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Program Updates.lnk 2015-10-08 11:50 - 2015-10-08 11:50 - 00000033 _____ C:\csb.log 2015-10-08 11:50 - 2015-10-08 11:50 - 00000000 ____D C:\ProgramData\InstallShield 2015-10-08 11:50 - 2015-10-08 11:50 - 00000000 ____D C:\Program Files\GIGABYTE 2015-10-08 11:50 - 2015-10-08 11:50 - 00000000 ____D C:\Program Files (x86)\GIGABYTE 2015-10-08 11:50 - 2013-03-27 08:51 - 00021072 _____ C:\Windows\system32\Drivers\UsbCharger.sys 2015-10-08 11:50 - 2013-02-19 11:18 - 00021584 _____ C:\Windows\system32\Drivers\AppleCharger.sys 2015-10-08 11:50 - 2010-04-06 15:30 - 00031272 _____ C:\Windows\system32\AppleChargerSrv.exe 2015-10-08 11:48 - 2015-10-08 11:48 - 01817678 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2015-10-08 11:48 - 2015-10-08 11:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-10-08 11:48 - 2015-10-08 11:48 - 00000000 ____D C:\Users\welke\Intel 2015-10-08 11:48 - 2015-10-08 11:48 - 00000000 ____D C:\Users\welke\AppData\Roaming\Intel Corporation 2015-10-08 11:48 - 2015-10-08 11:48 - 00000000 ____D C:\ProgramData\Intel 2015-10-08 11:47 - 2012-10-24 19:18 - 00723088 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys 2015-10-08 11:47 - 2012-10-24 19:18 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2015-10-08 11:46 - 2013-02-26 11:04 - 00429097 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2015-10-08 11:46 - 2013-02-26 09:41 - 19089920 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2015-10-08 11:46 - 2013-02-26 06:30 - 03685448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2015-10-08 11:46 - 2013-02-21 10:26 - 00858032 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2015-10-08 11:46 - 2013-02-21 10:26 - 00148912 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2015-10-08 11:46 - 2013-02-21 10:25 - 00569256 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2015-10-08 11:46 - 2013-02-21 09:11 - 00131656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2015-10-08 11:46 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2015-10-08 11:46 - 2013-02-20 03:55 - 00912960 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2015-10-08 11:46 - 2013-02-19 11:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2015-10-08 11:46 - 2013-02-19 08:11 - 02751560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2015-10-08 11:46 - 2013-02-08 08:36 - 03155536 _____ C:\Windows\system32\Drivers\rtvienna.dat 2015-10-08 11:46 - 2013-02-05 13:32 - 01658952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2015-10-08 11:46 - 2013-02-02 14:30 - 02099480 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2015-10-08 11:46 - 2013-02-02 14:29 - 13975320 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2015-10-08 11:46 - 2013-02-02 14:29 - 01898776 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2015-10-08 11:46 - 2013-01-23 09:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2015-10-08 11:46 - 2013-01-16 23:05 - 00801560 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2015-10-08 11:46 - 2013-01-16 23:05 - 00635160 _____ (SRS Labs, Inc.) C:\Windows\system32\sltech64.dll 2015-10-08 11:46 - 2013-01-16 23:05 - 00518936 _____ (SRS Labs, Inc.) C:\Windows\system32\sl3apo64.dll 2015-10-08 11:46 - 2013-01-16 23:05 - 00215320 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2015-10-08 11:46 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2015-10-08 11:46 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2015-10-08 11:46 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2015-10-08 11:46 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2015-10-08 11:46 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2015-10-08 11:46 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2015-10-08 11:46 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2015-10-08 11:46 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2015-10-08 11:46 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2015-10-08 11:46 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2015-10-08 11:46 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2015-10-08 11:46 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2015-10-08 11:46 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2015-10-08 11:46 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2015-10-08 11:46 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2015-10-08 11:46 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2015-10-08 11:46 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2015-10-08 11:46 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2015-10-08 11:46 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2015-10-08 11:46 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2015-10-08 11:46 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2015-10-08 11:45 - 2015-10-08 11:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-10-08 11:45 - 2015-10-08 11:47 - 00003302 _____ C:\RHDSetup.log 2015-10-08 11:45 - 2015-10-08 11:47 - 00000189 _____ C:\Install.log 2015-10-08 11:45 - 2015-10-08 11:47 - 00000000 ___HD C:\Program Files (x86)\Temp 2015-10-08 11:45 - 2015-10-08 11:47 - 00000000 ____D C:\Program Files (x86)\Realtek 2015-10-08 11:45 - 2015-10-08 11:45 - 00000000 ____D C:\Users\welke\AppData\Roaming\InstallShield 2015-10-08 11:45 - 2013-02-02 14:30 - 00907544 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2015-10-08 11:45 - 2013-01-21 18:41 - 00204864 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2015-10-08 11:45 - 2013-01-17 12:32 - 00719640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2015-10-08 11:45 - 2013-01-16 09:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2015-10-08 11:45 - 2013-01-15 03:33 - 02722848 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2015-10-08 11:45 - 2012-12-17 10:49 - 02032584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2015-10-08 11:45 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2015-10-08 11:45 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2015-10-08 11:45 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2015-10-08 11:45 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2015-10-08 11:45 - 2012-09-10 13:06 - 00612728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2015-10-08 11:45 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2015-10-08 11:45 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2015-10-08 11:45 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2015-10-08 11:45 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2015-10-08 11:45 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2015-10-08 11:44 - 2013-02-27 14:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-10-08 11:43 - 2015-10-08 11:43 - 00025640 ____N (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2015-10-08 11:43 - 2015-10-08 11:43 - 00000010 _____ C:\Windows\GSetup.ini 2015-10-08 11:43 - 2009-08-27 08:04 - 00207400 ____R () C:\Windows\GSetup.exe 2015-10-08 10:54 - 2015-10-08 10:54 - 00000000 ____D C:\Users\welke\Documents\Ashampoo Burning Studio FREE 2015-10-08 09:43 - 2015-10-08 09:43 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Ludeon Studios 2015-10-08 06:04 - 2015-10-08 06:04 - 00000000 ____D C:\Users\welke\Documents\Darkest 2015-10-08 05:46 - 2015-10-08 05:46 - 00000000 ____D C:\Users\welke\AppData\LocalLow\MuHa Games 2015-10-08 04:57 - 2015-10-08 04:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Master of Orion 2 [GOG.com] 2015-10-08 04:42 - 2015-11-05 19:51 - 00000000 ____D C:\Users\welke\Documents\My Games 2015-10-08 04:41 - 2015-10-08 04:41 - 00000000 ____D C:\Users\welke\Documents\WB Games ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-11-07 13:26 - 2015-10-07 12:27 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-11-07 13:18 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\sru 2015-11-07 12:30 - 2015-10-07 11:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-11-07 09:50 - 2015-10-07 10:47 - 01793546 _____ C:\Windows\system32\PerfStringBackup.INI 2015-11-07 09:50 - 2015-09-10 06:10 - 00772138 _____ C:\Windows\system32\perfh007.dat 2015-11-07 09:50 - 2015-09-10 06:10 - 00154500 _____ C:\Windows\system32\perfc007.dat 2015-11-07 09:08 - 2015-10-07 12:19 - 00000000 ____D C:\Users\welke\AppData\Local\JDownloader v2.0 2015-11-07 08:16 - 2015-10-07 10:40 - 00000000 ___RD C:\Users\welke\OneDrive 2015-11-07 08:14 - 2015-10-07 10:46 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-11-07 08:13 - 2015-10-07 10:41 - 00000000 ____D C:\ProgramData\NVIDIA 2015-11-07 08:13 - 2015-07-30 22:52 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-11-06 23:01 - 2015-10-07 10:38 - 00000000 ____D C:\Users\welke 2015-11-06 22:50 - 2015-10-07 10:46 - 00000424 _____ C:\Users\welke\Desktop\Dieser PC - Verknüpfung.lnk 2015-11-06 22:35 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\NDF 2015-11-06 22:33 - 2015-10-07 11:00 - 00000000 ____D C:\Users\welke\AppData\Roaming\Hide.me 2015-11-06 20:29 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\Recovery 2015-11-06 19:51 - 2015-10-07 11:00 - 00000000 ____D C:\Program Files (x86)\hide.me VPN 2015-11-06 19:08 - 2015-09-10 06:13 - 00000000 ____D C:\Windows\OCR 2015-11-06 19:08 - 2015-07-10 10:05 - 00524288 ___SH C:\Windows\system32\config\BBI 2015-11-06 19:00 - 2015-10-07 15:32 - 00000000 ____D C:\Users\welke\AppData\Roaming\vlc 2015-11-06 16:21 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\AppReadiness 2015-11-05 19:51 - 2015-10-07 16:35 - 00000000 ____D C:\Users\welke\Desktop\Games 2015-11-05 17:25 - 2015-10-07 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-11-05 17:25 - 2015-10-07 10:41 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-11-04 06:25 - 2015-10-07 10:40 - 11227280 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-11-03 09:02 - 2015-10-07 10:40 - 00002358 _____ C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-11-02 23:49 - 2015-10-07 10:40 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2015-11-02 23:49 - 2015-10-07 10:40 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-11-02 18:03 - 2015-10-07 11:58 - 03126984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-11-02 18:03 - 2015-10-07 10:41 - 18486504 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-11-02 18:03 - 2015-10-07 10:40 - 12870384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-11-02 18:03 - 2015-10-07 10:40 - 03540360 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-11-02 18:03 - 2015-10-07 10:40 - 00034493 _____ C:\Windows\system32\nvinfo.pb 2015-11-02 14:36 - 2015-10-07 10:41 - 06358832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-11-02 14:36 - 2015-10-07 10:41 - 02983032 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-11-02 14:36 - 2015-10-07 10:41 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-11-02 14:36 - 2015-10-07 10:41 - 00938800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-11-02 14:36 - 2015-10-07 10:41 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-11-02 14:36 - 2015-10-07 10:41 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-11-02 06:31 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\rescache 2015-11-01 13:29 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-30 17:17 - 2015-07-30 23:25 - 00000000 ____D C:\Windows\CbsTemp 2015-10-29 19:46 - 2015-07-10 04:24 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe 2015-10-29 19:46 - 2015-07-10 04:24 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe 2015-10-29 19:46 - 2015-07-10 04:24 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnlobby.