Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Bedenklicher Eintrag im Startmenü

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 24.04.2016, 13:05   #1
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Hallo zusammen,
mein Rechner ist in letzter Zeit extrem langsam gewesen und einige Funktionen liefen gar nicht mehr.Zum Beispiel konnte ich kein Servicepack installieren und der Windows Instrumentationsverwaltungsdienst liess sich nicht starten.Ich habe den Rechner jetzt mit einer anderen Windows Version neu aufgesetzt. Service Pack ist wieder installiert und auch die Dienste laufen wieder.Jedoch ist er immer noch sehr sehr langsam.Im Startmenü habe ich etwas verdächtiges entdeckt und auch schon deaktiviert(SI TSS v1.2.1.41)
Ich habe jetzt OTL Scan gemacht und das sind die Logfiles die erstellt wurden.Vielleicht hat jemand Zeit das durchzusehen-danke schonmal!

OTL Extras logfile created on: 24.04.2016 03:49:18 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\wrecken\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

2,87 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 57,49% Memory free
5,73 Gb Paging File | 2,56 Gb Available in Paging File | 44,64% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218,20 Gb Total Space | 105,86 Gb Free Space | 48,52% Space Free | Partition Type: NTFS
Drive E: | 465,64 Gb Total Space | 132,66 Gb Free Space | 28,49% Space Free | Partition Type: FAT32

Computer Name: WRECKEN-PC | User Name: wrecken | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B67E5EE-FE04-427D-A293-42567FA8BD82}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{107A02E5-0254-49A5-9251-15CA64F3FB4F}" = lport=445 | protocol=6 | dir=in | app=system |
"{14252F8D-75D5-4CD0-85A1-7C1CFE7486C3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1E6A3F83-69A9-452F-97AA-8E9BD394C89A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{2B628720-AD0F-4B12-A7B5-A1963717FA18}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{301C491E-5D63-414E-BC37-E696DED26963}" = rport=445 | protocol=6 | dir=out | app=system |
"{36F0E12C-1843-43D7-841D-157ED1D70571}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3D13FF34-93F3-4809-B5EE-25BD79257372}" = rport=138 | protocol=17 | dir=out | app=system |
"{3DDB4787-21A3-4761-B636-DE0221E3B60D}" = lport=139 | protocol=6 | dir=in | app=system |
"{3F050B5B-2377-43EC-B9D4-480E280649F7}" = lport=137 | protocol=17 | dir=in | app=system |
"{4016D9FE-94FF-496A-97ED-227F1F542AFD}" = rport=137 | protocol=17 | dir=out | app=system |
"{6F0A192C-47A2-499E-BA94-1FFCD9DC81A8}" = lport=138 | protocol=17 | dir=in | app=system |
"{722012A0-2188-4C0B-ABDE-40553AAAB7A0}" = rport=139 | protocol=6 | dir=out | app=system |
"{7A40749E-EC74-42DB-876D-E82F665FB9CD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{8F13DB13-A7F5-4AC5-8981-35759C8F9345}" = rport=10243 | protocol=6 | dir=out | app=system |
"{9A651964-49CA-4C17-97AE-9A665DE1CB73}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9AE9D6FE-3EED-43BB-A8D3-B8EC7A9550B8}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A1599AAE-D379-4469-8777-97E1F8A3C8FE}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A8AEA65C-757D-4724-8259-FDBAE936A898}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B7F00EBC-B560-4A8C-B859-86309A6B7575}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DF40E2AC-F0B8-4DE3-9A91-67F859BAB21C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E3863164-FFC7-4837-A6ED-C96A91D8769D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07F5E027-A3CD-4998-A28E-A8107AE1E2FA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{0AD44818-2E51-4A86-95D4-5C124DF78713}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1455AF52-84FD-498F-ABAD-7669FD520DF0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1E4C9984-B378-4914-BAA7-806D8D04D20F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2188DF42-6D46-4640-BD99-5343F30B6855}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{40138661-C2BB-4EAA-95FA-3D16A3D13DBA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{59ABC7E2-FB28-4AD4-A947-4EFDF26D7864}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{75EF70A6-B4CD-4378-B222-05AD383E966F}" = protocol=6 | dir=in | app=c:\program files (x86)\real\realplayer\rpds\bin\rpdsvc.exe |
"{8681259F-9B49-4A3A-97D3-AE715AA6EF29}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{86A373C9-28CB-4FB8-A77D-1E099AD59F94}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{8B5C93F2-8BEB-4DFE-B3E2-4E93352742B2}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{939FA64A-773F-4792-A40A-4C502E101B99}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{984B2B72-9E9E-467F-998D-FBE8FC1A30ED}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{99373641-7B09-4927-9E79-ED8605B93B61}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A0EA0461-006C-42C1-A149-137EBA68A4E9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A487A376-8B86-4764-A02B-FF9CAB236BF3}" = protocol=6 | dir=out | app=system |
"{A63FE160-44FB-4EB4-80C8-77882AB3E32B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{A72C60DF-E4E0-43B5-A956-DC99E47071F8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{ADDA8F02-ABB3-4249-97C5-5B84C7300A20}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B1BC6001-AE67-46B7-BC8E-00B8D5F3E653}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B8F2EBDF-531F-49E3-9BCE-21A40283A070}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C524D936-BBF2-44C7-8B50-113492499A8C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DCB3EDA3-5666-4A41-9720-DF4718E03856}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{E239DDE4-FDE0-4327-B509-8417D449F5B7}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{E76AF798-3F24-4F53-81C6-B8E0B699409A}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{EE9061BA-7D6C-462D-A6E7-F2C685EEA8ED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{EED1B4BF-4358-40ED-BA9F-0C1312362E23}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{FAA5DCB0-5BD0-458E-9675-451A27F7F9AF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{21E47F47-C9A7-4454-BA48-388327B0EA00}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{5F160A36-29D0-4AE0-986C-671A564BC0D4}" = Wave Crypto Runtime 2.0.9.0 x64
"{73ca1ddf-9d19-45f2-ad4c-04169ec13342}" = Intel(R) PRO/Wireless Driver
"{7567A068-2F02-40D1-A34C-16D79ECD35A6}" = GemPcCCID
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{86A9BBDF-9B6D-4E3D-810E-23C9079C6217}" = Wave Support Software Installer
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{91CE5F03-3A2A-4268-935A-04944F058AE9}" = Gemalto
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{9C481E27-751F-48B9-801D-C583F032DA50}" = Intel® PROSet/Wireless WiFi Software
"{9CC89928-4787-4ED5-9942-4EBF6C2468E6}" = Dell System Manager
"{9F9DF365-C354-468F-A174-82660FB13C5C}" = O2Micro OZ776 SCR Driver
"{A2309A2F-4BEB-45C8-92E1-84D430AC15AD}" = SI TSS
"{ABBA2EA4-740E-4052-902B-9CA70B081E3F}" = Dell Data Protection | Access
"{BE1CF6CA-3182-45D8-9535-A18055B73607}" = Dell Custom Help
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = Samsung USB Driver for Mobile Phones
"{DD317AA5-F0EF-480F-9501-507712B5E0B6}" = SPBA (WBF) 5.9
"{DF5B5BEC-BA44-4669-98C8-2A691C5EA428}" = PBA Driver-x64
"{F888B1E9-64E3-479D-91DB-2D9193C39535}" = AuthenTec WinBio FingerPrint Software 64-bit
"VLC media player" = VLC media player

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13743594-F75E-491E-9EFF-203C8F8DF705}" = RealDownloader
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2B818257-E6C7-4841-8C29-C5C9A982BCE5}" = RICOH Media Driver ver.2.07.01.01
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{48D18738-099C-4FAA-AFD9-80B592A25478}" = RealDownloader
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{75c02118-61df-4a00-b4ae-8a8f2ab354b3}" = RealDownloader
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{58FC5E37-DD28-4D4A-A549-125744C6763C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{00C5525B-3CB3-467D-8100-2E6FB306CD86}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{888B9AC7-8F5C-456B-A27A-157A6C310E52}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{888B9AC7-8F5C-456B-A27A-157A6C310E52}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC76BA86-0804-1033-1959-001824166751}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.15) - Deutsch
"{b6b417a3-1f40-4618-aadd-49628bda7836}" = Intel® PROSet/Wireless Software
"{E3AE96D6-E196-45B4-AF62-2B41998B9E37}" = UpdateService
"{E60AFF01-6087-47BD-8272-61FA3CFC309D}" = Video Downloader
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{FC965A47-4839-40CA-B618-18F486F042C6}" = Skype™ 7.22
"Adobe Flash Player NPAPI" = Adobe Flash Player 21 NPAPI
"Another Matrix Screen Saver_is1" = Another Matrix Screen Saver
"Avast" = Avast Business Security
"ENTERPRISE" = Microsoft Office Enterprise 2007
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"InstallShield_{9F9DF365-C354-468F-A174-82660FB13C5C}" = O2Micro OZ776 SCR Driver
"Mozilla Firefox 45.0.2 (x86 de)" = Mozilla Firefox 45.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"OrangeEdit_is1" = OrangeEdit 2.0 BETA
"RarZilla Free Unrar" = RarZilla Free Unrar
"RealPlayer 18.1" = RealPlayer (RealTimes)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"58d94f3ce2c27db0" = Dell System Detect

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22.04.2016 15:51:16 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 3029
Description =

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 3029
Description =

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 3028
Description =

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 3058
Description =

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 7010
Description =

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Windows Search Service | ID = 7042
Description =

Error - 22.04.2016 15:52:36 | Computer Name = wrecken-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: downloader2.exe, Version: 18.1.3.104,
Zeitstempel: 0x56b2b0c9 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften
Prozesses: 0xcfc Startzeit der fehlerhaften Anwendung: 0x01d19ccf5cf96078 Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Pfad
des fehlerhaften Moduls: unknown Berichtskennung: c277b56a-08c3-11e6-942a-1c659d039fda

Error - 22.04.2016 19:57:40 | Computer Name = wrecken-PC | Source = bcc | ID = 1
Description = synchronize - exchange FAILED -12 (1 retry)

Error - 23.04.2016 16:37:07 | Computer Name = wrecken-PC | Source = bcc | ID = 1
Description = synchronize - exchange FAILED -12 (1 retry)

Error - 23.04.2016 16:39:17 | Computer Name = wrecken-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 22.04.2016 15:50:49 | Computer Name = wrecken-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits
11 Mal passiert.

Error - 22.04.2016 15:50:50 | Computer Name = wrecken-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits
12 Mal passiert.

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem
Fehler beendet: %%-1073473535.

Error - 22.04.2016 15:51:25 | Computer Name = wrecken-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits
13 Mal passiert.

Error - 23.04.2016 16:36:31 | Computer Name = wrecken-PC | Source = DCOM | ID = 10010
Description =

Error - 23.04.2016 16:37:00 | Computer Name = wrecken-PC | Source = DCOM | ID = 10010
Description =

Error - 23.04.2016 17:15:11 | Computer Name = wrecken-PC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error - 23.04.2016 17:15:11 | Computer Name = wrecken-PC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error - 23.04.2016 17:15:11 | Computer Name = wrecken-PC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.

Error - 23.04.2016 17:15:11 | Computer Name = wrecken-PC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden.


< End of report >


OTL logfile created on: 24.04.2016 03:49:18 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\wrecken\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

2,87 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 57,49% Memory free
5,73 Gb Paging File | 2,56 Gb Available in Paging File | 44,64% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218,20 Gb Total Space | 105,86 Gb Free Space | 48,52% Space Free | Partition Type: NTFS
Drive E: | 465,64 Gb Total Space | 132,66 Gb Free Space | 28,49% Space Free | Partition Type: FAT32

Computer Name: WRECKEN-PC | User Name: wrecken | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\wrecken\Downloads\otl.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe (RealNetworks, Inc.)
PRC - C:\Programme\AVAST Software\Avast\avastui.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\bccavsvc.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\bcc.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe ()
PRC - C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe ()
PRC - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (DEVGURU Co., LTD.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
PRC - C:\Programme\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (Broadcom Corporation.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Real\RealPlayer\RPDS\Lib\r1api.dll ()
MOD - C:\Programme\AVAST Software\Avast\ffl2.dll ()
MOD - C:\Programme\AVAST Software\Avast\libcef.dll ()
MOD - C:\Programme\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Programme\AVAST Software\Avast\log.dll ()
MOD - C:\Program Files (x86)\RealNetworks\RealDownloader\dtvhooks.dll ()
MOD - C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe ()
MOD - C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll ()
MOD - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()


========== Services (SafeList) ==========

SRV:64bit: - (Avast Business Console Client Antivirus Service) -- C:\Program Files\AVAST Software\Avast\bccavsvc.exe (AVAST Software)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (RealTimes Desktop Service) -- C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe (RealNetworks, Inc.)
SRV - (aswBcc) -- C:\Programme\AVAST Software\Avast\bcc.exe (AVAST Software)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (RealPlayerUpdateSvc) -- C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe ()
SRV - (ss_conn_service) -- C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (DEVGURU Co., LTD.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ZeroConfigService) -- C:\Programme\Intel\WiFi\bin\ZeroConfigService.exe (Intel® Corporation)
SRV - (MyWiFiDHCPDNS) -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV - (EvtEng) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (PbaDrvSvc_x64) -- C:\Programme\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe (Dell, Inc.)
SRV - (tcsd_win32.exe) -- C:\Program Files (x86)\Security Innovation\SI TSS\bin\tcsd_win32.exe ()
SRV - (dcpsysmgrsvc) -- C:\Programme\Dell\Dell System Manager\DCPSysMgrSvc.exe (Dell Inc.)
SRV - (btwdins) -- C:\Programme\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys (AVAST Software)
DRV:64bit: - (aswStm) -- C:\Windows\SysNative\drivers\aswStm.sys (AVAST Software)
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys (AVAST Software)
DRV:64bit: - (aswHwid) -- C:\Windows\SysNative\drivers\aswHwid.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (BTWAMPFL) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (NETwNs64) -- C:\Windows\SysNative\drivers\NETwsw00.sys (Intel Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (dcdbas) -- C:\Windows\SysNative\drivers\dcdbas64.sys (Dell Inc.)
DRV:64bit: - (Acceler) -- C:\Windows\SysNative\drivers\accelern.sys (ST Microelectronics)
DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (stdcfltn) -- C:\Windows\SysNative\drivers\stdcfltn.sys (ST Microelectronics)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (risdpcie) -- C:\Windows\SysNative\drivers\risdpe64.sys (REDC)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-at/?ocid=iehp
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = EE A5 52 AA 28 9B D1 01 [binary data]
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "AT"
FF - prefs.js..browser.search.region: "AT"
FF - prefs.js..browser.startup.homepage: "www.google.at"
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20151208
FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.9.0.11
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:45.0.2
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll ()
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=18.1.3.100: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=18.1.3.100: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 45.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 45.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2016.04.20 20:21:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\wrecken\AppData\Roaming\mozilla\Extensions
[2016.04.21 17:17:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\wrecken\AppData\Roaming\mozilla\Firefox\Profiles\nrxv7ewj.default\extensions
[2016.04.21 17:15:19 | 000,000,000 | ---D | M] (WOT) -- C:\Users\wrecken\AppData\Roaming\mozilla\Firefox\Profiles\nrxv7ewj.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2016.04.21 17:16:45 | 000,564,411 | ---- | M] () (No name found) -- C:\Users\wrecken\AppData\Roaming\mozilla\firefox\profiles\nrxv7ewj.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2016.04.21 17:17:23 | 001,013,992 | ---- | M] () (No name found) -- C:\Users\wrecken\AppData\Roaming\mozilla\firefox\profiles\nrxv7ewj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2016.04.20 19:25:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPROSet] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2048369672-643187680-2407283211-1000\..Trusted Domains: dell.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{30A37DFD-E193-4F21-87E2-E1D475688139}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4113C692-F91C-457A-86B7-261856760A92}: DhcpNameServer = 212.33.36.155 212.33.55.5
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\spba: DllName - (C:\Program Files\Common Files\SPBA\homefus2.dll) - C:\Programme\Common Files\SPBA\homefus2.dll (Authentec Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2016.04.23 22:35:56 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2016.04.23 08:06:50 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
[2016.04.22 22:13:11 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Macromedia
[2016.04.22 22:13:11 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Macromedia
[2016.04.22 22:12:44 | 000,797,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2016.04.22 22:12:44 | 000,142,528 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2016.04.22 22:12:43 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2016.04.22 22:12:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2016.04.22 21:45:00 | 000,000,000 | ---D | C] -- C:\Users\wrecken\Documents\Bluetooth-Exchange-Ordner
[2016.04.22 00:11:06 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2016.04.21 22:04:55 | 000,171,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\infocardapi.dll
[2016.04.21 22:04:55 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\infocardapi.dll
[2016.04.21 22:04:52 | 001,389,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardagt.exe
[2016.04.21 22:04:52 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardagt.exe
[2016.04.21 22:04:52 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardres.dll
[2016.04.21 22:04:52 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardres.dll
[2016.04.21 22:04:39 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TsWpfWrp.exe
[2016.04.21 22:04:39 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsWpfWrp.exe
[2016.04.21 21:43:17 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2016.04.21 21:43:17 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2016.04.21 21:22:14 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2016.04.21 21:19:44 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2016.04.21 21:19:44 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2016.04.21 13:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RarZilla Free Unrar
[2016.04.21 13:19:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RarZilla Free Unrar
[2016.04.21 13:17:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2016.04.21 13:17:14 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Notepad++
[2016.04.21 13:17:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
[2016.04.21 13:11:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OrangeEdit
[2016.04.21 13:11:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OrangeEdit
[2016.04.21 13:11:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services
[2016.04.21 13:11:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2016.04.21 13:10:01 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Programs
[2016.04.21 13:08:24 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\OrangeApps
[2016.04.21 13:08:24 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\OrangeApps
[2016.04.21 12:35:08 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Philipp Winterberg
[2016.04.21 12:20:39 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Real
[2016.04.21 12:20:18 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\RealNetworks
[2016.04.21 12:20:10 | 000,000,000 | ---D | C] -- C:\ProgramData\RealNetworks
[2016.04.21 12:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RealNetworks
[2016.04.21 12:19:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2016.04.21 12:19:51 | 000,200,944 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2016.04.21 12:19:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2016.04.21 12:19:40 | 000,278,768 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2016.04.21 12:19:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2016.04.21 12:19:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Real
[2016.04.21 12:18:30 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Real
[2016.04.21 12:15:18 | 000,000,000 | ---D | C] -- C:\Users\wrecken\Tracing
[2016.04.21 12:14:40 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Skype
[2016.04.21 12:14:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2016.04.21 12:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2016.04.21 12:14:26 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2016.04.21 12:14:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2016.04.21 12:11:11 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\vlc
[2016.04.21 12:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2016.04.21 12:10:24 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2016.04.21 11:34:57 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\NativeFus_Log
[2016.04.21 11:34:07 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll
[2016.04.21 11:34:07 | 000,708,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinUSBCoInstaller.dll
[2016.04.21 11:34:07 | 000,213,088 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudmdm.sys
[2016.04.21 11:34:07 | 000,120,416 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudbus.sys
[2016.04.21 11:33:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2016.04.21 11:33:02 | 000,144,664 | ---- | C] (MAPILab Ltd. & Add-in Express Ltd.) -- C:\Windows\SysWow64\secman.dll
[2016.04.21 11:33:00 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2016.04.21 11:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2016.04.21 11:32:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2016.04.21 11:27:29 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Downloaded Installations
[2016.04.21 11:20:46 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Samsung
[2016.04.21 11:20:38 | 000,000,000 | ---D | C] -- C:\Users\wrecken\Documents\samsung
[2016.04.21 11:20:38 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Samsung
[2016.04.21 11:19:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\honestech VHS to DVD 2.0 SE
[2016.04.21 11:19:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\honestech
[2016.04.21 11:18:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FANUC
[2016.04.21 11:15:23 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Adobe
[2016.04.21 11:15:23 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Adobe
[2016.04.21 10:52:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Another Matrix Screen Saver
[2016.04.21 10:52:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Another Matrix Screen Saver
[2016.04.21 07:06:01 | 000,398,152 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2016.04.21 07:04:34 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\AVAST Software
[2016.04.21 07:03:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2016.04.21 07:02:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AV
[2016.04.21 07:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AV
[2016.04.21 07:02:19 | 000,165,344 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
[2016.04.21 07:02:18 | 000,463,744 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2016.04.21 07:02:18 | 000,287,016 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
[2016.04.21 07:02:17 | 000,107,792 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2016.04.21 07:02:17 | 000,074,544 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2016.04.21 07:02:16 | 000,103,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2016.04.21 07:02:16 | 000,037,656 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
[2016.04.21 07:02:12 | 001,070,904 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2016.04.21 07:01:39 | 000,052,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2016.04.21 06:59:36 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2016.04.21 06:59:04 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2016.04.21 06:38:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2016.04.21 06:38:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2016.04.21 06:35:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2016.04.20 21:28:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2016.04.20 21:27:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2016.04.20 21:26:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2016.04.20 21:26:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2016.04.20 21:26:47 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2016.04.20 21:26:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2016.04.20 21:24:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2016.04.20 21:23:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2016.04.20 21:22:28 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Microsoft Help