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll 2015-10-29 19:46 - 2015-07-10 04:14 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe 2015-10-29 19:46 - 2015-07-10 04:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\dpnlobby.dll 2015-10-29 19:46 - 2015-07-10 04:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2015-10-29 19:46 - 2015-07-10 04:13 - 00480256 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll 2015-10-29 06:53 - 2015-10-07 15:48 - 00000000 ____D C:\ProgramData\Package Cache 2015-10-28 08:42 - 2015-10-07 10:41 - 06027430 _____ C:\Windows\system32\nvcoproc.bin 2015-10-27 09:56 - 2015-10-07 10:39 - 00000000 ____D C:\Users\welke\AppData\Local\Packages 2015-10-24 21:52 - 2015-10-07 12:27 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-24 21:52 - 2015-10-07 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-24 21:52 - 2015-10-07 12:27 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-21 09:40 - 2015-10-07 11:14 - 00925064 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2015-10-21 09:40 - 2015-10-07 11:14 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2015-10-21 09:40 - 2015-06-26 22:58 - 00087944 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys 2015-10-21 09:39 - 2015-10-07 11:14 - 00227512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2015-10-18 12:32 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\LiveKernelReports 2015-10-16 04:10 - 2015-07-30 23:43 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-10-16 04:10 - 2015-07-30 23:43 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-15 08:57 - 2015-10-07 15:10 - 00000000 ____D C:\Windows\system32\MRT 2015-10-15 08:56 - 2015-10-07 15:10 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-15 08:43 - 2015-10-07 10:39 - 00000000 ____D C:\Users\welke\AppData\Roaming\Adobe 2015-10-13 20:59 - 2015-10-07 10:41 - 00000000 ____D C:\Users\welke\AppData\Local\Comms 2015-10-13 10:44 - 2015-10-07 11:23 - 00000000 ____D C:\Windows.old 2015-10-12 20:40 - 2015-10-07 10:39 - 00000000 ____D C:\Users\welke\AppData\Local\VirtualStore 2015-10-12 04:05 - 2015-10-07 12:00 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-10-12 04:05 - 2015-10-07 12:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-10-12 04:04 - 2015-10-07 12:00 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-10-12 04:04 - 2015-10-07 12:00 - 01710752 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-10-11 21:00 - 2015-10-07 16:37 - 00000000 ____D C:\Program Files (x86)\RisenMDS 2015-10-11 19:52 - 2015-10-07 13:54 - 00001135 _____ C:\Users\welke\Desktop\Steam - Verknüpfung.lnk 2015-10-08 11:48 - 2015-10-07 10:46 - 00000000 ____D C:\Program Files\Intel 2015-10-08 11:47 - 2015-10-07 10:44 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2015-10-08 11:45 - 2015-10-07 10:47 - 00000000 ____D C:\Program Files (x86)\Intel 2015-10-08 06:04 - 2015-10-07 16:34 - 00000000 ____D C:\Users\welke\AppData\Roaming\NVIDIA 2015-10-08 05:41 - 2015-10-07 12:00 - 00000000 ____D C:\Users\welke\AppData\Local\NVIDIA 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ___SD C:\Windows\SysWOW64\F12 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ___SD C:\Windows\system32\F12 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ___RD C:\Windows\PurchaseDialog 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\system32\SystemResetPlatform 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\Provisioning 2015-10-08 05:30 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\L2Schemas 2015-10-08 04:31 - 2015-07-30 23:42 - 00000000 ____D C:\Windows\appcompat ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-10-07 10:44 - 2015-10-07 10:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-10-26 14:28 - 2015-10-26 14:28 - 0000118 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-11-06 18:23 ==================== Ende von FRST.txt ============================ FRST Additions Logfile: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-11-2015
durchgeführt von welke (2015-11-07 13:47:12)
Gestartet von C:\Users\welke\Desktop
Windows 10 Home (X64) (2015-10-07 09:37:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1386018650-2852012181-2027807497-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1386018650-2852012181-2027807497-503 - Limited - Disabled)
Gast (S-1-5-21-1386018650-2852012181-2027807497-501 - Limited - Disabled)
welke (S-1-5-21-1386018650-2852012181-2027807497-1001 - Administrator - Enabled) => C:\Users\welke
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
Ancestory (HKLM-x32\...\Ancestory_is1) (Version: - )
ANNO 2205 Gold Edition MULTi2 1.0 (HKLM-x32\...\ANNO 2205 Gold Edition MULTi2 1.0) (Version: - )
ARK Survival Evolved Early Access Incl. Update v.204.1 v.204.1 (HKLM-x32\...\ARK Survival Evolved Early Access Incl. Update v.204.1 v.204.1) (Version: - )
Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Battle for Wesnoth 1.12.4 (HKLM-x32\...\Battle for Wesnoth 1.12.4) (Version: 1.12.4 - )
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
Deutschland Digital 1.0.0 (HKLM-x32\...\Deutschland Digital_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
Endless Sky (HKLM-x32\...\Steam App 404410) (Version: - Michael Zahniser)
Expeditions - Conquistador (HKLM-x32\...\Expeditions - Conquistador_is1) (Version: - )
Freddy's Texture Patch BETA (HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Gothic Texture Patch - Freddy) (Version: 0.52 - Fred Metger)
Grandia II Anniversary Edition (HKLM-x32\...\1435140754_is1) (Version: 2.0.0.3 - GOG.com)
hide.me VPN Version 1.1.5 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.1.5 - eVenture Limited)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Kingdom (HKLM-x32\...\Kingdom_is1) (Version: - )
Knights of Pen and Paper 2 (HKLM\...\S25pZ2h0c29mUGVuYW5kUGFwZXIy_is1) (Version: 1 - )
Life Is Strange version EP 1 bis 5 (HKLM-x32\...\{6C0661F0-77D2-4481-B8DF-A8B3002082D6}_is1) (Version: EP 1 bis 5 - Square Enix)
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Magic: The Gathering — Duels of the Planeswalkers 2012 (HKLM-x32\...\Steam App 49470) (Version: - Stainless Games Ltd)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Master of Orion 2 (HKLM-x32\...\1207661633_is1) (Version: 2.1.0.18 - GOG.com)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Might and Magic Heroes VII Deluxe Edition MULTI2 1.1 31895 (HKLM-x32\...\Might and Magic Heroes VII Deluxe Edition MULTI2 1.1 31895) (Version: - )
Might and Magic Heroes VII Deluxe Edition Update 1 MULTI2 1.1 31895 (HKLM-x32\...\Might and Magic Heroes VII Deluxe Edition Update 1 MULTI2 1.1 31895) (Version: - )
Mozilla Firefox 42.0 (x64 de) (HKLM\...\Mozilla Firefox 42.0 (x64 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 3.0.0.18 - MSI)
Mugen Souls (HKLM\...\TXVnZW5Tb3Vscw==_is1) (Version: 1 - )
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.87 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.87 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
ON_OFF Charge 2 B13.0403.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.7.1025.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Reus Version 1.4.0.0H (HKLM-x32\...\{24BCF0E0-FCD8-470A-BEB2-5862BD158D83}_is1) (Version: 1.4.0.0H - Abbey Games)
Risen - ModStarter 1.3.4.1 (Online Mods DB version) (HKLM-x32\...\Risen - ModStarter_is1) (Version: - LordOfWAR(WorldOfRisen.de), Odin68(Mighty DWARF Mod-Team))
Risen HD Collector's Edition (HKLM-x32\...\{4E3D1AC1-D48B-45F4-BAE1-91BAE7D1FE7D}_is1) (Version: v1.2 - RAF)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Sonic Lost World (HKLM-x32\...\Sonic Lost World_is1) (Version: - )
Stronghold HD (HKLM-x32\...\Stronghold HD_is1) (Version: - )
Tales of Zestiria MULTi2 1.0 (HKLM-x32\...\Tales of Zestiria MULTi2 1.0) (Version: - )
The Legend of Heroes Trails in the Sky SC (HKLM-x32\...\The Legend of Heroes Trails in the Sky SC_is1) (Version: - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.8.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Warhammer 40000 Deathwatch Enhanced Edition (HKLM-x32\...\Warhammer 40000 Deathwatch Enhanced Edition_is1) (Version: - )
Warhammer End Times Vermintide Collectors Edition MULTI5 1.0 (HKLM-x32\...\Warhammer End Times Vermintide Collectors Edition MULTI5 1.0) (Version: - )
Warhammer End Times Vermintide Collectors Edition Update 1 MULTI5 1.0.1 (HKLM-x32\...\Warhammer End Times Vermintide Collectors Edition Update 1 MULTI5 1.0.1) (Version: - )
Wasteland 2 - Director's Cut (HKLM-x32\...\1444386007_is1) (Version: 2.0.0.1 - GOG.com)
Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft)
Worms Reloaded (HKLM-x32\...\Steam App 22600) (Version: - Team17 Software Ltd.)