[2016.04.20 21:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2016.04.20 21:22:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2016.04.20 21:21:56 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2016.04.20 21:16:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell System Manager
[2016.04.20 21:15:55 | 000,382,056 | ---- | C] (Dell Inc.) -- C:\Windows\hapint.exe
[2016.04.20 21:15:55 | 000,335,464 | ---- | C] (Dell Inc.) -- C:\Windows\dchcfg64.exe
[2016.04.20 21:15:55 | 000,093,288 | ---- | C] (Dell Inc.) -- C:\Windows\dcmdev64.exe
[2016.04.20 21:15:53 | 000,459,880 | ---- | C] (Dell Inc.) -- C:\Windows\SysNative\dchbas64.dll
[2016.04.20 21:15:53 | 000,322,664 | ---- | C] (Dell Inc.) -- C:\Windows\SysNative\dchapi64.dll
[2016.04.20 21:15:16 | 000,000,000 | ---D | C] -- C:\apps
[2016.04.20 21:15:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Security Innovation
[2016.04.20 21:15:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Security Innovation
[2016.04.20 21:15:06 | 000,000,000 | ---D | C] -- C:\Program Files\Dell
[2016.04.20 21:13:58 | 000,000,000 | ---D | C] -- C:\Program Files\Fingerprint Sensor
[2016.04.20 21:13:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SPBA
[2016.04.20 21:13:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SPBA
[2016.04.20 21:13:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gemalto
[2016.04.20 21:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\O2Micro OZ776 SCR Driver
[2016.04.20 21:12:28 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2016.04.20 21:12:22 | 000,057,344 | ---- | C] (O2Micro) -- C:\Windows\SysWow64\ct32O2.dll
[2016.04.20 21:12:22 | 000,057,344 | ---- | C] (O2Micro) -- C:\Windows\SysNative\ct32O2.dll
[2016.04.20 21:12:18 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Wave Systems Corp
[2016.04.20 21:12:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Wave Systems Corp
[2016.04.20 21:05:00 | 000,000,000 | ---D | C] -- C:\7cae8c5651b37dbf7e24f8f5c2
[2016.04.20 21:04:20 | 000,000,000 | ---D | C] -- C:\c8bb05505b6ffae53b
[2016.04.20 21:03:08 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Broadcom
[2016.04.20 21:01:23 | 000,022,056 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\btwcoins.dll
[2016.04.20 21:01:22 | 000,349,736 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwampfl.sys
[2016.04.20 21:01:22 | 000,138,280 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwavdt.sys
[2016.04.20 21:01:22 | 000,107,560 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwaudio.sys
[2016.04.20 21:01:22 | 000,039,464 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwl2cap.sys
[2016.04.20 21:01:22 | 000,021,416 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwrchid.sys
[2016.04.20 20:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\WIDCOMM
[2016.04.20 20:55:55 | 000,196,608 | ---- | C] (RICOH) -- C:\Windows\SysNative\RiSDIcon.dll
[2016.04.20 20:55:55 | 000,188,416 | ---- | C] (RICOH) -- C:\Windows\SysNative\RiMMCIcon.dll
[2016.04.20 20:55:55 | 000,080,896 | ---- | C] (REDC) -- C:\Windows\SysNative\drivers\risdpe64.sys
[2016.04.20 20:55:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2016.04.20 20:54:50 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys
[2016.04.20 20:48:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2016.04.20 20:47:14 | 000,000,000 | ---D | C] -- C:\Intel
[2016.04.20 20:46:59 | 000,158,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\Impcd.sys
[2016.04.20 20:46:58 | 012,312,928 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys
[2016.04.20 20:46:58 | 009,528,832 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igd10umd64.dll
[2016.04.20 20:46:58 | 009,014,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxress.dll
[2016.04.20 20:46:58 | 008,314,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdumd64.dll
[2016.04.20 20:46:58 | 007,988,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10umd32.dll
[2016.04.20 20:46:58 | 006,324,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumd32.dll
[2016.04.20 20:46:58 | 002,780,160 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcmjit64.dll
[2016.04.20 20:46:58 | 002,191,872 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxcmjit32.dll
[2016.04.20 20:46:58 | 000,581,120 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumdx32.dll
[2016.04.20 20:46:58 | 000,510,960 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.exe
[2016.04.20 20:46:58 | 000,418,800 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpers.exe
[2016.04.20 20:46:58 | 000,390,144 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdev.dll
[2016.04.20 20:46:58 | 000,378,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxTMM.dll
[2016.04.20 20:46:58 | 000,376,832 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhsip64.dll
[2016.04.20 20:46:58 | 000,376,832 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhsip32.dll
[2016.04.20 20:46:58 | 000,376,320 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpph.dll
[2016.04.20 20:46:58 | 000,293,888 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxdv32.dll
[2016.04.20 20:46:58 | 000,287,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfra.lrc
[2016.04.20 20:46:58 | 000,287,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxresn.lrc
[2016.04.20 20:46:58 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrita.lrc
[2016.04.20 20:46:58 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdeu.lrc
[2016.04.20 20:46:58 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptb.lrc
[2016.04.20 20:46:58 | 000,285,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrenu.lrc
[2016.04.20 20:46:58 | 000,283,648 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrjpn.lrc
[2016.04.20 20:46:58 | 000,283,136 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrkor.lrc
[2016.04.20 20:46:58 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcht.lrc
[2016.04.20 20:46:58 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrchs.lrc
[2016.04.20 20:46:58 | 000,246,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxcmrt32.dll
[2016.04.20 20:46:58 | 000,241,136 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxext.exe
[2016.04.20 20:46:58 | 000,219,136 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcmrt64.dll
[2016.04.20 20:46:58 | 000,168,944 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxtray.exe
[2016.04.20 20:46:58 | 000,142,336 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdo.dll
[2016.04.20 20:46:58 | 000,126,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcpl.cpl
[2016.04.20 20:46:58 | 000,098,304 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhcp64.dll
[2016.04.20 20:46:58 | 000,098,304 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhcp32.dll
[2016.04.20 20:46:58 | 000,090,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v2993.dll
[2016.04.20 20:46:58 | 000,062,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.dll
[2016.04.20 20:46:58 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxexps.dll
[2016.04.20 20:46:58 | 000,024,576 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxexps32.dll
[2016.04.20 20:46:57 | 018,664,960 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\ig4icd64.dll
[2016.04.20 20:46:57 | 004,380,144 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\GfxUI.exe
[2016.04.20 20:46:57 | 000,394,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hkcmd.exe
[2016.04.20 20:46:57 | 000,146,432 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\gfxSrvc.dll
[2016.04.20 20:46:57 | 000,110,080 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hccutils.dll
[2016.04.20 20:46:55 | 000,317,440 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\drivers\IntcDAud.sys
[2016.04.20 20:46:55 | 000,185,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\difx64.exe
[2016.04.20 20:46:55 | 000,014,848 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\IntcDAuC.dll
[2016.04.20 20:45:59 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2016.04.20 20:44:38 | 000,022,128 | ---- | C] (ST Microelectronics) -- C:\Windows\SysNative\drivers\stdcfltn.sys
[2016.04.20 20:44:38 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2016.04.20 20:43:38 | 000,000,000 | ---D | C] -- C:\Program Files\STMicroelectronics
[2016.04.20 20:42:36 | 000,000,000 | ---D | C] -- C:\dell
[2016.04.20 20:41:57 | 000,081,520 | ---- | C] (ST Microelectronics) -- C:\Windows\SysNative\accelernco01.dll
[2016.04.20 20:41:57 | 000,027,760 | ---- | C] (ST Microelectronics) -- C:\Windows\SysNative\drivers\accelern.sys
[2016.04.20 20:41:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\STMicroelectronics
[2016.04.20 20:41:53 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2016.04.20 20:39:42 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Dell
[2016.04.20 20:31:06 | 000,000,000 | -H-D | C] -- C:\Windows\SysNative\WLANProfiles
[2016.04.20 20:30:46 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Intel
[2016.04.20 20:30:08 | 000,000,000 | ---D | C] -- C:\Users\wrecken\Roaming
[2016.04.20 20:30:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Roaming
[2016.04.20 20:29:14 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
[2016.04.20 20:28:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2016.04.20 20:28:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2016.04.20 20:28:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2016.04.20 20:28:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2016.04.20 20:26:30 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2016.04.20 20:26:26 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2016.04.20 20:26:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2016.04.20 20:25:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Dell
[2016.04.20 20:24:04 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2016.04.20 20:24:04 | 000,058,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2016.04.20 20:24:04 | 000,044,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2016.04.20 20:23:58 | 000,700,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2016.04.20 20:23:58 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2016.04.20 20:23:58 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2016.04.20 20:23:58 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2016.04.20 20:23:58 | 000,038,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2016.04.20 20:23:58 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2016.04.20 20:23:50 | 000,198,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2016.04.20 20:23:50 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2016.04.20 20:23:50 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2016.04.20 20:23:50 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2016.04.20 20:22:28 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Deployment
[2016.04.20 20:22:28 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Apps
[2016.04.20 20:04:29 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2016.04.20 19:26:08 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Mozilla
[2016.04.20 19:26:07 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Mozilla
[2016.04.20 19:25:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2016.04.20 19:25:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2016.04.20 19:12:33 | 000,000,000 | R--D | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2016.04.20 19:12:33 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Searches
[2016.04.20 19:12:33 | 000,000,000 | R--D | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2016.04.20 19:12:25 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Identities
[2016.04.20 19:12:23 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Contacts
[2016.04.20 19:12:22 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\VirtualStore
[2016.04.20 19:12:13 | 000,000,000 | --SD | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Videos
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Saved Games
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Pictures
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Music
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Links
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Favorites
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Downloads
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Documents
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\Desktop
[2016.04.20 19:12:13 | 000,000,000 | R--D | C] -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Vorlagen
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\AppData\Local\Verlauf
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\AppData\Local\Temporary Internet Files
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Startmenü
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\SendTo
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Recent
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Netzwerkumgebung
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Lokale Einstellungen
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Documents\Eigene Videos
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Documents\Eigene Musik
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Eigene Dateien
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Documents\Eigene Bilder
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Druckumgebung
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Cookies
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\AppData\Local\Anwendungsdaten
[2016.04.20 19:12:13 | 000,000,000 | -HSD | C] -- C:\Users\wrecken\Anwendungsdaten
[2016.04.20 19:12:13 | 000,000,000 | -H-D | C] -- C:\Users\wrecken\AppData
[2016.04.20 19:12:13 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Temp
[2016.04.20 19:12:13 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Local\Microsoft
[2016.04.20 19:12:13 | 000,000,000 | ---D | C] -- C:\Users\wrecken\AppData\Roaming\Media Center Programs
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Recovery
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Programme
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2016.04.20 19:12:07 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2016.04.20 19:08:04 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2016.04.20 19:05:53 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2016.04.20 19:05:15 | 000,000,000 | -HSD | C] -- C:\System Volume Information