Your Software Deals 1.0.0 (HKLM-x32\...\Your Software Deals_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1386018650-2852012181-2027807497-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\welke\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-07-30 23:42 - 2015-11-06 22:35 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts
# ::1 localhost
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {75DDE17A-855F-40C4-AD25-9A8637BD8148} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {C1CBC738-8879-4BA0-83D3-CCA6517B7788} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {EAF1F564-59DF-42EF-BD20-1E1E01D4EDD1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-15] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-09-10 06:12 - 2015-09-10 06:12 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-10-07 10:41 - 2015-11-02 14:36 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-10 06:12 - 2015-09-10 06:12 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-10-07 15:10 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-10-07 15:10 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-10-07 15:09 - 2015-09-17 06:43 - 02028544 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesService.dll
2015-10-07 15:09 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-07 15:09 - 2015-09-17 06:42 - 00619008 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SignalsManager.dll
2015-10-07 15:09 - 2015-09-17 06:43 - 00928768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesBackgroundTasks.dll
2015-10-07 15:09 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-07 15:09 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-07 15:10 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-07 15:09 - 2015-09-17 06:49 - 00884736 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2015-10-07 15:10 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-16 20:33 - 2015-09-16 20:33 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-11-07 09:08 - 2015-11-07 09:08 - 00566439 _____ () C:\Users\welke\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2015-11-07 09:08 - 2015-11-07 09:08 - 04078962 _____ () C:\Users\welke\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2015-09-10 06:12 - 2015-09-10 06:12 - 00293376 _____ () C:\Windows\SYSTEM32\textinputframework.dll
2015-10-27 16:53 - 2015-10-27 16:53 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-10-27 16:53 - 2015-10-27 16:53 - 10958848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-10-27 16:53 - 2015-10-27 16:53 - 00245760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-10-22 16:10 - 2015-10-22 16:10 - 03498496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1510.13020.0_x64__8wekyb3d8bbwe\Calculator.exe
2015-11-05 16:14 - 2015-11-05 16:14 - 08717824 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-11-05 16:14 - 2015-11-05 16:14 - 02371072 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2015-07-08 22:18 - 2015-07-08 22:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll
2015-10-07 12:00 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-11 20:30 - 2015-10-05 17:18 - 00778752 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 15:17 - 2015-07-03 17:12 - 04962816 _____ () D:\Program Files (x86)\Steam\v8.dll
2014-12-11 20:30 - 2015-11-05 17:44 - 02541648 _____ () D:\Program Files (x86)\Steam\video.dll
2015-01-20 15:17 - 2015-07-03 17:12 - 01556992 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 15:17 - 2015-07-03 17:12 - 01187840 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2014-12-11 20:30 - 2015-09-24 01:33 - 02549248 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2014-12-11 20:30 - 2015-09-24 01:33 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2014-12-11 20:30 - 2015-09-24 01:33 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2014-12-11 20:30 - 2015-09-24 01:33 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2014-12-11 20:30 - 2015-09-24 01:33 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2014-12-11 20:30 - 2015-11-05 17:44 - 00806992 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-12-11 20:30 - 2015-10-08 23:20 - 45010208 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\Software\Classes\.exe: => <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\welke\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\cortana-face-photo-microsoft-windows-10-assistant-bot-hd.jpg
DNS Servers: 46.166.179.36 - 46.166.179.38
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{A3775EA3-47D0-4E84-B808-DAA637B16D88}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{50A71A63-216E-4582-A067-CEBC604ADBAF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9F3FBEE2-7C99-4248-A9FB-E381BD8A587C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{FC126EEB-998B-4B95-A828-4B5B2FB0C3B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{587B0E86-70EC-4F5B-B8FA-E32B25A8FE12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{D98FD31B-5841-433F-9906-FC7B65F60608}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2112CD1F-BC35-44BC-80CD-AFDADE8A3E9A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5D721D43-BBF5-4084-92C9-B93B654A4197}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{786984EC-9501-4FD0-9BAE-C9C4E123FFB8}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CE9821E9-6AC0-4629-B2E2-56166E033B2C}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{78EF29CE-A7C8-4A19-A958-94D870BF9D03}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4511F940-7141-40AF-B551-520F3A68A5D5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{1ABAA08D-02D5-464E-B0C9-4AC817B7C6C2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{1E35E0A7-B4A4-44FE-A947-6F0EFD6802F5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Magic the Gathering DotP 2012\Magic_2012.exe
FirewallRules: [{99F9F125-4FF5-4B63-8B2E-90FB5A4D1663}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Magic the Gathering DotP 2012\Magic_2012.exe
FirewallRules: [{FBC0DF8D-61CA-4B7E-BC46-D0E7DEEC7902}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Realms of Arkania\schick.exe
FirewallRules: [{2707DCA9-D340-4512-BCDF-07AE7B8BBAA5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Realms of Arkania\schick.exe
FirewallRules: [{D35A6693-F337-43AC-AEC0-7CCB15B92988}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Realms of Arkania\Blade of Destiny HD Mod Control.exe
FirewallRules: [{2456C60D-3179-4487-A0CF-43B97F9ABF80}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Realms of Arkania\Blade of Destiny HD Mod Control.exe
FirewallRules: [{141C4F5D-08E9-4E51-89F2-B95B1923F694}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{0F7DC1D9-4B69-4B32-8B88-A7671B3BBCE5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{17055817-8098-4570-A636-8006CC4E8075}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{D9079E42-6D4F-4BB7-91B8-051297CD07C0}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{3CA2E1D9-1052-444B-BD7C-4B02746C8E51}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Worms Reloaded\WormsReloaded.exe
FirewallRules: [{E1E677A3-E263-4719-B0D4-1A898D0B227B}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Worms Reloaded\WormsReloaded.exe
FirewallRules: [{A8651C79-1F1A-4F95-A830-7216C46C5F0B}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Labyronia\Game.exe
FirewallRules: [{1387F500-792E-40B8-A095-CB75A3F9FED0}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Labyronia\Game.exe
FirewallRules: [{3311222B-8271-4913-B6BB-F052F03FA486}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\SotA\Shroud of the Avatar.exe
FirewallRules: [{423CE609-15CF-4EB1-B409-F92C14536375}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\SotA\Shroud of the Avatar.exe
FirewallRules: [{3299D98B-0318-4EC2-8D70-333F3B10DFA0}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{2C50A16F-0BF0-4908-B072-23C177952358}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{A750ED39-C2E2-4AED-88D8-C73868B3FA42}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9A81A952-57ED-4CEE-8295-ED2491C8D40C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/07/2015 08:21:27 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (11/07/2015 08:15:45 AM) (Source: ESENT) (EventID: 439) (User: )
Description: SettingSyncHost (7204) {976616A4-1892-4ED8-B65B-333C88B90F01}: Die Shadowkopfzeile für Datei "C:\Users\welke\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb" konnte nicht geschrieben werden. Fehler -1032.
Error: (11/07/2015 08:15:45 AM) (Source: ESENT) (EventID: 490) (User: )
Description: SettingSyncHost (7204) {976616A4-1892-4ED8-B65B-333C88B90F01}: Der Versuch, die Datei "C:\Users\welke\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
(HRESULT : 0x8e5e0210) (0x8e5e0210)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
Error: (11/07/2015 08:14:11 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - base\appmodel\search\search\ytrip\common\util\jetutil.cpp (203)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Details:
0x8e5e0210 (0x8e5e0210)
Systemfehler:
=============
Error: (11/07/2015 08:14:23 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-0TMHTJS)
Description: 1053WSearchNicht verfügbar{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}
Error: (11/07/2015 08:14:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/07/2015 08:14:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (11/07/2015 08:14:13 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-0TMHTJS)
Description: 1053WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (11/07/2015 08:14:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/07/2015 08:14:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (11/07/2015 08:14:13 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-0TMHTJS)
Description: 1053WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (11/07/2015 08:14:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/07/2015 08:14:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (11/07/2015 08:14:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-4670 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 37%
Installierter physikalischer RAM: 8070.79 MB
Verfügbarer physikalischer RAM: 5021.7 MB
Summe virtueller Speicher: 9350.79 MB
Verfügbarer virtueller Speicher: 5734.29 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:111.3 GB) (Free:83.05 GB) NTFS
Drive d: (Games Downloads) (Fixed) (Total:2794.39 GB) (Free:1518.8 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 26216F8B)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
08.11.2015, 05:50
| #4 |
| /// the machine /// TB-Ausbilder | weis nicht mehr weiter ist mein PC noch sicher Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.11.2015, 07:29
| #5 |
| | weis nicht mehr weiter ist mein PC noch sicher Guten Morgen schrauber Revo Uninstaller hat nichts gefundenAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v5.018 - Bericht erstellt am 06/11/2015 um 20:40:45
# Aktualisiert am 05/11/2015 von Xplode
# Datenbank : 2015-11-03.2 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : welke - DESKTOP-0TMHTJS
# Gestartet von : C:\Users\welke\Downloads\adwcleaner_5.018 (1).exe
# Option : Suchlauf
# Unterstützung : Forum - ToolsLib
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
Datei Gefunden : C:\Users\welke\Desktop\eBay.lnk
Datei Gefunden : C:\Users\welke\Desktop\Facebook.lnk
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
***** [ Internetbrowser ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [876 Bytes] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v5.018 - Bericht erstellt am 08/11/2015 um 08:27:49
# Aktualisiert am 05/11/2015 von Xplode
# Datenbank : 2015-11-03.2 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : welke - DESKTOP-0TMHTJS
# Gestartet von : C:\Users\welke\Desktop\AdwCleaner_5.018.exe
# Option : Suchlauf
# Unterstützung : Forum - ToolsLib
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\PRODUCTSETUP
***** [ Internetbrowser ] *****
[C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Gefunden : hxxp://www.istartsurf.com/webfavicon.ico
[C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Gefunden : hxxp://www.istartsurf.com/web/?type=ds&ts=1446911253&z=f54fe703905eca2b4e75b58g9zdz5qateg6eatcmaw&from=cor&uid=ST3000DM001-1ER166_Z500KRVYXXXXZ500KRVY&q={searchTerms}
[C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gefunden : hxxp://www.istartsurf.com/?type=hp&ts=1446911253&z=f54fe703905eca2b4e75b58g9zdz5qateg6eatcmaw&from=cor&uid=ST3000DM001-1ER166_Z500KRVYXXXXZ500KRVY
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2463 Bytes] ##########
|
|
08.11.2015, 19:20
| #6 |
| /// the machine /// TB-Ausbilder | weis nicht mehr weiter ist mein PC noch sicher AdwCleaner nochmal, diesmal auch Löschen lassen. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> weis nicht mehr weiter ist mein PC noch sicher |
|
09.11.2015, 16:15
| #7 |