========== Files - Modified Within 30 Days ==========

[2016.04.24 03:40:43 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016.04.24 03:40:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016.04.23 22:46:41 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016.04.23 22:46:41 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016.04.23 22:46:10 | 001,618,320 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2016.04.23 22:46:10 | 000,698,926 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2016.04.23 22:46:10 | 000,653,724 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2016.04.23 22:46:10 | 000,149,034 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2016.04.23 22:46:10 | 000,121,596 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2016.04.23 22:38:14 | 2307,272,704 | -HS- | M] () -- C:\hiberfil.sys
[2016.04.22 22:12:44 | 000,797,376 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2016.04.22 22:12:44 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2016.04.22 00:13:17 | 001,559,112 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2016.04.21 13:19:32 | 000,001,091 | ---- | M] () -- C:\Users\Public\Desktop\RarZilla Free Unrar.lnk
[2016.04.21 13:17:16 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\Notepad++.lnk
[2016.04.21 13:11:10 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\OrangeEdit.lnk
[2016.04.21 12:20:28 | 000,001,204 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer (RealTimes).lnk
[2016.04.21 12:19:51 | 000,200,944 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2016.04.21 12:19:40 | 000,278,768 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2016.04.21 12:14:27 | 000,002,699 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2016.04.21 12:10:53 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2016.04.21 11:53:39 | 000,001,969 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies 3.lnk
[2016.04.21 11:45:41 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf
[2016.04.21 11:34:46 | 000,002,002 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
[2016.04.21 11:34:46 | 000,001,992 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2016.04.21 10:52:46 | 000,001,133 | ---- | M] () -- C:\Users\wrecken\Desktop\Another Matrix Screen Saver.lnk
[2016.04.21 07:03:46 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\Avast Business Security.lnk
[2016.04.21 07:02:57 | 001,070,904 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2016.04.21 07:02:56 | 000,107,792 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2016.04.21 07:02:55 | 000,463,744 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2016.04.21 07:01:42 | 000,398,152 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2016.04.21 07:01:42 | 000,287,016 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
[2016.04.21 07:01:42 | 000,165,344 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
[2016.04.21 07:01:42 | 000,074,544 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2016.04.21 07:01:42 | 000,037,656 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
[2016.04.21 07:01:41 | 000,103,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2016.04.21 07:01:39 | 000,052,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2016.04.21 06:39:07 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2016.04.20 21:52:56 | 000,416,336 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2016.04.20 21:16:19 | 000,002,024 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell System Manager.lnk
[2016.04.20 21:13:15 | 000,000,206 | ---- | M] () -- C:\Windows\hbcikrnl.ini
[2016.04.20 21:13:13 | 000,000,306 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2016.04.20 21:12:22 | 000,057,344 | ---- | M] (O2Micro) -- C:\Windows\SysWow64\ct32O2.dll
[2016.04.20 21:12:22 | 000,057,344 | ---- | M] (O2Micro) -- C:\Windows\SysNative\ct32O2.dll
[2016.04.20 21:01:34 | 000,000,834 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2016.04.20 20:56:51 | 000,349,736 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwampfl.sys
[2016.04.20 20:56:51 | 000,138,280 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwavdt.sys
[2016.04.20 20:56:51 | 000,107,560 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwaudio.sys
[2016.04.20 20:56:51 | 000,039,464 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwl2cap.sys
[2016.04.20 20:56:51 | 000,022,056 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\btwcoins.dll
[2016.04.20 20:56:51 | 000,021,416 | ---- | M] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwrchid.sys
[2016.04.20 20:53:18 | 000,015,804 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2016.04.20 19:25:28 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2016.04.20 19:09:52 | 000,207,887 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2016.04.20 19:09:52 | 000,207,887 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2016.04.20 19:08:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2016.04.20 19:08:03 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

========== Files Created - No Company Name ==========

[2016.04.22 22:12:45 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016.04.22 00:13:17 | 001,559,112 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2016.04.21 13:19:32 | 000,001,091 | ---- | C] () -- C:\Users\Public\Desktop\RarZilla Free Unrar.lnk
[2016.04.21 13:17:16 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\Notepad++.lnk
[2016.04.21 13:11:10 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\OrangeEdit.lnk
[2016.04.21 12:20:28 | 000,001,204 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer (RealTimes).lnk
[2016.04.21 12:14:27 | 000,002,699 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2016.04.21 12:10:53 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2016.04.21 11:53:39 | 000,001,969 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies 3.lnk
[2016.04.21 11:45:41 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf
[2016.04.21 11:34:46 | 000,002,002 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
[2016.04.21 11:34:46 | 000,001,992 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2016.04.21 10:52:46 | 000,001,133 | ---- | C] () -- C:\Users\wrecken\Desktop\Another Matrix Screen Saver.lnk
[2016.04.21 07:03:46 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\Avast Business Security.lnk
[2016.04.21 06:39:07 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2016.04.21 06:39:07 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2016.04.20 21:16:19 | 000,002,024 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell System Manager.lnk
[2016.04.20 21:13:13 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2016.04.20 21:13:03 | 000,000,206 | ---- | C] () -- C:\Windows\hbcikrnl.ini
[2016.04.20 20:59:33 | 000,000,834 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2016.04.20 20:53:18 | 000,015,804 | ---- | C] () -- C:\Windows\SysNative\results.xml
[2016.04.20 20:46:58 | 001,981,696 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.cpa
[2016.04.20 20:46:58 | 000,867,020 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2016.04.20 20:46:58 | 000,867,020 | ---- | C] () -- C:\Windows\SysNative\igkrng575.bin
[2016.04.20 20:46:58 | 000,128,204 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2016.04.20 20:46:58 | 000,128,204 | ---- | C] () -- C:\Windows\SysNative\igcompkrng575.bin
[2016.04.20 20:46:58 | 000,105,608 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2016.04.20 20:46:58 | 000,105,608 | ---- | C] () -- C:\Windows\SysNative\igfcg575m.bin
[2016.04.20 20:46:58 | 000,059,243 | ---- | C] () -- C:\Windows\SysNative\iglhxo64.vp
[2016.04.20 20:46:58 | 000,059,174 | ---- | C] () -- C:\Windows\SysNative\iglhxg64.vp
[2016.04.20 20:46:58 | 000,059,062 | ---- | C] () -- C:\Windows\SysNative\iglhxc64.vp
[2016.04.20 20:46:58 | 000,017,444 | ---- | C] () -- C:\Windows\SysNative\iglhxs64.vp
[2016.04.20 20:46:58 | 000,004,096 | ---- | C] ( ) -- C:\Windows\SysNative\IGFXDEVLib.dll
[2016.04.20 20:46:58 | 000,001,074 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.vp
[2016.04.20 20:46:57 | 013,913,600 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2016.04.20 20:46:57 | 000,135,370 | ---- | C] () -- C:\Windows\SysNative\Gfxres.tr-TR.resources
[2016.04.20 20:46:57 | 000,117,636 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-TW.resources
[2016.04.20 20:46:57 | 000,116,348 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-CN.resources
[2016.04.20 20:46:57 | 000,094,208 | ---- | C] () -- C:\Windows\SysNative\IccLibDll_x64.dll
[2016.04.20 20:46:57 | 000,000,146 | ---- | C] () -- C:\Windows\SysNative\GfxUI.exe.config
[2016.04.20 20:46:56 | 000,211,303 | ---- | C] () -- C:\Windows\SysNative\Gfxres.th-TH.resources
[2016.04.20 20:46:56 | 000,198,139 | ---- | C] () -- C:\Windows\SysNative\Gfxres.el-GR.resources
[2016.04.20 20:46:56 | 000,182,706 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ru-RU.resources
[2016.04.20 20:46:56 | 000,153,167 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ja-JP.resources
[2016.04.20 20:46:56 | 000,149,009 | ---- | C] () -- C:\Windows\SysNative\Gfxres.he-IL.resources
[2016.04.20 20:46:56 | 000,140,216 | ---- | C] () -- C:\Windows\SysNative\Gfxres.it-IT.resources
[2016.04.20 20:46:56 | 000,138,727 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ko-KR.resources
[2016.04.20 20:46:56 | 000,137,846 | ---- | C] () -- C:\Windows\SysNative\Gfxres.de-DE.resources
[2016.04.20 20:46:56 | 000,137,668 | ---- | C] () -- C:\Windows\SysNative\Gfxres.es-ES.resources
[2016.04.20 20:46:56 | 000,136,603 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ro-RO.resources
[2016.04.20 20:46:56 | 000,135,628 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fr-FR.resources
[2016.04.20 20:46:56 | 000,134,836 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-BR.resources
[2016.04.20 20:46:56 | 000,134,412 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nl-NL.resources
[2016.04.20 20:46:56 | 000,134,384 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hu-HU.resources
[2016.04.20 20:46:56 | 000,133,846 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sv-SE.resources
[2016.04.20 20:46:56 | 000,133,709 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-PT.resources
[2016.04.20 20:46:56 | 000,133,178 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pl-PL.resources
[2016.04.20 20:46:56 | 000,132,889 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fi-FI.resources
[2016.04.20 20:46:56 | 000,132,788 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sk-SK.resources
[2016.04.20 20:46:56 | 000,131,839 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hr-HR.resources
[2016.04.20 20:46:56 | 000,128,996 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sl-SI.resources
[2016.04.20 20:46:56 | 000,128,831 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nb-NO.resources
[2016.04.20 20:46:56 | 000,124,052 | ---- | C] () -- C:\Windows\SysNative\Gfxres.en-US.resources
[2016.04.20 20:46:55 | 000,156,233 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ar-SA.resources
[2016.04.20 20:46:55 | 000,133,404 | ---- | C] () -- C:\Windows\SysNative\Gfxres.cs-CZ.resources
[2016.04.20 20:46:55 | 000,128,535 | ---- | C] () -- C:\Windows\SysNative\Gfxres.da-DK.resources
[2016.04.20 19:25:28 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2016.04.20 19:25:28 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2016.04.20 19:12:38 | 000,001,405 | ---- | C] () -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2016.04.20 19:12:34 | 000,001,439 | ---- | C] () -- C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2016.04.20 19:09:45 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2016.04.20 19:09:45 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2016.04.20 19:08:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2016.04.20 19:08:03 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2016.04.20 19:05:15 | 2307,272,704 | -HS- | C] () -- C:\hiberfil.sys

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2010.11.21 05:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010.11.21 05:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2016.04.21 07:04:34 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\AVAST Software
[2016.04.21 13:17:29 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\Notepad++
[2016.04.21 13:08:24 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\OrangeApps
[2016.04.21 12:35:08 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\Philipp Winterberg
[2016.04.21 11:53:33 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\Samsung
[2016.04.20 21:12:18 | 000,000,000 | ---D | M] -- C:\Users\wrecken\AppData\Roaming\Wave Systems Corp

========== Purity Check ==========



< End of report >

Alt 24.04.2016, 17:16   #2
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü





Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
  • Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
  • Poste die Logfiles direkt in Deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.



Los geht's:

Schritt 1


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 26.04.2016, 18:51   #3
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-04-2016
durchgeführt von wrecken (Administrator) auf WRECKEN-PC (25-04-2016 21:05:11)
Gestartet von C:\Users\wrecken\Desktop
Geladene Profile: wrecken (Verfügbare Profile: wrecken)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\bcc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\bccavsvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Dell, Inc.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Authentec Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\ndp45-kb2972107-x64.exe
(Microsoft Corporation) E:\74317c8f4d0b3ea0af4e7072b1\Setup.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4791024 2013-07-17] (Intel(R) Corporation)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686744 2012-09-05] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-04-21] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [319152 2016-04-08] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (Authentec Inc.)
HKU\S-1-5-21-2048369672-643187680-2407283211-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Program Files (x86)\Another Matrix Screen Saver\Another Matrix Screen Saver.scr [55808 2005-03-01] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-04-21] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-04-20]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell System Manager.lnk [2016-04-20]
ShortcutTarget: Dell System Manager.lnk -> C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe (Dell Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{30A37DFD-E193-4F21-87E2-E1D475688139}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4113C692-F91C-457A-86B7-261856760A92}: [DhcpNameServer] 212.33.36.155 212.33.55.5