| | weis nicht mehr weiter ist mein PC noch sicher ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # end=init # utc_time=2015-11-08 08:13:23 # local_time=2015-11-08 09:13:23 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 26626 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # end=updated # utc_time=2015-11-08 08:15:56 # local_time=2015-11-08 09:15:56 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # engine=26626 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-11-08 08:18:07 # local_time=2015-11-08 09:18:07 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='Kaspersky Internet Security' # compatibility_mode=1305 16777213 100 100 4079 11232539 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 109932 11589259 0 0 # scanned=2830 # found=0 # cleaned=0 # scan_time=130 ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # end=init # utc_time=2015-11-09 02:07:54 # local_time=2015-11-09 03:07:54 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 26635 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # end=updated # utc_time=2015-11-09 02:08:46 # local_time=2015-11-09 03:08:46 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=08a10ce90d9a654a8df303170cc39e46 # engine=26635 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-11-09 03:57:12 # local_time=2015-11-09 04:57:12 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='Kaspersky Internet Security' # compatibility_mode=1305 16777213 100 100 8444 11303284 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 177077 11660004 0 0 # scanned=576780 # found=5 # cleaned=0 # scan_time=6505 sh=13133C4B2991A6C6737EC57FC0E2D77B2C41E250 ft=1 fh=1d027069d0b38307 vn="Variante von Win32/InstallCore.ACZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\welke\AppData\Local\Microsoft\Windows\INetCache\IE\DR8QVOYY\JDownloader2Setup[1].exe" sh=13133C4B2991A6C6737EC57FC0E2D77B2C41E250 ft=1 fh=1d027069d0b38307 vn="Variante von Win32/InstallCore.ACZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\welke\AppData\Local\Microsoft\Windows\INetCache\IE\RQFL3QK3\JDownloader2Setup[1].exe" sh=A901074F923EFA09A7E4413D55EF30C8FCBD0322 ft=1 fh=eb841dc825cb1c22 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\welke\AppData\Local\Temp\DMR\dmr_72.exe" sh=B79810DF27575F0C04EBE19B06530C25B4C07707 ft=1 fh=d71ec1080faa4e85 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\welke\Downloads\WinToUSB - CHIP-Installer.exe" sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Win32/Virut.NBP Virus" ac=I fn="D:\Games\fallout3\fallout3d\fallout3d.iso" Results of screen317's Security Check version 1.009 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Kaspersky Internet Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 65 Java version 32-bit out of Date! Google Chrome (46.0.2490.80) ````````Process Check: objlist.exe by Laurent```````` Kaspersky Lab Kaspersky Internet Security 16.0.0 avp.exe Kaspersky Lab Kaspersky Internet Security 16.0.0 avpui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015 durchgeführt von welke (Administrator) auf DESKTOP-0TMHTJS (09-11-2015 17:18:09) Gestartet von C:\Users\welke\Downloads Geladene Profile: welke (Verfügbare Profile: welke) Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (eVenture Limited) C:\Program Files (x86)\hide.me VPN\vpnsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe (InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe (Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6310.42251.0_x64__8wekyb3d8bbwe\HxMail.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6310.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-05] (Valve Corporation) Startup: C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Malwarebytes Anti-Malware .lnk [2015-11-08] ShortcutTarget: Malwarebytes Anti-Malware .lnk -> C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes) Startup: C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\The Walking Dead Original Soundtrack - Theme Song HD.mp3 [2015-01-01] () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\..\Interfaces\{2E89B5ED-2271-4B61-BB21-C76C097C77AD}: [NameServer] 85.17.25.21 85.17.25.22 Tcpip\..\Interfaces\{33ae6435-171e-456a-ba0d-7d4f7811edd2}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{349E25DB-A996-4354-96BF-B636E2AEC82D}: [DhcpNameServer] 85.17.26.9 85.17.26.10 Internet Explorer: ================== BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-11-07] (AO Kaspersky Lab) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-11-07] (Oracle Corporation) BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-11-07] (AO Kaspersky Lab) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-07] (Oracle Corporation) Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-11-07] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-11-07] (AO Kaspersky Lab) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\welke\AppData\Roaming\Mozilla\Firefox\Profiles\8ek7uck5.default FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-07] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-07] (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-02] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-02] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-07] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-07] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2015-11-07] [ist nicht signiert] Chrome: ======= CHR StartupUrls: Default -> "hxxp://google.de/" CHR Profile: C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-07] CHR Extension: (Google Docs) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-07] CHR Extension: (Google Drive) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07] CHR Extension: (YouTube) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-07] CHR Extension: (Adblock Plus) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-07] CHR Extension: (Google-Suche) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-07] CHR Extension: (Kaspersky Protection) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-11-07] CHR Extension: (Google Tabellen) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-07] CHR Extension: (Google Docs Offline) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-07] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-07] CHR Extension: (Google Mail) - C:\Users\welke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-07] CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-11-07] (Kaspersky Lab ZAO) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation) R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\vpnsvc.exe [184528 2015-11-02] (eVenture Limited) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-10-07] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation) S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] () R0 cm_km; C:\Windows\System32\drivers\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-11-07] (AO Kaspersky Lab) R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [227512 2015-11-07] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [925064 2015-11-07] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39608 2015-06-11] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-11-07] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87944 2015-11-07] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-10-07] (Intel Corporation) R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2204304 2015-06-18] (MediaTek Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation) S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-06-18] (Realtek ) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-11-09 17:18 - 2015-11-09 17:18 - 00016588 _____ C:\Users\welke\Downloads\FRST.txt 2015-11-09 17:13 - 2015-11-09 17:13 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-0TMHTJS_welke_HistoryPrediction.bin 2015-11-09 14:37 - 2015-11-09 14:37 - 00000000 ___HD C:\OneDriveTemp 2015-11-08 21:16 - 2015-11-09 17:18 - 02198528 _____ (Farbar) C:\Users\welke\Downloads\FRST64.exe 2015-11-08 21:14 - 2015-11-09 17:16 - 00852720 _____ C:\Users\welke\Desktop\SecurityCheck.exe 2015-11-08 21:11 - 2015-11-08 21:13 - 02870984 _____ (ESET) C:\Users\welke\Downloads\esetsmartinstaller_deu.exe 2015-11-08 20:10 - 2015-11-08 20:10 - 01466656 _____ C:\Users\welke\Downloads\WinToUSB - CHIP-Installer.exe 2015-11-08 18:00 - 2015-11-08 18:00 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Temp 2015-11-08 17:19 - 2015-11-08 17:19 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-11-08 17:17 - 2015-11-08 17:17 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2015-11-08 16:42 - 2015-11-08 16:42 - 00000000 ____D C:\Users\welke\AppData\Roaming\WinRAR 2015-11-08 14:07 - 2015-11-08 14:07 - 00000000 ___RD C:\Users\welke\3D Objects 2015-11-08 13:22 - 2015-11-08 13:22 - 00002328 _____ C:\Users\welke\Desktop\Google Chrome.lnk 2015-11-08 09:42 - 2015-11-08 20:47 - 00000000 ____D C:\Users\welke\AppData\Roaming\vlc 2015-11-08 09:21 - 2015-11-08 10:48 - 00000970 _____ C:\WINDOWS\PFRO.log 2015-11-08 08:43 - 2015-11-08 08:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2015-11-08 08:41 - 2015-11-08 08:41 - 00000000 ____D C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-11-08 08:41 - 2015-11-08 08:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-11-08 08:41 - 2015-11-08 08:41 - 00000000 ____D C:\Program Files\WinRAR 2015-11-08 08:25 - 2015-11-08 08:27 - 01713664 _____ C:\Users\welke\Downloads\AdwCleaner_5.018.exe 2015-11-08 08:25 - 2015-11-08 08:25 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2015-11-07 17:26 - 2015-11-09 16:36 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2015-11-07 17:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2015-11-07 17:22 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2015-11-07 17:22 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2015-11-07 17:22 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2015-11-07 17:22 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2015-11-07 17:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2015-11-07 17:22 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2015-11-07 17:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2015-11-07 17:22 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2015-11-07 17:22 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2015-11-07 17:22 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2015-11-07 17:22 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2015-11-07 17:22 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2015-11-07 17:22 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2015-11-07 17:22 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2015-11-07 17:22 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2015-11-07 17:22 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2015-11-07 17:22 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2015-11-07 17:22 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2015-11-07 17:22 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2015-11-07 17:22 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2015-11-07 17:22 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2015-11-07 17:22 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2015-11-07 17:22 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2015-11-07 17:22 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2015-11-07 17:22 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2015-11-07 17:22 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2015-11-07 17:22 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2015-11-07 17:22 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2015-11-07 17:22 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2015-11-07 17:22 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2015-11-07 17:22 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2015-11-07 17:22 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2015-11-07 17:22 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2015-11-07 17:22 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2015-11-07 17:22 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2015-11-07 17:22 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2015-11-07 17:22 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2015-11-07 17:22 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2015-11-07 17:22 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2015-11-07 17:22 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2015-11-07 17:22 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2015-11-07 17:22 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2015-11-07 17:22 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2015-11-07 17:22 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2015-11-07 17:22 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2015-11-07 17:22 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2015-11-07 17:22 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2015-11-07 17:22 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2015-11-07 17:22 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2015-11-07 17:22 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2015-11-07 17:22 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2015-11-07 17:22 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2015-11-07 17:22 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2015-11-07 17:22 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2015-11-07 17:22 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2015-11-07 17:22 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2015-11-07 17:22 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2015-11-07 17:22 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2015-11-07 17:22 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2015-11-07 17:22 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2015-11-07 17:22 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2015-11-07 17:22 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2015-11-07 17:22 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2015-11-07 17:22 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2015-11-07 17:22 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2015-11-07 17:22 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2015-11-07 17:22 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2015-11-07 17:22 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2015-11-07 17:22 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2015-11-07 17:22 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2015-11-07 17:22 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2015-11-07 17:22 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2015-11-07 17:22 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2015-11-07 17:22 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2015-11-07 17:22 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2015-11-07 17:22 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2015-11-07 17:22 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2015-11-07 17:22 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2015-11-07 17:22 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2015-11-07 17:22 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2015-11-07 17:22 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2015-11-07 17:22 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2015-11-07 17:22 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2015-11-07 17:22 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2015-11-07 17:22 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2015-11-07 17:22 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2015-11-07 17:22 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2015-11-07 17:22 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2015-11-07 17:22 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2015-11-07 17:22 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2015-11-07 17:22 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2015-11-07 17:22 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2015-11-07 17:22 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2015-11-07 17:22 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2015-11-07 17:22 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2015-11-07 17:22 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2015-11-07 17:22 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2015-11-07 17:22 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2015-11-07 17:22 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2015-11-07 17:22 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2015-11-07 