Internet Explorer:
==================
HKU\S-1-5-21-2048369672-643187680-2407283211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-02-03] (RealDownloader)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-02-03] (RealDownloader)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\wrecken\AppData\Roaming\Mozilla\Firefox\Profiles\nrxv7ewj.default
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-22] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-22] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @real.com/nppl3260;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2016-04-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2016-04-21] (RealPlayer)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\wrecken\AppData\Roaming\Mozilla\Firefox\Profiles\nrxv7ewj.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-04-21]
FF Extension: NoScript - C:\Users\wrecken\AppData\Roaming\Mozilla\Firefox\Profiles\nrxv7ewj.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-21]
FF Extension: Adblock Plus - C:\Users\wrecken\AppData\Roaming\Mozilla\Firefox\Profiles\nrxv7ewj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-21]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswBcc; C:\Program Files\AVAST Software\Avast\bcc.exe [647904 2016-04-21] (AVAST Software)
R2 Avast Business Console Client Antivirus Service; C:\Program Files\AVAST Software\Avast\bccavsvc.exe [1528584 2016-04-21] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-04-21] (AVAST Software)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-07-17] ()
R2 PbaDrvSvc_x64; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe [21504 2013-01-21] (Dell, Inc.) [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1095440 2016-04-21] (RealNetworks, Inc.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S4 tcsd_win32.exe; C:\Program Files (x86)\Security Innovation\SI TSS\bin\tcsd_win32.exe [1643520 2012-05-11] () [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3377904 2013-07-17] (Intel® Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-04-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-04-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-04-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-04-21] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-04-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-04-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-04-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-04-21] (AVAST Software)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [39016 2012-09-23] (Dell Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-04-25 21:05 - 2016-04-25 21:07 - 00011629 _____ C:\Users\wrecken\Desktop\FRST.txt
2016-04-25 21:04 - 2016-04-25 21:05 - 00000000 ____D C:\FRST
2016-04-25 20:59 - 2016-04-25 21:00 - 02376192 _____ (Farbar) C:\Users\wrecken\Desktop\FRST64.exe
2016-04-25 18:12 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-04-25 18:12 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-04-25 16:09 - 2016-04-25 17:33 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-25 16:09 - 2016-04-25 16:09 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-04-24 23:52 - 2016-04-24 23:52 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-04-24 23:52 - 2016-04-24 23:52 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-04-24 23:52 - 2016-04-24 23:52 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2016-04-24 23:52 - 2016-04-24 23:52 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-04-24 23:52 - 2016-04-24 23:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-04-24 23:52 - 2016-04-24 23:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-04-24 23:52 - 2016-04-24 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-04-24 23:52 - 2016-04-24 23:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-04-24 23:52 - 2016-04-24 23:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-24 23:51 - 2016-04-24 23:51 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-24 23:51 - 2016-04-24 23:51 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-04-24 23:51 - 2016-04-24 23:51 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-24 23:51 - 2016-04-24 23:51 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-04-24 23:51 - 2016-04-24 23:51 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-04-24 23:51 - 2016-04-24 23:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-24 19:32 - 2016-04-24 19:31 - 00420192 _____ () C:\Users\wrecken\Downloads\DellSystemDetect.exe
2016-04-24 19:20 - 2016-04-24 19:20 - 00000000 ___SD C:\Users\wrecken\AppData\LocalLow\Temp
2016-04-24 18:32 - 2016-04-24 18:32 - 00000000 ____D C:\Users\wrecken\Documents\WorkcellBackup
2016-04-24 18:24 - 2016-04-24 18:24 - 00000000 ____D C:\Users\wrecken\AppData\Local\FANUC
2016-04-24 17:15 - 2016-04-24 18:39 - 00000000 ____D C:\ProgramData\Robot Neighborhood
2016-04-24 17:15 - 2016-04-24 18:38 - 00000000 ____D C:\Users\wrecken\Documents\My Workcells
2016-04-24 17:12 - 2016-04-24 17:12 - 00002986 _____ C:\Windows\System32\Tasks\{4FF864C5-EDA6-4F07-A08B-4AC9EE2B5BA2}
2016-04-24 16:44 - 2016-04-24 16:44 - 00001751 _____ C:\Users\wrecken\Documents\ROBOGUIDE Sample Workcells.lnk
2016-04-24 16:44 - 2016-04-24 16:44 - 00001736 _____ C:\Users\wrecken\Documents\ROBOGUIDE Image Library.lnk
2016-04-24 16:28 - 2016-04-24 16:28 - 00002119 _____ C:\Users\wrecken\Desktop\ROBOGUIDE.lnk
2016-04-24 16:28 - 2015-12-24 12:16 - 00042496 _____ () C:\Windows\SysWOW64\VirtualCameraForiRVision.dll
2016-04-24 16:28 - 2015-12-24 12:16 - 00020480 _____ (FANUC) C:\Windows\SysWOW64\VirtualCamera.dll
2016-04-24 16:28 - 2015-07-06 08:48 - 00608768 _____ (Concept Software, Inc.) C:\Windows\SysWOW64\KEYLIB32.dll
2016-04-24 16:27 - 2015-07-06 08:48 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2016-04-24 16:27 - 1998-06-17 17:07 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfc42loc.dll
2016-04-24 16:26 - 2015-12-03 03:08 - 00057344 _____ (FANUC Robotics North America, Inc.) C:\Windows\SysWOW64\pac.dll
2016-04-24 16:26 - 2015-07-06 08:49 - 01009336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCHRT20.OCX
2016-04-24 16:26 - 2015-07-06 08:49 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2016-04-24 16:26 - 2015-07-06 08:49 - 00244416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSFLXGRD.OCX
2016-04-24 16:26 - 2015-07-06 08:49 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSWINSCK.OCX
2016-04-24 16:26 - 2015-07-06 08:48 - 00651264 _____ (Opteon) C:\Windows\SysWOW64\depict.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00415176 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\COMCT332.OCX
2016-04-24 16:26 - 2015-07-06 08:48 - 00256000 _____ C:\Windows\SysWOW64\iflTIFF0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TLBINF32.DLL
2016-04-24 16:26 - 2015-07-06 08:48 - 00104960 _____ C:\Windows\SysWOW64\iflJFIF0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00102912 _____ C:\Windows\SysWOW64\ifl0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00086016 _____ C:\Windows\SysWOW64\iflPNG0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00041600 _____ (Opteon) C:\Windows\SysWOW64\Drivers\Paragon.sys
2016-04-24 16:26 - 2015-07-06 08:48 - 00026112 _____ C:\Windows\SysWOW64\iflSGI0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00026112 _____ C:\Windows\SysWOW64\iflGIF0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00019456 _____ C:\Windows\SysWOW64\iflBMP0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00016384 _____ C:\Windows\SysWOW64\iflXPM0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00014848 _____ C:\Windows\SysWOW64\iflPPM0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00013312 _____ C:\Windows\SysWOW64\iflRaw0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00012800 _____ C:\Windows\SysWOW64\iflXBM0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00012288 _____ C:\Windows\SysWOW64\iflFIT0.dll
2016-04-24 16:26 - 2015-07-06 08:48 - 00004524 _____ C:\Windows\SysWOW64\ifl_database0
2016-04-24 16:25 - 2016-04-24 16:25 - 00003120 _____ C:\Windows\SysWOW64\3PN9VVFC.ocx
2016-04-24 16:24 - 2016-04-24 16:24 - 00002133 _____ C:\Users\wrecken\Desktop\HandlingPRO.lnk
2016-04-24 16:24 - 2009-09-04 08:53 - 00010496 _____ C:\Windows\SysWOW64\machnm64.sys
2016-04-24 16:20 - 2006-01-31 01:25 - 00030208 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lfbmp13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00759808 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltocx13n.ocx
2016-04-24 16:20 - 2006-01-31 01:24 - 00453120 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00445440 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimg13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00265216 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00206848 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00182784 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfpng13n.dll
2016-04-24 16:20 - 2006-01-31 01:24 - 00154112 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil13n.DLL
2016-04-24 16:20 - 2006-01-31 01:24 - 00044032 ____R (LEAD Technologies, Inc.) C:\Windows\SysWOW64\lttwn13n.dll
2016-04-24 16:01 - 2009-03-10 17:47 - 00551120 _____ C:\Windows\SysWOW64\vbogl.tlb
2016-04-24 16:01 - 2009-03-10 17:47 - 00237568 _____ C:\Windows\SysWOW64\glut32.dll
2016-04-24 15:31 - 2016-04-24 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FANUC Robotics
2016-04-24 15:31 - 2016-04-24 15:31 - 00003120 _____ C:\Windows\SysWOW64\ES2TPCPS.ocx
2016-04-24 15:31 - 2015-07-06 08:49 - 01044480 _____ (eHelp Corporation.) C:\Windows\SysWOW64\ROBOEX32.DLL
2016-04-24 15:30 - 2015-12-03 03:07 - 00057344 _____ (FANUC Robotics North America, Inc.) C:\Windows\SysWOW64\frping.dll
2016-04-24 15:30 - 2015-12-03 03:03 - 00048128 ____N (FANUC) C:\Windows\SysWOW64\FRUserAppSettings.dll
2016-04-24 15:30 - 2015-07-06 08:48 - 00209608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx
2016-04-24 15:30 - 2015-07-06 08:48 - 00203976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2016-04-24 15:30 - 2015-07-06 08:48 - 00102160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6JP.DLL
2016-04-24 15:30 - 2009-09-04 08:53 - 00007168 _____ C:\Windows\SysWOW64\Machnm32.sys
2016-04-24 15:30 - 2003-04-22 13:28 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmapi32.ocx
2016-04-24 15:30 - 2002-09-04 12:17 - 00608448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMCTL32.OCX
2016-04-24 15:30 - 2002-09-04 12:17 - 00140488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2016-04-24 15:30 - 2001-09-11 10:13 - 00060416 _____ (Concept Software, Inc.) C:\Windows\SysWOW64\KeyLbI32.dll
2016-04-24 15:30 - 2001-09-11 10:13 - 00015840 _____ C:\Windows\SysWOW64\Machnm1.exe
2016-04-24 15:30 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL
2016-04-24 15:24 - 2016-04-24 15:39 - 00000000 ____D C:\ProgramData\FANUC
2016-04-24 14:12 - 2016-04-24 14:12 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2016-04-23 23:45 - 2016-04-24 04:14 - 00049526 _____ C:\Users\wrecken\Downloads\Extras.Txt
2016-04-23 23:44 - 2016-04-24 04:13 - 00130052 _____ C:\Users\wrecken\Downloads\OTL.Txt
2016-04-23 22:42 - 2016-04-23 22:43 - 00602112 _____ (OldTimer Tools) C:\Users\wrecken\Downloads\otl.exe
2016-04-23 22:35 - 2016-04-25 17:49 - 00000000 ____D C:\Windows\pss
2016-04-23 08:13 - 2016-04-23 08:15 - 69216640 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Input_Driver_GGY5W_WN_8.1200.101.127_A06(1).EXE
2016-04-23 08:06 - 2016-04-23 08:06 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2016-04-22 22:13 - 2016-04-22 22:13 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Macromedia
2016-04-22 22:13 - 2016-04-22 22:13 - 00000000 ____D C:\Users\wrecken\AppData\Local\Macromedia
2016-04-22 22:12 - 2016-04-25 20:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-22 22:12 - 2016-04-22 22:12 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-22 22:12 - 2016-04-22 22:12 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-22 22:12 - 2016-04-22 22:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-22 22:12 - 2016-04-22 22:12 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-04-22 22:12 - 2016-04-22 22:12 - 00000000 ____D C:\Windows\system32\Macromed
2016-04-22 21:45 - 2016-04-22 21:45 - 00000000 ____D C:\Users\wrecken\Documents\Bluetooth-Exchange-Ordner
2016-04-22 01:23 - 2016-04-22 01:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-04-22 01:23 - 2016-04-22 01:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-04-22 01:22 - 2016-04-22 01:22 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-04-22 00:13 - 2016-04-25 20:52 - 01592784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-04-21 22:37 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-04-21 22:37 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-04-21 22:37 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-04-21 22:37 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-04-21 22:37 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-04-21 22:37 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-04-21 22:37 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-04-21 22:37 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-04-21 22:16 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-04-21 22:16 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-04-21 22:16 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-04-21 22:04 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-04-21 22:04 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-04-21 22:04 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-04-21 22:04 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-04-21 22:04 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-04-21 22:04 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-04-21 22:04 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-04-21 22:04 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-04-21 21:55 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-04-21 21:55 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-04-21 21:55 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-04-21 21:55 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-04-21 21:49 - 2015-11-03 21:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-04-21 21:49 - 2015-11-03 20:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-04-21 21:49 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-04-21 21:49 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-04-21 21:49 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-04-21 21:49 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-04-21 21:49 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-04-21 21:49 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-04-21 21:49 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-04-21 21:49 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-04-21 21:49 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-04-21 21:49 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-04-21 21:49 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-04-21 21:49 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-04-21 21:49 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-04-21 21:48 - 2016-01-21 02:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-04-21 21:48 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-04-21 21:48 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-04-21 21:48 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-04-21 21:48 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-04-21 21:48 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-04-21 21:48 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-04-21 21:48 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-04-21 21:48 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-04-21 21:48 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-04-21 21:48 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-04-21 21:48 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-04-21 21:48 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-04-21 21:48 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-04-21 21:48 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-04-21 21:48 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-04-21 21:48 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-04-21 21:48 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-04-21 21:48 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-04-21 21:48 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-04-21 21:48 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-04-21 21:48 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-04-21 21:48 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-04-21 21:48 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-04-21 21:48 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-04-21 21:48 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-04-21 21:48 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-04-21 21:48 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-04-21 21:48 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-04-21 21:48 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-04-21 21:48 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-04-21 21:48 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-04-21 21:48 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-04-21 21:48 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-04-21 21:48 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-04-21 21:48 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-04-21 21:48 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-04-21 21:48 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-04-21 21:48 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-04-21 21:48 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-04-21 21:48 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-04-21 21:48 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-04-21 21:48 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-04-21 21:47 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-04-21 21:47 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-04-21 21:47 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-04-21 21:47 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-04-21 21:47 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-04-21 21:47 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-04-21 21:47 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-04-21 21:47 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-04-21 21:47 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-04-21 21:47 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-04-21 21:47 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-04-21 21:47 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-04-21 21:47 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-04-21 21:46 - 2014-12-19 05:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-04-21 21:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-04-21 21:46 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-04-21 21:46 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-04-21 21:46 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-04-21 21:46 - 2014-01-01 01:05 - 00420008 _____ C:\Windows\SysWOW64\locale.nls
2016-04-21 21:46 - 2014-01-01 01:04 - 00420008 _____ C:\Windows\system32\locale.nls
2016-04-21 21:46 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-04-21 21:46 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-04-21 21:46 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-04-21 21:45 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-04-21 21:45 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-04-21 21:45 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-04-21 21:45 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-04-21 21:45 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-04-21 21:45 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-04-21 21:45 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-04-21 21:45 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-04-21 21:45 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-04-21 21:45 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-04-21 21:45 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-04-21 21:45 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-04-21 21:45 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-04-21 21:45 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-04-21 21:45 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-04-21 21:45 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-04-21 21:45 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-04-21 21:45 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-04-21 21:45 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-04-21 21:45 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-04-21 21:45 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-04-21 21:45 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-04-21 21:45 - 2012-11-29 00:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-04-21 21:45 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-04-21 21:45 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-04-21 21:44 - 2016-03-29 19:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-21 21:44 - 2015-11-10 20:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-04-21 21:44 - 2015-11-10 20:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-04-21 21:44 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-04-21 21:44 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-04-21 21:44 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-04-21 21:44 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-04-21 21:44 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-04-21 21:44 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-04-21 21:44 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-04-21 21:44 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-04-21 21:44 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-04-21 21:44 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-04-21 21:44 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-04-21 21:44 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-04-21 21:44 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-04-21 21:44 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-04-21 21:43 - 2016-03-16 02:22 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-21 21:43 - 2016-03-16 02:22 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-21 21:43 - 2016-03-16 02:16 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-21 21:43 - 2016-03-16 02:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-21 21:43 - 2016-03-16 02:15 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-21 21:43 - 2016-03-16 02:15 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-21 21:43 - 2016-03-16 02:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-21 21:43 - 2016-03-16 02:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-21 21:43 - 2016-03-16 02:14 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-21 21:43 - 2016-03-16 02:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-21 21:43 - 2016-03-16 02:13 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-04-21 21:43 - 2016-03-16 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-21 21:43 - 2016-03-16 02:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-21 21:43 - 2016-03-16 02:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-21 21:43 - 2016-03-16 01:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-04-21 21:43 - 2016-03-16 01:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-04-21 21:43 - 2016-03-16 01:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-04-21 21:43 - 2016-03-16 01:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-04-21 21:43 - 2016-03-16 01:53 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-04-21 21:43 - 2016-03-16 01:53 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-04-21 21:43 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-21 21:43 - 2016-03-16 01:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-04-21 21:43 - 2016-03-16 01:52 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-21 21:43 - 2016-03-16 01:52 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-04-21 21:43 - 2016-03-16 01:52 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-04-21 21:43 - 2016-03-16 01:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-04-21 21:43 - 2016-03-16 01:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-04-21 21:43 - 2016-03-16 01:51 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-04-21 21:43 - 2016-03-16 01:51 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-04-21 21:43 - 2016-03-16 01:51 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-04-21 21:43 - 2016-03-16 01:16 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-21 21:43 - 2016-03-16 01:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-04-21 21:43 - 2016-03-16 01:03 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-21 21:43 - 2016-03-16 01:02 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-21 21:43 - 2016-03-16 01:02 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-21 21:43 - 2016-03-16 01:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-21 21:43 - 2016-03-16 00:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-04-21 21:43 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-04-21 21:43 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-04-21 21:43 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-04-21 21:43 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-04-21 21:43 - 2015-09-23 15:18 - 00459344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-04-21 21:43 - 2015-09-23 15:18 - 00298192 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-04-21 21:43 - 2015-09-23 15:08 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-04-21 21:43 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-04-21 21:43 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-04-21 21:43 - 2014-12-06 06:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-04-21 21:43 - 2014-12-06 05:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-04-21 21:43 - 2014-12-06 05:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-04-21 21:43 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-04-21 21:42 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-04-21 21:42 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-04-21 21:42 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-04-21 21:42 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-04-21 21:42 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-04-21 21:42 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-04-21 21:42 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-04-21 21:42 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-04-21 21:42 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-04-21 21:42 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-04-21 21:42 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-04-21 21:42 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-04-21 21:42 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-04-21 21:42 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-04-21 21:42 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-04-21 21:42 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-04-21 21:42 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-04-21 21:42 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-04-21 21:42 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-04-21 21:42 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-04-21 21:42 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-04-21 21:42 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-04-21 21:42 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-04-21 21:42 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-04-21 21:41 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-21 21:41 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-21 21:41 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-04-21 21:41 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-04-21 21:41 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-21 21:41 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-04-21 21:41 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-21 21:41 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-21 21:41 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-04-21 21:41 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-04-21 21:41 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-04-21 21:41 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-21 21:41 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-21 21:41 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
         
__________________

Alt 26.04.2016, 18:53   #4
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Code:
ATTFilter
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-04-21 21:41 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-21 21:41 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-04-21 21:41 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-21 21:41 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-21 21:41 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-21 21:41 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-04-21 21:41 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-04-21 21:41 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-04-21 21:41 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-04-21 21:41 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-21 21:41 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-21 21:41 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-04-21 21:41 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-04-21 21:41 - 2015-11-05 21:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-04-21 21:41 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-04-21 21:41 - 2015-11-05 11:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-04-21 21:41 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-04-21 21:41 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-04-21 21:41 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-04-21 21:41 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-04-21 21:41 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-04-21 21:41 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-04-21 21:41 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-04-21 21:41 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-04-21 21:41 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-04-21 21:41 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-04-21 21:40 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-04-21 21:40 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-04-21 21:40 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-04-21 21:40 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-04-21 21:40 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-04-21 21:40 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-04-21 21:40 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-04-21 21:40 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-04-21 21:40 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-04-21 21:40 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-04-21 21:40 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-04-21 21:40 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-04-21 21:40 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-04-21 21:40 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-04-21 21:40 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-04-21 21:40 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-04-21 21:40 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-04-21 21:40 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-04-21 21:40 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-04-21 21:40 - 2015-12-08 23:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-04-21 21:40 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-04-21 21:40 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-04-21 21:40 - 2015-12-08 21:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-04-21 21:40 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-04-21 21:40 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-04-21 21:40 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-04-21 21:40 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-04-21 21:40 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-04-21 21:40 - 2015-10-13 18:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-04-21 21:40 - 2015-10-13 18:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-04-21 21:40 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-04-21 21:40 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-04-21 21:40 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-04-21 21:40 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-04-21 21:40 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-04-21 21:40 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-04-21 21:40 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-04-21 21:40 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-04-21 21:40 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-04-21 21:40 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-04-21 21:40 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-04-21 21:40 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-04-21 21:40 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-04-21 21:40 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-04-21 21:40 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-04-21 21:40 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-04-21 21:40 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-04-21 21:40 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-04-21 21:40 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-04-21 21:40 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-04-21 21:39 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-04-21 21:39 - 2016-01-07 19:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-04-21 21:39 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-04-21 21:39 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-04-21 21:39 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-04-21 21:39 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-04-21 21:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-04-21 21:39 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-04-21 21:39 - 2015-12-08 23:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-04-21 21:39 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-04-21 21:39 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-04-21 21:39 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-04-21 21:39 - 2015-12-08 23:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-04-21 21:39 - 2015-12-08 23:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-04-21 21:39 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-04-21 21:39 - 2015-12-08 23:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-04-21 21:39 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-04-21 21:39 - 2015-12-08 21:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-04-21 21:39 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-04-21 21:39 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-04-21 21:39 - 2015-12-08 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-04-21 21:39 - 2015-12-08 21:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-04-21 21:39 - 2015-12-08 20:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-04-21 21:39 - 2015-12-08 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-04-21 21:39 - 2015-12-08 20:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-04-21 21:39 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-21 21:39 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-21 21:39 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-04-21 21:39 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-04-21 21:39 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-04-21 21:39 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-04-21 21:39 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-04-21 21:39 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-04-21 21:39 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-04-21 21:39 - 2015-06-03 22:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-04-21 21:39 - 2015-06-03 22:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-04-21 21:39 - 2015-06-03 22:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-04-21 21:39 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-04-21 21:39 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-04-21 21:39 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-04-21 21:39 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-04-21 21:39 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-04-21 21:39 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-04-21 21:39 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-04-21 21:39 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-04-21 21:39 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-04-21 21:39 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-04-21 21:39 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-04-21 21:39 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-04-21 21:39 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-04-21 21:39 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-04-21 21:39 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-04-21 21:39 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-04-21 21:39 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-04-21 21:39 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-04-21 21:39 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-04-21 21:39 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-04-21 21:39 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-04-21 21:39 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-04-21 21:39 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-04-21 21:39 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-04-21 21:39 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-04-21 21:39 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-04-21 21:39 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-04-21 21:39 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-04-21 21:38 - 2015-10-29 19:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-04-21 21:38 - 2015-10-29 19:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-04-21 21:38 - 2015-10-29 19:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-04-21 21:38 - 2015-10-29 19:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-04-21 21:38 - 2015-10-29 19:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-04-21 21:38 - 2015-10-29 19:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-04-21 21:38 - 2015-10-29 19:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-04-21 21:38 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-04-21 21:38 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-04-21 21:38 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-04-21 21:38 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-04-21 21:38 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-04-21 21:38 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-04-21 21:38 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-04-21 21:38 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-04-21 21:38 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-04-21 21:38 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-04-21 21:38 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-04-21 21:38 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-04-21 21:38 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-04-21 21:38 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-04-21 21:38 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-04-21 21:38 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-04-21 21:38 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-04-21 21:38 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-04-21 21:37 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-04-21 21:37 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-21 21:37 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-04-21 21:37 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-04-21 21:37 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-04-21 21:37 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-21 21:37 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-04-21 21:37 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-04-21 21:37 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-04-21 21:37 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-04-21 21:37 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-04-21 21:37 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-04-21 21:37 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-04-21 21:37 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-04-21 21:37 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-04-21 21:37 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-04-21 21:37 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-04-21 21:37 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-04-21 21:37 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-04-21 21:37 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-04-21 21:37 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-04-21 21:37 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-04-21 21:37 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-04-21 21:37 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-04-21 21:37 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-04-21 21:37 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-04-21 21:37 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-04-21 21:37 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-04-21 21:37 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-04-21 21:37 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-04-21 21:37 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-04-21 21:37 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-04-21 21:37 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-04-21 21:37 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-04-21 21:36 - 2016-01-22 08:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-04-21 21:36 - 2016-01-22 08:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-04-21 21:36 - 2016-01-22 08:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-04-21 21:36 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-04-21 21:36 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-04-21 21:36 - 2016-01-22 08:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-04-21 21:36 - 2016-01-22 08:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-04-21 21:36 - 2016-01-16 21:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-21 21:36 - 2016-01-16 20:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-04-21 21:36 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-04-21 21:36 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-04-21 21:36 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-04-21 21:36 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-04-21 21:36 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-04-21 21:36 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-04-21 21:36 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-04-21 21:36 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-04-21 21:35 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-04-21 21:35 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-04-21 21:35 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-04-21 21:35 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-04-21 21:35 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-04-21 21:35 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-04-21 21:35 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-04-21 21:35 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-04-21 21:35 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-04-21 21:35 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-04-21 21:35 - 2016-01-22 08:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-04-21 21:35 - 2016-01-22 08:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-04-21 21:35 - 2016-01-22 08:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-04-21 21:35 - 2016-01-22 08:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-04-21 21:35 - 2016-01-22 08:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-04-21 21:35 - 2016-01-22 07:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-04-21 21:35 - 2016-01-22 07:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-04-21 21:35 - 2016-01-22 07:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-04-21 21:35 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-04-21 21:35 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-04-21 21:35 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-04-21 21:35 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-04-21 21:35 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-04-21 21:35 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-04-21 21:35 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-04-21 21:35 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-04-21 21:35 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-04-21 21:35 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-04-21 21:35 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-04-21 21:35 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-04-21 21:35 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-04-21 21:34 - 2016-03-11 20:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-21 21:34 - 2016-03-11 20:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-04-21 21:34 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-04-21 21:34 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-04-21 21:34 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-04-21 21:34 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-04-21 21:34 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-04-21 21:34 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-04-21 21:34 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-04-21 21:34 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-04-21 21:34 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-04-21 21:34 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-04-21 21:34 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-04-21 21:34 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-04-21 21:34 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-04-21 21:34 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-04-21 21:34 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-04-21 21:34 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-04-21 21:34 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-04-21 21:34 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-04-21 21:33 - 2015-12-08 23:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-04-21 21:33 - 2015-12-08 21:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-04-21 21:33 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-04-21 21:33 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-04-21 21:33 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-04-21 21:33 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-04-21 21:33 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-04-21 21:33 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-04-21 21:33 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-04-21 21:33 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-04-21 21:33 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-04-21 21:33 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-04-21 21:33 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-04-21 21:33 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-04-21 21:33 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-04-21 21:33 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-04-21 21:33 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-04-21 21:33 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-04-21 21:33 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-04-21 21:33 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-04-21 21:33 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-04-21 21:33 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-04-21 21:33 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-04-21 21:32 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-04-21 21:32 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-04-21 21:32 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-04-21 21:32 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-04-21 21:32 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-04-21 21:32 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-04-21 21:32 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-04-21 21:32 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-04-21 21:32 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-04-21 21:32 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-04-21 21:32 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-04-21 21:32 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-04-21 21:32 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-04-21 21:32 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-04-21 21:32 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-04-21 21:32 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-04-21 21:32 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-04-21 21:22 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-04-21 21:22 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-04-21 21:22 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-04-21 21:22 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-04-21 21:22 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-04-21 21:22 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-04-21 20:35 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-04-21 20:35 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-04-21 20:35 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-04-21 13:19 - 2016-04-21 13:19 - 00001091 _____ C:\Users\Public\Desktop\RarZilla Free Unrar.lnk