17:22 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2015-11-07 17:22 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2015-11-07 17:22 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2015-11-07 17:22 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2015-11-07 17:22 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2015-11-07 17:22 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2015-11-07 17:22 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2015-11-07 17:22 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2015-11-07 17:22 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2015-11-07 17:22 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2015-11-07 17:22 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2015-11-07 17:22 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2015-11-07 17:22 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2015-11-07 17:22 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2015-11-07 17:22 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2015-11-07 17:22 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2015-11-07 17:22 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2015-11-07 17:22 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2015-11-07 17:22 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2015-11-07 17:22 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2015-11-07 17:22 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2015-11-07 17:22 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2015-11-07 17:20 - 2015-11-07 17:22 - 00010124 _____ C:\WINDOWS\DirectX.log 2015-11-07 17:20 - 2015-11-02 14:18 - 00102520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2015-11-07 17:19 - 2015-11-08 17:06 - 00003315 _____ C:\WINDOWS\setupact.log 2015-11-07 17:19 - 2015-11-07 17:19 - 00000000 ____D C:\Users\welke\AppData\Local\Steam 2015-11-07 17:19 - 2015-11-07 17:19 - 00000000 ____D C:\Users\welke\AppData\Local\CEF 2015-11-07 17:19 - 2015-11-07 17:19 - 00000000 ____D C:\NVIDIA 2015-11-07 17:19 - 2015-11-07 17:19 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-11-07 17:17 - 2015-11-07 17:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-11-07 17:17 - 2015-11-07 17:17 - 00000000 ____D C:\Program Files\VideoLAN 2015-11-07 17:14 - 2015-11-07 17:14 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2015-11-07 17:14 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2015-11-07 17:14 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2015-11-07 17:14 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2015-11-07 17:14 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2015-11-07 17:14 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2015-11-07 17:14 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2015-11-07 17:14 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2015-11-07 17:12 - 2015-11-07 17:13 - 00000000 ____D C:\ProgramData\Package Cache 2015-11-07 17:03 - 2015-11-07 17:03 - 00000000 ____D C:\Temp 2015-11-07 17:01 - 2015-11-02 23:49 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 42914096 _____ C:\WINDOWS\system32\nvcompiler.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 37882160 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 22343800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 18389112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 16561128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 15932376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 03126984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 02496632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435887.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 01564976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435887.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 01016544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 01013960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00877688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00820672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00601240 _____ C:\WINDOWS\system32\nvmcumd.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00446584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00445216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00422568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00155792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2015-11-07 17:01 - 2015-11-02 18:03 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2015-11-07 16:59 - 2015-11-09 14:45 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52210818-7307-40AE-8719-E5B135E42F2B} 2015-11-07 16:59 - 2015-11-07 16:59 - 00000000 ____D C:\Users\welke\AppData\Roaming\Sun 2015-11-07 16:59 - 2015-11-07 16:59 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Sun 2015-11-07 16:59 - 2015-11-07 16:59 - 00000000 ____D C:\Users\welke\.oracle_jre_usage 2015-11-07 16:58 - 2015-11-07 17:00 - 303461128 _____ (NVIDIA Corporation) C:\Users\welke\Downloads\358.87-desktop-win10-64bit-international-whql.exe 2015-11-07 16:58 - 2015-11-07 16:59 - 00000000 ____D C:\ProgramData\Oracle 2015-11-07 16:58 - 2015-11-07 16:58 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2015-11-07 16:58 - 2015-11-07 16:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-11-07 16:58 - 2015-11-07 16:58 - 00000000 ____D C:\Program Files (x86)\Java 2015-11-07 16:57 - 2015-11-07 16:57 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Oracle 2015-11-07 16:55 - 2015-11-07 16:56 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-11-07 16:55 - 2015-10-02 12:09 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-11-07 16:54 - 2015-11-07 16:54 - 00000000 ____D C:\Users\welke\Downloads\JDownloader 2015-11-07 16:47 - 2015-11-08 09:05 - 00000000 ____D C:\Users\welke\AppData\Local\JDownloader v2.0 2015-11-07 16:47 - 2015-11-07 16:47 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-11-07 16:42 - 2015-11-07 17:18 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-11-07 16:42 - 2015-11-07 17:17 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-11-07 16:42 - 2015-11-07 17:17 - 00000000 ____D C:\ProgramData\Adobe 2015-11-07 16:42 - 2015-11-07 16:42 - 00000000 ____D C:\Users\welke\AppData\Local\Adobe 2015-11-07 16:42 - 2015-11-07 16:42 - 00000000 ____D C:\Program Files (x86)\Adobe 2015-11-07 16:39 - 2015-11-07 16:39 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2015-11-07 16:39 - 2015-11-07 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-11-07 16:39 - 2015-11-07 16:39 - 00000000 ____D C:\Program Files\CCleaner 2015-11-07 16:37 - 2015-11-07 16:56 - 00000000 ____D C:\Users\welke\AppData\Local\NVIDIA Corporation 2015-11-07 16:37 - 2015-11-07 16:37 - 00000000 ____D C:\Users\welke\AppData\Local\NVIDIA 2015-11-07 16:36 - 2015-11-07 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-11-07 16:36 - 2015-10-12 04:05 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2015-11-07 16:36 - 2015-10-12 04:05 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2015-11-07 16:36 - 2015-10-12 04:04 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2015-11-07 16:36 - 2015-10-12 04:04 - 01710752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2015-11-07 16:36 - 2015-10-03 05:58 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2015-11-07 16:36 - 2015-10-03 05:58 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2015-11-07 16:36 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2015-11-07 16:36 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2015-11-07 16:36 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2015-11-07 16:36 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2015-11-07 16:36 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2015-11-07 16:36 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll 2015-11-07 16:25 - 2015-11-07 16:25 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-11-07 16:22 - 2015-11-07 17:02 - 00003005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Program Updates.lnk 2015-11-07 16:22 - 2015-11-07 16:22 - 00000032 _____ C:\csb.log 2015-11-07 16:22 - 2015-11-07 16:22 - 00000000 ____D C:\ProgramData\InstallShield 2015-11-07 16:22 - 2015-11-07 16:22 - 00000000 ____D C:\Program Files\GIGABYTE 2015-11-07 16:22 - 2015-11-07 16:22 - 00000000 ____D C:\Program Files (x86)\GIGABYTE 2015-11-07 16:22 - 2013-03-27 09:51 - 00021072 _____ C:\WINDOWS\system32\Drivers\UsbCharger.sys 2015-11-07 16:22 - 2013-02-19 12:18 - 00021584 _____ C:\WINDOWS\system32\Drivers\AppleCharger.sys 2015-11-07 16:22 - 2010-04-06 16:30 - 00031272 _____ C:\WINDOWS\system32\AppleChargerSrv.exe 2015-11-07 16:20 - 2015-11-07 16:20 - 01817678 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2015-11-07 16:20 - 2015-11-07 16:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-11-07 16:20 - 2015-11-07 16:20 - 00000000 ____D C:\Users\welke\AppData\Roaming\Intel Corporation 2015-11-07 16:20 - 2015-11-07 16:20 - 00000000 ____D C:\ProgramData\Intel 2015-11-07 16:20 - 2012-10-24 19:18 - 00723088 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys 2015-11-07 16:20 - 2012-10-24 19:18 - 00074344 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll 2015-11-07 16:19 - 2013-02-26 06:30 - 03685448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll 2015-11-07 16:19 - 2013-02-21 10:26 - 00858032 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll 2015-11-07 16:19 - 2013-02-21 10:26 - 00148912 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll 2015-11-07 16:19 - 2013-02-21 10:25 - 00569256 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll 2015-11-07 16:19 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2015-11-07 16:19 - 2013-02-20 03:55 - 00912960 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2015-11-07 16:19 - 2013-02-19 11:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2015-11-07 16:19 - 2013-02-19 08:11 - 02751560 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2015-11-07 16:19 - 2013-02-08 08:36 - 03155536 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat 2015-11-07 16:19 - 2013-02-05 13:32 - 01658952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2015-11-07 16:19 - 2013-02-02 14:30 - 02099480 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2015-11-07 16:19 - 2013-01-23 09:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2015-11-07 16:19 - 2013-01-16 23:05 - 00801560 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll 2015-11-07 16:19 - 2013-01-16 23:05 - 00635160 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\sltech64.dll 2015-11-07 16:19 - 2013-01-16 23:05 - 00518936 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2015-11-07 16:19 - 2013-01-16 23:05 - 00215320 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll 2015-11-07 16:19 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll 2015-11-07 16:19 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll 2015-11-07 16:19 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2015-11-07 16:19 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2015-11-07 16:19 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2015-11-07 16:19 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2015-11-07 16:19 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll 2015-11-07 16:19 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll 2015-11-07 16:19 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2015-11-07 16:19 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2015-11-07 16:19 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2015-11-07 16:19 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2015-11-07 16:19 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2015-11-07 16:19 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2015-11-07 16:18 - 2015-11-07 16:20 - 00000000 ____D C:\Program Files (x86)\Realtek 2015-11-07 16:18 - 2015-11-07 16:19 - 00000000 ___HD C:\Program Files (x86)\Temp 2015-11-07 16:18 - 2013-02-26 11:04 - 00429097 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2015-11-07 16:18 - 2013-02-26 09:41 - 19089920 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2015-11-07 16:18 - 2013-02-21 09:11 - 00131656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2015-11-07 16:18 - 2013-02-02 14:30 - 00907544 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2015-11-07 16:18 - 2013-02-02 14:29 - 13975320 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2015-11-07 16:18 - 2013-02-02 14:29 - 01898776 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll 2015-11-07 16:18 - 2013-01-21 18:41 - 00204864 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2015-11-07 16:18 - 2013-01-17 12:32 - 00719640 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll 2015-11-07 16:18 - 2013-01-16 09:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll 2015-11-07 16:18 - 2013-01-15 03:33 - 02722848 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2015-11-07 16:18 - 2012-12-17 10:49 - 02032584 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2015-11-07 16:18 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2015-11-07 16:18 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll 2015-11-07 16:18 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll 2015-11-07 16:18 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll 2015-11-07 16:18 - 2012-09-10 13:06 - 00612728 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll 2015-11-07 16:18 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2015-11-07 16:18 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2015-11-07 16:18 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2015-11-07 16:18 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2015-11-07 16:18 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2015-11-07 16:18 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2015-11-07 16:18 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2015-11-07 16:18 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2015-11-07 16:18 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2015-11-07 16:18 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2015-11-07 16:18 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2015-11-07 16:18 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2015-11-07 16:17 - 2015-11-07 16:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-11-07 16:17 - 2015-11-07 16:17 - 00000000 ____D C:\Users\welke\AppData\Roaming\InstallShield 2015-11-07 16:17 - 2015-11-07 16:17 - 00000000 ____D C:\Program Files (x86)\Intel 2015-11-07 16:17 - 2013-02-27 15:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll 2015-11-07 16:16 - 2015-11-07 16:16 - 00025640 ____N (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys 2015-11-07 16:16 - 2015-11-07 16:16 - 00000010 _____ C:\WINDOWS\GSetup.ini 2015-11-07 16:16 - 2009-08-27 08:04 - 00207400 ____R () C:\WINDOWS\GSetup.exe 2015-11-07 16:13 - 2015-11-07 16:13 - 00000000 _____ C:\Users\welke\AppData\Local\{A6ADDF55-EAA9-4A75-9D26-2374D1225D4F} 2015-11-07 16:09 - 2015-11-07 16:09 - 00000000 ____D C:\Users\welke\AppData\Local\PackageStaging 2015-11-07 16:08 - 2015-11-09 17:13 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-11-07 16:08 - 2015-11-09 16:13 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-11-07 16:08 - 2015-11-07 16:08 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-11-07 16:08 - 2015-11-07 16:08 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-11-07 16:08 - 2015-11-07 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-11-07 16:08 - 2015-11-07 16:08 - 00000000 ____D C:\Program Files (x86)\Google 2015-11-07 16:07 - 2015-11-07 16:08 - 00000000 ____D C:\Users\welke\AppData\Local\Google 2015-11-07 16:05 - 2015-11-07 17:02 - 00002497 _____ C:\Users\welke\Desktop\Sicherer Zahlungsverkehr.lnk 2015-11-07 16:04 - 2015-11-09 16:53 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-11-07 16:04 - 2015-11-07 17:22 - 00925064 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys 2015-11-07 16:04 - 2015-11-07 17:22 - 00181640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys 2015-11-07 16:04 - 2015-11-07 17:21 - 00227512 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys 2015-11-07 16:04 - 2015-11-07 16:04 - 00000000 ____D C:\Users\welke\AppData\Roaming\Mozilla 2015-11-07 16:04 - 2015-11-07 16:04 - 00000000 ____D C:\Users\welke\AppData\Local\Mozilla 2015-11-07 16:04 - 2015-11-07 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2015-11-07 16:04 - 2015-11-07 16:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2015-11-07 16:04 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll 2015-11-07 16:01 - 2015-11-07 17:32 - 00000000 ____D C:\Users\welke\AppData\Roaming\Hide.me 2015-11-07 16:01 - 2015-11-07 16:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-11-07 15:59 - 2015-11-07 16:01 - 00000000 ____D C:\Program Files (x86)\hide.me VPN 2015-11-07 15:59 - 2015-11-07 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN 2015-11-07 15:57 - 2015-11-08 10:05 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-11-07 15:57 - 2015-11-07 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-11-07 15:57 - 2015-11-07 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-11-07 15:57 - 2015-11-07 15:57 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-11-07 15:57 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-11-07 15:57 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-11-07 15:57 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2015-11-07 15:55 - 2015-11-09 14:40 - 01793546 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-11-07 15:54 - 2015-11-07 17:02 - 00002358 _____ C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-11-07 15:54 - 2015-11-07 15:55 - 00000000 ____D C:\Users\welke\AppData\Local\MicrosoftEdge 2015-11-07 15:54 - 2015-11-07 15:54 - 00000000 ____D C:\Users\welke\AppData\Roaming\Macromedia 2015-11-07 15:54 - 2015-11-07 15:54 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2015-11-07 15:53 - 2015-11-09 14:40 - 00000000 ____D C:\Users\welke\AppData\Local\Comms 2015-11-07 15:53 - 2015-11-07 15:53 - 00000000 ____D C:\Users\welke\AppData\Local\Publishers 2015-11-07 15:52 - 2015-11-08 13:57 - 00000000 ____D C:\Users\welke\AppData\Local\Packages 2015-11-07 15:52 - 2015-11-07 15:52 - 00000020 ___SH C:\Users\welke\ntuser.ini 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Vorlagen 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Startmenü 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Netzwerkumgebung 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Lokale Einstellungen 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Eigene Dateien 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Druckumgebung 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Documents\Eigene Musik 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Documents\Eigene Bilder 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\AppData\Local\Verlauf 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\AppData\Local\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\welke\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Vorlagen 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Startmenü 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\ProgramData\Vorlagen 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\ProgramData\Startmenü 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\ProgramData\Dokumente 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 __SHD C:\Recovery 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 ____D C:\Users\welke\AppData\Roaming\Adobe 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 ____D C:\Users\welke\AppData\Local\VirtualStore 2015-11-07 15:52 - 2015-11-07 15:52 - 00000000 ____D C:\Users\welke\AppData\Local\TileDataLayer 2015-11-07 15:51 - 2015-11-08 14:07 - 00000000 ____D C:\Users\welke 2015-11-07 15:51 - 2015-11-07 15:52 - 00000000 ___RD C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-11-07 15:51 - 2015-11-07 15:44 - 00000000 __RSD C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-11-07 15:51 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-11-07 15:51 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-11-07 15:51 - 2015-11-07 15:43 - 00000000 ____D C:\Users\welke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-11-07 15:51 - 2015-07-10 06:37 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-11-07 15:50 - 2015-11-09 14:37 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-11-07 15:50 - 2015-11-07 16:19 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2015-11-07 15:50 - 2015-11-07 15:50 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-11-07 15:50 - 2015-11-07 15:50 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-11-07 15:50 - 2015-11-07 15:50 - 00000000 ____D C:\ProgramData\USOShared 2015-11-07 15:50 - 2015-11-07 15:50 - 00000000 ____D C:\Program Files\Realtek 2015-11-07 15:50 - 2015-10-07 10:45 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2015-11-07 15:50 - 2015-10-07 10:45 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2015-11-07 15:49 - 2015-11-09 14:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-11-07 15:49 - 2015-11-09 14:36 - 00000000 ____D C:\ProgramData\NVIDIA 2015-11-07 15:49 - 2015-11-07 17:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-11-07 15:49 - 2015-11-07 17:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-11-07 15:49 - 2015-11-07 16:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-11-07 15:49 - 2015-11-07 16:20 - 00000000 ____D C:\Program Files\Intel 2015-11-07 15:49 - 2015-11-07 15:51 - 00189344 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-11-07 15:49 - 2015-11-02 14:36 - 06358832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2015-11-07 15:49 - 2015-11-02 14:36 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2015-11-07 15:49 - 2015-11-02 14:36 - 02554488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2015-11-07 15:49 - 2015-11-02 14:36 - 00938800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2015-11-07 15:49 - 2015-11-02 14:36 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2015-11-07 15:49 - 2015-11-02 14:36 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2015-11-07 15:49 - 2015-10-28 08:42 - 06027430 _____ C:\WINDOWS\system32\nvcoproc.bin 2015-11-07 15:48 - 2015-11-08 09:57 - 00000000 ____D C:\Windows.old 2015-11-07 15:48 - 2015-11-07 17:06 - 00000000 ___DC C:\WINDOWS\Panther 2015-11-07 15:48 - 2015-11-07 15:48 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG 2015-11-07 15:48 - 2015-11-07 15:48 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-11-07 15:47 - 2015-11-07 15:47 - 00000000 ____D C:\WINDOWS\Setup 2015-11-07 15:46 - 2015-11-09 14:40 - 00772138 _____ C:\WINDOWS\system32\perfh007.dat 2015-11-07 15:46 - 2015-11-09 14:40 - 00154500 _____ C:\WINDOWS\system32\perfc007.dat 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\WINDOWS\OCR 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\Program Files\MSBuild 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-11-07 15:46 - 2015-11-07 15:46 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-11-07 15:46 - 2015-11-07 15:45 - 00305634 _____ C:\WINDOWS\system32\perfi007.dat 2015-11-07 15:46 - 2015-11-07 15:45 - 00040390 _____ C:\WINDOWS\system32\perfd007.dat 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\de 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\de 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\0409 2015-11-07 15:45 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\DigitalLocker 2015-11-07 15:44 - 2015-11-07 15:48 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-11-07 15:44 - 2015-11-07 15:43 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2015-11-07 15:44 - 2015-11-07 15:43 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2015-11-07 15:44 - 2015-11-07 15:43 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2015-11-07 15:44 - 2015-11-07 15:43 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2015-11-07 15:44 - 2015-11-07 15:43 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2015-11-07 15:44 - 2015-11-07 15:43 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2015-11-07 15:44 - 2015-11-07 15:43 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2015-11-07 15:44 - 2015-11-07 15:43 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2015-11-07 15:44 - 2015-11-07 15:43 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2015-11-07 15:44 - 2015-11-07 15:43 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2015-11-07 15:44 - 2015-11-07 15:43 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2015-11-07 15:44 - 2015-11-07 15:43 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2015-11-07 15:44 - 2015-11-07 15:43 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2015-11-07 15:44 - 2015-11-07 15:43 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2015-11-07 15:44 - 2015-11-07 15:43 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2015-11-07 15:44 - 2015-11-07 15:43 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2015-11-07 15:44 - 2015-10-16 04:10 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-11-07 15:44 - 2015-10-16 04:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-07 15:43 - 2015-11-09 16:40 - 00000000 ____D C:\WINDOWS\system32\sru 2015-11-07 15:43 - 2015-11-09 14:56 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-11-07 15:43 - 2015-11-09 14:37 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-11-07 15:43 - 2015-11-08 10:14 - 00000000 ____D C:\WINDOWS\system32\Recovery 2015-11-07 15:43 - 2015-11-08 08:27 - 00000000 ____D C:\WINDOWS\appcompat 2015-11-07 15:43 - 2015-11-07 17:18 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-11-07 15:43 - 2015-11-07 17:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-11-07 15:43 - 2015-11-07 17:05 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ____D C:\WINDOWS\Provisioning 2015-11-07 15:43 - 2015-11-07 17:04 - 00000000 ____D C:\WINDOWS\L2Schemas 2015-11-07 15:43 - 2015-11-07 16:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 __RHD C:\Users\Public\Libraries 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-11-07 15:43 - 2015-11-07 15:52 - 00000000 ____D C:\Program Files\Windows NT 2015-11-07 15:43 - 2015-11-07 15:51 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-11-07 15:43 - 2015-11-07 15:51 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-11-07 15:43 - 2015-11-07 15:50 - 00000000 ____D C:\ProgramData\USOPrivate 2015-11-07 15:43 - 2015-11-07 15:49 - 00000000 ____D C:\WINDOWS\Help 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-11-07 15:43 - 2015-11-07 15:47 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-07 15:43 - 2015-11-07 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-11-07 15:43 - 2015-11-07 15:46 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ___SD C:\WINDOWS\system32\dsc 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\setup 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\system32\Com 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\IME 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\Program Files\Windows Defender 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\Program Files\Common Files\System 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-11-07 15:43 - 2015-11-07 15:45 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ___SD C:\WINDOWS\system32\Nui 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\th-TH 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\sppui 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\MSDRM 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\icsxml 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\ias 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\he-IL 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\fr-CA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\et-EE 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\es-MX 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\en-GB 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\downlevel 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\system\Speech 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\ShellNew 2015-11-07 15:43 - 2015-11-07 15:44 - 00000000 ____D C:\WINDOWS\Registration 2015-11-07 15:43 - 2015-11-07 15:43 - 00000219 _____ C:\WINDOWS\system.ini 2015-11-07 15:43 - 2015-11-07 15:43 - 00000092 _____ C:\WINDOWS\win.ini 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 __SHD C:\Program Files\Windows Sidebar 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 __RSD C:\WINDOWS\Media 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___SD C:\Program Files\WindowsPowerShell 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Web 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Vss 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\tracing 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\TAPI 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\sru 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\spp 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\restore 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SystemResources 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\winevt 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\spp 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\spool 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\Speech 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\restore 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\RasToast 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\ras 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\networklist 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\Macromed 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\Licenses 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\IME 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\System 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Speech_OneCore 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Speech 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SKB 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\security 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\schemas 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\SchCache 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Resources 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\rescache 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\PLA 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Performance 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\InputMethod 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Globalization 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Cursors 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\Branding 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\addins 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\ProgramData\Comms 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files\Common Files\Services 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files (x86)\Windows NT 2015-11-07 15:43 - 2015-11-07 15:43 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2015-11-07 15:40 - 2015-11-08 13:14 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-11-07 15:38 - 2015-11-08 18:06 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-11-07 15:38 - 2015-11-07 16:04 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-11-07 15:38 - 2015-11-07 15:52 - 00000000 __RHD C:\Users\Default 2015-11-07 15:38 - 2015-11-07 15:45 - 00000000 ____D C:\WINDOWS\servicing 2015-11-07 15:38 - 2015-11-07 15:43 - 00000000 ____D C:\WINDOWS\system32\SMI 2015-11-07 15:38 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP 2015-11-07 15:31 - 2015-11-08 09:55 - 00000000 ___HD C:\$SysReset 2015-11-07 13:46 - 2015-11-09 17:18 - 00000000 ____D C:\FRST 2015-11-06 20:40 - 2015-11-08 21:08 - 00000000 ____D C:\AdwCleaner 2015-11-04 13:03 - 2015-11-04 13:03 - 00000000 ____D C:\Users\welke\Documents\Anno 2205 2015-10-30 12:03 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-10-30 12:03 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-10-30 12:03 - 2015-10-21 13:45 - 00541024 ____N (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-10-30 12:03 - 2015-10-21 13:44 - 00459104 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2015-10-30 12:03 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-10-30 12:03 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-10-30 12:03 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-10-30 12:03 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-10-30 12:03 - 2015-10-21 12:59 - 00076800 ____N (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2015-10-30 12:03 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-10-30 12:03 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2015-10-30 12:03 - 2015-10-21 12:50 - 00333312 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-10-30 12:03 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-10-30 12:03 - 2015-10-21 12:47 - 00453120 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2015-10-30 12:03 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-10-30 12:03 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-10-30 12:03 - 2015-10-21 12:44 - 00713216 ____N (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-10-30 12:03 - 2015-10-21 12:44 - 00579072 ____N (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-10-30 12:03 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2015-10-30 12:03 - 2015-10-21 12:42 - 00627712 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-10-30 12:03 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-10-30 12:03 - 2015-10-21 12:40 - 00145408 ____N (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2015-10-30 12:03 - 2015-10-21 12:38 - 00502272 ____N (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2015-10-30 12:03 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-10-30 12:03 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-10-30 12:03 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-10-30 12:03 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-10-30 12:03 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-10-30 12:03 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-10-30 12:03 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-10-30 12:03 - 2015-10-21 06:03 - 00311296 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2015-10-30 12:03 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2015-10-30 12:03 - 2015-10-21 05:58 - 00464896 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-10-30 12:03 - 2015-10-21 05:55 - 00441344 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2015-10-29 19:46 - 2015-10-29 19:46 - 00000000 ____D C:\Users\welke\Documents\Stronghold 2015-10-29 14:31 - 2015-10-29 14:31 - 00000000 ____D C:\Steamapp 2015-10-22 18:30 - 2015-10-22 18:30 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Kyy Games 2015-10-22 09:20 - 2015-10-22 09:20 - 00000000 ____D C:\Users\welke\Documents\Klei 2015-10-22 05:47 - 2015-10-22 05:47 - 00000000 ____D C:\Users\welke\AppData\LocalLow\noio 2015-10-19 19:34 - 2015-10-19 19:34 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Jotunn Games 2015-10-18 15:21 - 2015-10-18 15:21 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Zero Sum Games 2015-10-18 08:30 - 2015-10-18 08:30 - 00000000 ____D C:\Users\welke\Documents\Planetbase 2015-10-18 08:16 - 2015-10-18 08:17 - 00000000 ____D C:\Users\welke\Documents\Reus 2015-10-16 21:48 - 2015-11-07 17:02 - 00000734 _____ C:\Users\welke\Desktop\Downloads - Verknüpfung.lnk 2015-10-15 21:10 - 2015-10-15 21:10 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Obsidian Entertainment 2015-10-15 20:10 - 2015-10-15 20:15 - 00000000 ____D C:\Users\welke\Documents\Endless Legend 2015-10-15 08:43 - 2015-10-15 08:43 - 00000000 ____D C:\Users\welke\AppData\LocalLow\Adobe 2015-10-13 22:06 - 2015-10-10 08:12 - 00078528 ____N (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-10-13 22:06 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-10-13 22:06 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-10-13 22:06 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-10-13 22:06 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-10-13 22:06 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-10-13 22:06 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-10-13 22:06 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-10-13 22:06 - 2015-10-01 04:03 - 00757760 ____N (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2015-10-13 22:06 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2015-10-13 22:06 - 2015-09-25 05:01 - 00498016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2015-10-13 22:06 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-10-13 22:06 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2015-10-13 22:06 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2015-10-13 22:06 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-10-13 22:06 - 2015-09-25 04:11 - 00257024 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll 2015-10-13 22:06 - 2015-09-25 04:11 - 00223232 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll 2015-10-13 22:06 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-10-13 22:06 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-10-13 22:06 - 2015-09-25 04:04 - 00826880 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-10-13 22:06 - 2015-09-25 04:04 - 00771072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-10-13 22:06 - 2015-09-25 04:03 - 00796160 ____N (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2015-10-13 22:06 - 2015-09-25 04:03 - 00576000 ____N (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-10-13 22:06 - 2015-09-25 04:02 - 00689152 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-13 22:06 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-10-13 22:06 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-10-13 22:06 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-10-13 22:06 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-10-13 22:06 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-10-13 22:06 - 2015-09-25 04:00 - 00752640 ____N (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00720896 ____N (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00685568 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00590336 ____N (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00288256 ____N (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2015-10-13 22:06 - 2015-09-25 03:59 - 00163840 ____N (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll 2015-10-13 22:06 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2015-10-13 22:06 - 2015-09-25 03:47 - 00195584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2015-10-13 22:06 - 2015-09-25 03:47 - 00172032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00650240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00574464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2015-10-13 22:06 - 2015-09-25 03:38 - 00504320 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00766976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00613376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2015-10-13 22:06 - 2015-09-25 03:37 - 00480256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-13 22:06 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-10-13 22:06 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00625152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00579584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00557568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2015-10-13 22:06 - 2015-09-25 03:34 - 00525312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2015-10-13 22:06 - 2015-09-25 03:33 - 00131072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll 2015-10-13 22:06 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2015-10-13 22:06 - 2015-09-25 03:32 - 00466432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-10-11 20:18 - 2015-10-11 20:22 - 357105928 _____ C:\Users\welke\Downloads\wesnoth-1.12.4a-win32.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-11-09 14:37 - 2015-10-07 10:40 - 00000000 ___RD C:\Users\welke\OneDrive 2015-11-08 09:17 - 2015-10-07 13:54 - 00001135 _____ C:\Users\welke\Desktop\Steam - Verknüpfung.lnk 2015-11-07 17:22 - 2015-06-26 23:58 - 00087944 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klwfp.sys 2015-11-07 17:22 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpd.sys 2015-11-07 17:02 - 2015-10-07 10:46 - 00000424 _____ C:\Users\welke\Desktop\Dieser PC - Verknüpfung.lnk 2015-11-07 16:20 - 2015-10-08 11:45 - 00000189 _____ C:\Install.log 2015-11-07 16:19 - 2015-10-08 11:45 - 00003302 _____ C:\RHDSetup.log 2015-11-07 15:42 - 2015-07-10 04:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys 2015-11-05 19:51 - 2015-10-08 04:42 - 00000000 ____D C:\Users\welke\Documents\My Games 2015-11-05 19:51 - 2015-10-07 16:35 - 00000000 ____D C:\Users\welke\Desktop\Games 2015-11-04 06:25 - 2015-10-07 11:58 - 11227280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2015-11-02 23:49 - 2015-10-07 10:40 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2015-11-02 23:49 - 2015-10-07 10:40 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2015-11-02 18:03 - 2015-10-07 11:58 - 18486504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2015-11-02 18:03 - 2015-10-07 11:58 - 15839200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2015-11-02 18:03 - 2015-10-07 11:58 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2015-11-02 18:03 - 2015-10-07 11:58 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2015-11-02 18:03 - 2015-10-07 11:58 - 00034493 _____ C:\WINDOWS\system32\nvinfo.pb 2015-10-29 19:46 - 2015-07-10 04:24 - 00395264 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00220160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00061952 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00047104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00023040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2015-10-29 19:46 - 2015-07-10 04:24 - 00020992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2015-10-29 19:46 - 2015-07-10 04:24 - 00008704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00008704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00004608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2015-10-29 19:46 - 2015-07-10 04:24 - 00004096 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2015-10-29 19:46 - 2015-07-10 04:14 - 00027648 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2015-10-29 19:46 - 2015-07-10 04:14 - 00005632 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2015-10-29 19:46 - 2015-07-10 04:14 - 00005120 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2015-10-29 19:46 - 2015-07-10 04:13 - 00480256 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00069120 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00010240 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2015-10-29 19:46 - 2015-07-10 04:12 - 00010240 ____N (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-11-07 16:13 - 2015-11-07 16:13 - 0000000 _____ () C:\Users\welke\AppData\Local\{A6ADDF55-EAA9-4A75-9D26-2374D1225D4F} 2015-11-07 15:50 - 2015-11-07 15:50 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-11-07 16:47 - 2015-11-07 16:47 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Einige Dateien in TEMP: ==================== C:\Users\welke\AppData\Local\Temp\JDSetup130913845842288752.exe C:\Users\welke\AppData\Local\Temp\JDSetup130913847225796983.exe C:\Users\welke\AppData\Local\Temp\JDSetup130913847496270511.exe C:\Users\welke\AppData\Local\Temp\JDSetup130914433564159294.exe C:\Users\welke\AppData\Local\Temp\JDSetup130914435104706739.exe C:\Users\welke\AppData\Local\Temp\NVI2_29.DLL C:\Users\welke\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\welke\AppData\Local\Temp\nvStInst.exe C:\Users\welke\AppData\Local\Temp\proxy_vole8327154856376836973.dll C:\Users\welke\AppData\Local\Temp\sqlite3.dll C:\Users\welke\AppData\Local\Temp\_isC65E.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-11-07 15:49 ==================== Ende von FRST.txt ============================ |
|
09.11.2015, 16:21
| #8 |
| | weis nicht mehr weiter ist mein PC noch sicher Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-11-2015 durchgeführt von welke (2015-11-09 17:18:35) Gestartet von C:\Users\welke\Downloads Windows 10 Home (X64) (2015-11-07 14:52:23) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1386018650-2852012181-2027807497-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1386018650-2852012181-2027807497-503 - Limited - Disabled) Gast (S-1-5-21-1386018650-2852012181-2027807497-501 - Limited - Disabled) welke (S-1-5-21-1386018650-2852012181-2027807497-1001 - Administrator - Enabled) => C:\Users\welke ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B} AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated) CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.) Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden hide.me VPN Version 1.1.6 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.1.6 - eVenture Limited) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation) Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0 - Mozilla) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 358.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.87 - NVIDIA Corporation) NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation) NVIDIA Grafiktreiber 358.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.87 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE) ON_OFF Charge 2 B13.0403.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.7.1025.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden The Guild II - Pirates of the European Seas (HKLM-x32\...\Steam App 39660) (Version: - 4 Head Studios) The Guild II (HKLM-x32\...\Steam App 39650) (Version: - 4 Head Studios) The Guild II: Renaissance (HKLM-x32\...\Steam App 39680) (Version: - Rune Forge) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1386018650-2852012181-2027807497-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\welke\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation) ==================== Wiederherstellungspunkte ========================= ACHTUNG: Systemwiederherstellung ist deaktiviert ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2015-11-07 15:44 - 2015-11-08 08:24 - 00000822 ____A C:\WINDOWS\system32\Drivers\etc\hosts # ::1 localhost ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {50AF9293-B162-49DB-A77A-EBE5A7488267} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd) Task: {899A119E-B0DC-4BB4-9440-A82830D39259} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation) Task: {8D9F971A-17B9-45DE-9F31-80AE5E03964D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {9D789161-A2B2-4BC1-A986-9C47005BAC5C} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2015-07-10] (Microsoft Corporation) Task: {B116CF4A-DB14-4319-8958-A844048D6AA8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-07] (Google Inc.) Task: {D27246C5-2807-4B93-AAE0-F29F436A3EE9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-07] (Google Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-09-10 06:12 - 2015-09-10 06:12 - 00032768 ____N () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 2015-11-07 15:49 - 2015-11-02 14:36 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-09-10 06:12 - 2015-09-10 06:12 - 00404480 ____N () C:\WINDOWS\System32\diagtrack_wininternal.dll 2015-10-07 15:10 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-07 15:10 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-10-07 15:09 - 2015-09-17 06:48 - 00429056 ____N () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-07-10 04:13 - 2015-07-10 04:13 - 00143360 ____N () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll 2015-10-19 21:00 - 2015-10-19 21:00 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2015-11-08 14:03 - 2015-11-08 14:03 - 08717824 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2015-11-08 14:03 - 2015-11-08 14:03 - 02371072 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll 2015-11-07 16:08 - 2015-10-20 15:55 - 01908040 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll 2015-11-07 16:08 - 2015-10-20 15:55 - 00093512 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll 2015-11-08 14:02 - 2015-11-08 14:02 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2015-11-08 14:02 - 2015-11-08 14:02 - 10958848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2015-11-08 14:01 - 2015-11-08 14:02 - 00245760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2015-09-10 06:12 - 2015-09-10 06:12 - 00293376 ____N () C:\WINDOWS\SYSTEM32\textinputframework.dll 2015-10-07 15:10 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-10-07 15:09 - 2015-09-17 06:42 - 00471040 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-10-07 15:09 - 2015-09-17 06:49 - 00884736 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2015-10-07 15:09 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-10-07 15:10 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-07-10 04:13 - 2015-09-10 06:12 - 00210432 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll 2015-10-07 15:09 - 2015-09-17 06:43 - 00928768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesBackgroundTasks.dll 2015-10-07 15:09 - 2015-09-17 06:43 - 02028544 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesService.dll 2015-10-07 15:09 - 2015-09-17 06:42 - 00619008 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SignalsManager.dll 2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll 2015-11-07 17:06 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2014-12-11 20:30 - 2015-10-05 17:18 - 00778752 _____ () D:\Program Files (x86)\Steam\SDL2.dll 2015-01-20 15:17 - 2015-07-03 17:12 - 04962816 _____ () D:\Program Files (x86)\Steam\v8.dll 2014-12-11 20:30 - 2015-11-05 17:44 - 02541648 _____ () D:\Program Files (x86)\Steam\video.dll 2014-12-11 20:30 - 2015-09-24 01:33 - 02549248 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll 2014-12-11 20:30 - 2015-09-24 01:33 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll 2014-12-11 20:30 - 2015-09-24 01:33 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll 2014-12-11 20:30 - 2015-09-24 01:33 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll 2014-12-11 20:30 - 2015-09-24 01:33 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll 2015-01-20 15:17 - 2015-07-03 17:12 - 01556992 _____ () D:\Program Files (x86)\Steam\icui18n.dll 2015-01-20 15:17 - 2015-07-03 17:12 - 01187840 _____ () D:\Program Files (x86)\Steam\icuuc.dll 2014-12-11 20:30 - 2015-11-05 17:44 - 00806992 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL 2015-07-22 18:24 - 2015-11-03 23:00 - 00201728 _____ () D:\Program Files (x86)\Steam\bin\openvr_api.dll 2014-12-11 20:30 - 2015-10-08 23:20 - 45010208 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll 2015-01-20 15:17 - 2015-09-25 00:56 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\welke\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\cortana-face-photo-microsoft-windows-10-assistant-bot-hd.jpg DNS Servers: 85.17.25.21 - 85.17.25.22 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1386018650-2852012181-2027807497-1001\...\StartupApproved\StartupFolder: => "The Walking Dead Original Soundtrack - Theme Song HD.mp3" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{CED551B6-B648-40D2-9049-B19F9F16DAD5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{4CD29EC7-0B3B-48F8-8E8A-A823264D128C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{93068108-70AD-49D4-9EB6-725D8353164F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{00F24EC9-41BE-4FB0-8521-09E5B4D92759}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{EDD8AA11-51F9-4AD8-A482-37DFF7CBC380}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{DA13FB85-1B2E-4DBC-8E53-CD4FA67C1D4D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{3242CE69-10ED-4EEE-A64E-F3B024ED81AD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{AA418982-FAC2-4C12-A17F-72D73DD4F5E2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{3A0C9F50-8959-40D1-ABD0-15AFCB7F37B9}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{E40D9904-5852-4318-9B68-559B4700426E}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2EA0CBEA-3D54-4F7C-BDF1-FC4F4E6C1C65}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{ACEE0D9B-2AFC-4B5A-A990-300B63DB4695}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{E5A83FB4-274E-4910-BC9F-4CA20DD542DA}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\SotA\Shroud of the Avatar.exe FirewallRules: [{0EF7ECF1-0211-44A3-BA02-BCFABA6F6570}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\SotA\Shroud of the Avatar.exe FirewallRules: [{2404620E-061A-4095-B884-4A05789CBA61}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild 2 Renaissance\GuildII.exe FirewallRules: [{C896B35F-7BF4-4C29-A7DE-F0187009D10E}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild 2 Renaissance\GuildII.exe FirewallRules: [{D1DF463B-025B-4715-A3F8-3C2F03EC5C2A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild II\GuildII.exe FirewallRules: [{BC87E9D9-429A-4A6B-AF57-56B13C979945}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild II\GuildII.exe FirewallRules: [{C902CC7F-E298-44C2-ACE0-AE114978176A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild II - Pirates of the European Seas\GuildII.exe FirewallRules: [{B4E4180B-BFB8-4214-8B60-8CFA95F744CF}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Guild II - Pirates of the European Seas\GuildII.exe ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (11/09/2015 05:13:50 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Error: (11/09/2015 03:07:48 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Error: (11/08/2015 09:19:23 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={570582D6-F0B0-4C15-AF8A-FEB5458E3044}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "hide me VPN" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 809. Error: (11/08/2015 09:17:05 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={68E2718E-52C8-44C6-8872-3F569DF5FE92}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "hide me VPN" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 809. Error: (11/08/2015 09:15:11 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={E76D1CB9-FA2F-424D-960E-3427526CFFB6}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "hide me VPN" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 809. Error: (11/08/2015 09:14:22 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={79EBE2F0-EA84-4BD9-8FD0-E5989D473383}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "hide me VPN" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 809. Error: (11/08/2015 09:13:06 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Error: (11/08/2015 09:13:04 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Error: (11/08/2015 09:13:03 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Error: (11/08/2015 09:13:03 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest. Systemfehler: ============= Error: (11/09/2015 03:08:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (11/09/2015 03:08:44 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\welke\AppData\Local\Temp\ehdrv.sys Error: (11/09/2015 03:08:44 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\welke\AppData\Local\Temp\ehdrv.sys Error: (11/09/2015 03:08:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (11/09/2015 03:08:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (11/09/2015 03:08:44 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\welke\AppData\Local\Temp\ehdrv.sys Error: (11/09/2015 03:08:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (11/09/2015 03:08:31 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\welke\AppData\Local\Temp\ehdrv.sys Error: (11/09/2015 03:08:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (11/09/2015 03:08:31 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\welke\AppData\Local\Temp\ehdrv.sys CodeIntegrity: =================================== Date: 2015-11-07 15:51:11.134 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-07 15:51:11.131 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-4670 CPU @ 3.40GHz Prozentuale Nutzung des RAM: 38% Installierter physikalischer RAM: 8070.79 MB Verfügbarer physikalischer RAM: 4984.93 MB Summe virtueller Speicher: 9990.79 MB Verfügbarer virtueller Speicher: 6517.65 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:111.3 GB) (Free:74.91 GB) NTFS Drive d: (Games Downloads) (Fixed) (Total:2794.39 GB) (Free:1539.82 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 26216F8B) Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ sollte dann alles sein denke ich, nun hoffe ich dass es gut ausschaut |
|
10.11.2015, 19:45
| #9 |
| /// the machine /// TB-Ausbilder | weis nicht mehr weiter ist mein PC noch sicher Download Ordner leeren. Downloadverhalten überdenken: CHIP-Installer - was ist das? - Anleitungen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren .
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung:Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.11.2015, 07:02
| #10 |
| | weis nicht mehr weiter ist mein PC noch sicher Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-11-2015 durchgeführt von welke (2015-11-15 07:59:08) Run:1 Gestartet von C:\Users\welke\Downloads Geladene Profile: welke (Verfügbare Profile: welke) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** Emptytemp: ***************** EmptyTemp: => 852.6 MB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende von Fixlog 07:59:17 ==== # DelFix v1.011 - Datei am 15/11/2015 um 08:01:34 erstellt # Aktualisiert am 18/08/2015 von Xplode # Benutzer : welke - DESKTOP-0TMHTJS # Betriebssystem : Windows 10 Home (64 bits) ~ Aktiviere die Benutzerkontensteuerung ... OK ~ Entferne die Bereinigungsprogramme ... Gelöscht : C:\FRST Gelöscht : C:\AdwCleaner Gelöscht : C:\Users\welke\Downloads\AdwCleaner_5.018.exe Gelöscht : C:\Users\welke\Downloads\esetsmartinstaller_deu.exe Gelöscht : C:\Users\welke\Downloads\FRST64.exe Gelöscht : C:\Users\welke\Downloads\SecurityCheck.exe Gelöscht : HKLM\SOFTWARE\AdwCleaner ~ Erstelle ein Backup der Registrierungsdatenbank ... OK ~ Lösche die Wiederherstellungspunkte ... Ein neuer Wiederherstellungspunkt wurde erstellt ! ~ Stelle die Systemeinstellungen wieder her ... OK ########## - EOF - ########## |
|
15.11.2015, 14:35
| #11 |
| /// the machine /// TB-Ausbilder | weis nicht mehr weiter ist mein PC noch sicher fertig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu weis nicht mehr weiter ist mein PC noch sicher |
| aufsetzen, chip, daten, eset, externe festplatte, festplatte, gen, gmer, internet, kaspersky, malwarebytes, meldung, microsoft, neu, nicht mehr, ordner, platte, probleme, programme, quarantäne, security, verbindung, vpn, warnmeldung, warum, windows |
dann auf 
und dann auf 
. 
+ R Taste und schreibe Combofix /Uninstall in das 