2016-04-21 13:19 - 2016-04-21 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RarZilla Free Unrar
2016-04-21 13:19 - 2016-04-21 13:19 - 00000000 ____D C:\Program Files (x86)\RarZilla Free Unrar
2016-04-21 13:18 - 2016-04-21 13:18 - 01475080 _____ C:\Users\wrecken\Downloads\RarZilla Free Unrar - CHIP-Installer.exe
2016-04-21 13:17 - 2016-04-21 13:17 - 00001019 _____ C:\Users\Public\Desktop\Notepad++.lnk
2016-04-21 13:17 - 2016-04-21 13:17 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Notepad++
2016-04-21 13:17 - 2016-04-21 13:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-04-21 13:17 - 2016-04-21 13:17 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-04-21 13:16 - 2016-04-21 13:16 - 04203840 _____ C:\Users\wrecken\Downloads\npp.6.9.1.Installer.exe
2016-04-21 13:11 - 2016-04-21 13:11 - 00001031 _____ C:\Users\Public\Desktop\OrangeEdit.lnk
2016-04-21 13:11 - 2016-04-21 13:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OrangeEdit
2016-04-21 13:11 - 2016-04-21 13:11 - 00000000 ____D C:\Program Files (x86)\OrangeEdit
2016-04-21 13:11 - 2016-04-21 13:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2016-04-21 13:11 - 2016-04-21 13:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2016-04-21 13:09 - 2016-04-21 13:09 - 02093653 _____ (OrangeApps GmbH ) C:\Users\wrecken\Downloads\Setup_OrangeEdit_2.0.11.62.exe
2016-04-21 13:08 - 2016-04-21 13:08 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\OrangeApps
2016-04-21 13:08 - 2016-04-21 13:08 - 00000000 ____D C:\Users\wrecken\AppData\Local\OrangeApps
2016-04-21 12:35 - 2016-04-21 12:35 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Philipp Winterberg
2016-04-21 12:20 - 2016-04-21 12:20 - 00003432 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2016-04-21 12:20 - 2016-04-21 12:20 - 00003370 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2048369672-643187680-2407283211-1000
2016-04-21 12:20 - 2016-04-21 12:20 - 00003240 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2048369672-643187680-2407283211-1000
2016-04-21 12:20 - 2016-04-21 12:20 - 00001204 _____ C:\Users\Public\Desktop\RealPlayer (RealTimes).lnk
2016-04-21 12:20 - 2016-04-21 12:20 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\RealNetworks
2016-04-21 12:20 - 2016-04-21 12:20 - 00000000 ____D C:\Users\wrecken\AppData\Local\Real
2016-04-21 12:20 - 2016-04-21 12:20 - 00000000 ____D C:\ProgramData\RealNetworks
2016-04-21 12:20 - 2016-04-21 12:20 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2016-04-21 12:19 - 2016-04-21 12:21 - 00000000 ____D C:\ProgramData\Real
2016-04-21 12:19 - 2016-04-21 12:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2016-04-21 12:19 - 2016-04-21 12:20 - 00000000 ____D C:\Program Files (x86)\Real
2016-04-21 12:19 - 2016-04-21 12:19 - 00505584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2016-04-21 12:19 - 2016-04-21 12:19 - 00354032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2016-04-21 12:19 - 2016-04-21 12:19 - 00278768 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2016-04-21 12:19 - 2016-04-21 12:19 - 00200944 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2016-04-21 12:18 - 2016-04-21 12:20 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Real
2016-04-21 12:15 - 2016-04-21 12:15 - 00000000 ____D C:\Users\wrecken\Tracing
2016-04-21 12:14 - 2016-04-25 21:09 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Skype
2016-04-21 12:14 - 2016-04-21 12:14 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2016-04-21 12:14 - 2016-04-21 12:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-04-21 12:14 - 2016-04-21 12:14 - 00000000 ____D C:\ProgramData\Skype
2016-04-21 12:14 - 2016-04-21 12:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-04-21 12:12 - 2016-04-21 12:12 - 01505408 _____ (Skype Technologies S.A.) C:\Users\wrecken\Downloads\SkypeSetup.exe
2016-04-21 12:11 - 2016-04-21 12:11 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\vlc
2016-04-21 12:10 - 2016-04-21 12:10 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-04-21 12:10 - 2016-04-21 12:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-04-21 12:10 - 2016-04-21 12:10 - 00000000 ____D C:\Program Files\VideoLAN
2016-04-21 12:08 - 2016-04-21 12:08 - 01475080 _____ C:\Users\wrecken\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2016-04-21 11:53 - 2016-04-21 11:53 - 00001969 _____ C:\Users\Public\Desktop\Samsung Kies 3.lnk
2016-04-21 11:45 - 2016-04-21 11:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2016-04-21 11:34 - 2016-04-21 11:34 - 00002002 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2016-04-21 11:34 - 2016-04-21 11:34 - 00001992 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2016-04-21 11:34 - 2016-04-21 11:34 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2016-04-21 11:34 - 2016-01-08 10:51 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2016-04-21 11:34 - 2016-01-08 10:51 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2016-04-21 11:34 - 2016-01-08 10:51 - 00213088 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2016-04-21 11:34 - 2016-01-08 10:51 - 00120416 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2016-04-21 11:33 - 2016-04-21 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-04-21 11:33 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2016-04-21 11:33 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2016-04-21 11:32 - 2016-04-21 11:53 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-04-21 11:32 - 2016-04-21 11:33 - 00000000 ____D C:\ProgramData\Samsung
2016-04-21 11:27 - 2016-04-21 11:27 - 00000000 ____D C:\Users\wrecken\AppData\Local\Downloaded Installations
2016-04-21 11:26 - 2016-04-21 11:27 - 80089472 _____ (Samsung Electronics Co., Ltd.) C:\Users\wrecken\Downloads\KiesSetup.exe
2016-04-21 11:26 - 2016-04-21 11:27 - 44045576 _____ (Samsung Electronics Co., Ltd.) C:\Users\wrecken\Downloads\Kies3Setup.exe
2016-04-21 11:20 - 2016-04-23 22:02 - 00000000 ____D C:\Users\wrecken\Documents\samsung
2016-04-21 11:20 - 2016-04-21 11:53 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Samsung
2016-04-21 11:20 - 2016-04-21 11:34 - 00000000 ____D C:\Users\wrecken\AppData\Local\Samsung
2016-04-21 11:19 - 2016-04-21 11:19 - 00000000 ____D C:\Program Files (x86)\honestech VHS to DVD 2.0 SE
2016-04-21 11:19 - 2016-04-21 11:19 - 00000000 ____D C:\Program Files (x86)\honestech
2016-04-21 11:18 - 2016-04-24 16:27 - 00000000 ____D C:\Program Files (x86)\FANUC
2016-04-21 11:15 - 2016-04-22 22:13 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Adobe
2016-04-21 11:15 - 2016-04-22 22:12 - 00000000 ____D C:\Users\wrecken\AppData\Local\Adobe
2016-04-21 11:15 - 2016-04-21 11:15 - 00000000 ____D C:\Users\wrecken\AppData\LocalLow\Adobe
2016-04-21 10:52 - 2016-04-21 10:52 - 00001157 _____ C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Another Matrix Screen Saver.lnk
2016-04-21 10:52 - 2016-04-21 10:52 - 00001133 _____ C:\Users\wrecken\Desktop\Another Matrix Screen Saver.lnk
2016-04-21 10:52 - 2016-04-21 10:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Another Matrix Screen Saver
2016-04-21 10:52 - 2016-04-21 10:52 - 00000000 ____D C:\Program Files (x86)\Another Matrix Screen Saver
2016-04-21 10:30 - 2016-04-21 10:30 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-04-21 07:06 - 2016-04-21 07:01 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-04-21 07:04 - 2016-04-21 07:04 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\AVAST Software
2016-04-21 07:03 - 2016-04-21 07:03 - 00001922 _____ C:\Users\Public\Desktop\Avast Business Security.lnk
2016-04-21 07:03 - 2016-04-21 07:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-04-21 07:02 - 2016-04-21 07:06 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-04-21 07:02 - 2016-04-21 07:02 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-04-21 07:02 - 2016-04-21 07:02 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-04-21 07:02 - 2016-04-21 07:02 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-04-21 07:02 - 2016-04-21 07:02 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-04-21 07:02 - 2016-04-21 07:02 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-21 07:02 - 2016-04-21 07:01 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-04-21 07:02 - 2016-04-21 07:01 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-04-21 07:02 - 2016-04-21 07:01 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-04-21 07:02 - 2016-04-21 07:01 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-04-21 07:02 - 2016-04-21 07:01 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-04-21 07:01 - 2016-04-21 07:01 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-04-21 06:59 - 2016-04-21 06:59 - 00000000 ____D C:\ProgramData\AVAST Software
2016-04-21 06:59 - 2016-04-21 06:59 - 00000000 ____D C:\Program Files\AVAST Software
2016-04-21 06:58 - 2016-04-21 06:58 - 05153104 _____ (AVAST Software) C:\Users\wrecken\Downloads\avast_business_antivirus_setup_online.exe
2016-04-21 06:52 - 2016-04-21 06:52 - 00003194 _____ C:\Windows\System32\Tasks\{B2815F2B-A96F-4699-A53E-C58F982BD6C5}
2016-04-21 06:39 - 2016-04-22 22:03 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-04-21 06:39 - 2016-04-21 06:39 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2016-04-21 06:38 - 2016-04-21 06:38 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-04-21 06:35 - 2016-04-21 10:29 - 00000000 ____D C:\ProgramData\Adobe
2016-04-21 06:29 - 2016-04-21 06:30 - 76313280 _____ (Adobe Systems Incorporated) C:\Users\wrecken\Downloads\AdbeRdr11010_de_DE.exe
2016-04-20 22:21 - 2016-04-20 22:21 - 00000029 _____ C:\Users\wrecken\Downloads\Netzwerkfreigabeschlüssel.txt
2016-04-20 21:28 - 2016-04-20 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-04-20 21:27 - 2016-04-20 21:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2016-04-20 21:26 - 2016-04-20 21:26 - 00000000 ____D C:\Windows\PCHEALTH
2016-04-20 21:26 - 2016-04-20 21:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2016-04-20 21:24 - 2016-04-20 21:24 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-20 21:23 - 2016-04-20 21:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2016-04-20 21:22 - 2016-04-20 21:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-20 21:22 - 2016-04-20 21:22 - 00000000 ____D C:\Users\wrecken\AppData\Local\Microsoft Help
2016-04-20 21:21 - 2016-04-20 21:21 - 00000000 __RHD C:\MSOCache
2016-04-20 21:16 - 2016-04-20 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell System Manager
2016-04-20 21:15 - 2016-04-20 21:16 - 00000000 ____D C:\Program Files\Dell
2016-04-20 21:15 - 2016-04-20 21:15 - 00000000 ____D C:\ProgramData\Security Innovation
2016-04-20 21:15 - 2016-04-20 21:15 - 00000000 ____D C:\Program Files (x86)\Security Innovation
2016-04-20 21:15 - 2012-09-23 03:19 - 00459880 _____ (Dell Inc.) C:\Windows\system32\dchbas64.dll
2016-04-20 21:15 - 2012-09-23 03:19 - 00382056 _____ (Dell Inc.) C:\Windows\hapint.exe
2016-04-20 21:15 - 2012-09-23 03:19 - 00335464 _____ (Dell Inc.) C:\Windows\dchcfg64.exe
2016-04-20 21:15 - 2012-09-23 03:19 - 00322664 _____ (Dell Inc.) C:\Windows\system32\dchapi64.dll
2016-04-20 21:15 - 2012-09-23 03:19 - 00093288 _____ (Dell Inc.) C:\Windows\dcmdev64.exe
2016-04-20 21:13 - 2016-04-20 21:17 - 00000000 ____D C:\Program Files\Common Files\SPBA
2016-04-20 21:13 - 2016-04-20 21:13 - 20351952 _____ (Dell Inc.) C:\Users\wrecken\Downloads\APP_WIN_R312259.EXE
2016-04-20 21:13 - 2016-04-20 21:13 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-04-20 21:13 - 2016-04-20 21:13 - 00000206 _____ C:\Windows\hbcikrnl.ini
2016-04-20 21:13 - 2016-04-20 21:13 - 00000000 ____D C:\Program Files\Fingerprint Sensor
2016-04-20 21:13 - 2016-04-20 21:13 - 00000000 ____D C:\Program Files (x86)\O2Micro OZ776 SCR Driver
2016-04-20 21:13 - 2016-04-20 21:13 - 00000000 ____D C:\Program Files (x86)\Gemalto
2016-04-20 21:12 - 2016-04-20 21:15 - 00000000 ____D C:\ProgramData\Wave Systems Corp
2016-04-20 21:12 - 2016-04-20 21:12 - 00057344 _____ (O2Micro) C:\Windows\SysWOW64\ct32O2.dll
2016-04-20 21:12 - 2016-04-20 21:12 - 00057344 _____ (O2Micro) C:\Windows\system32\ct32O2.dll
2016-04-20 21:12 - 2016-04-20 21:12 - 00000000 ____D C:\Windows\Downloaded Installations
2016-04-20 21:12 - 2016-04-20 21:12 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Wave Systems Corp
2016-04-20 21:12 - 2016-04-20 21:12 - 00000000 ____D C:\Users\Public\Downloads\Dell
2016-04-20 21:05 - 2016-04-20 21:05 - 00000000 ____D C:\7cae8c5651b37dbf7e24f8f5c2
2016-04-20 21:04 - 2016-04-20 21:04 - 00000000 ____D C:\c8bb05505b6ffae53b
2016-04-20 21:03 - 2016-04-20 21:03 - 00000000 ____D C:\Users\wrecken\AppData\Local\Broadcom
2016-04-20 21:01 - 2016-04-20 20:56 - 00349736 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwampfl.sys
2016-04-20 21:01 - 2016-04-20 20:56 - 00138280 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys
2016-04-20 21:01 - 2016-04-20 20:56 - 00107560 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys
2016-04-20 21:01 - 2016-04-20 20:56 - 00039464 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys
2016-04-20 21:01 - 2016-04-20 20:56 - 00022056 _____ (Broadcom Corporation.) C:\Windows\system32\btwcoins.dll
2016-04-20 21:01 - 2016-04-20 20:56 - 00021416 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys
2016-04-20 20:59 - 2016-04-20 20:59 - 00000000 ____D C:\Program Files\WIDCOMM
2016-04-20 20:55 - 2009-07-01 18:31 - 00080896 _____ (REDC) C:\Windows\system32\Drivers\risdpe64.sys
2016-04-20 20:55 - 2009-05-28 18:24 - 00196608 _____ (RICOH) C:\Windows\system32\RiSDIcon.dll
2016-04-20 20:55 - 2009-05-28 18:24 - 00188416 _____ (RICOH) C:\Windows\system32\RiMMCIcon.dll
2016-04-20 20:54 - 2013-01-23 17:18 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2016-04-20 20:53 - 2016-04-20 20:53 - 00015804 _____ C:\Windows\system32\results.xml
2016-04-20 20:47 - 2016-04-20 20:54 - 00000000 ____D C:\Intel
2016-04-20 20:46 - 2013-02-08 07:04 - 04380144 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00510960 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00418800 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00394224 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00241136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-04-20 20:46 - 2013-02-08 07:04 - 00168944 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2016-04-20 20:46 - 2013-02-01 12:58 - 18664960 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 13913600 _____ C:\Windows\SysWOW64\ig4icd32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 12312928 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-04-20 20:46 - 2013-02-01 12:58 - 09528832 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 09014784 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 08314368 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 07988224 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 06324224 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 02780160 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 02191872 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 01981696 _____ C:\Windows\system32\iglhxa64.cpa
2016-04-20 20:46 - 2013-02-01 12:58 - 00867020 _____ C:\Windows\SysWOW64\igkrng575.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00867020 _____ C:\Windows\system32\igkrng575.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00581120 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdx32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00390144 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00378368 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00376832 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00376832 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00376320 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00293888 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00287232 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00287232 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00285696 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00283648 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00283136 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2016-04-20 20:46 - 2013-02-01 12:58 - 00246784 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00219136 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00211303 _____ C:\Windows\system32\Gfxres.th-TH.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00198139 _____ C:\Windows\system32\Gfxres.el-GR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00182706 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00156233 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00153167 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00149009 _____ C:\Windows\system32\Gfxres.he-IL.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00146432 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00140216 _____ C:\Windows\system32\Gfxres.it-IT.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00138727 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00137846 _____ C:\Windows\system32\Gfxres.de-DE.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00137668 _____ C:\Windows\system32\Gfxres.es-ES.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00136603 _____ C:\Windows\system32\Gfxres.ro-RO.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00135628 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00135370 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00134836 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00134412 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00134384 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00133846 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00133709 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00133404 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00133178 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00132889 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00132788 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00131839 _____ C:\Windows\system32\Gfxres.hr-HR.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00128996 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00128831 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00128535 _____ C:\Windows\system32\Gfxres.da-DK.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00128204 _____ C:\Windows\SysWOW64\igcompkrng575.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00128204 _____ C:\Windows\system32\igcompkrng575.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2016-04-20 20:46 - 2013-02-01 12:58 - 00124052 _____ C:\Windows\system32\Gfxres.en-US.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00117636 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00116348 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2016-04-20 20:46 - 2013-02-01 12:58 - 00110080 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00105608 _____ C:\Windows\SysWOW64\igfcg575m.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00105608 _____ C:\Windows\system32\igfcg575m.bin
2016-04-20 20:46 - 2013-02-01 12:58 - 00098304 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00098304 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2993.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00062464 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00059243 _____ C:\Windows\system32\iglhxo64.vp
2016-04-20 20:46 - 2013-02-01 12:58 - 00059174 _____ C:\Windows\system32\iglhxg64.vp
2016-04-20 20:46 - 2013-02-01 12:58 - 00059062 _____ C:\Windows\system32\iglhxc64.vp
2016-04-20 20:46 - 2013-02-01 12:58 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00024576 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00017444 _____ C:\Windows\system32\iglhxs64.vp
2016-04-20 20:46 - 2013-02-01 12:58 - 00004096 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2016-04-20 20:46 - 2013-02-01 12:58 - 00001074 _____ C:\Windows\system32\iglhxa64.vp
2016-04-20 20:46 - 2013-02-01 12:58 - 00000146 _____ C:\Windows\system32\GfxUI.exe.config
2016-04-20 20:46 - 2011-08-23 01:42 - 00317440 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-04-20 20:46 - 2011-08-23 01:42 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2016-04-20 20:46 - 2010-02-26 12:02 - 00158976 _____ (Intel Corporation) C:\Windows\system32\Drivers\Impcd.sys
2016-04-20 20:45 - 2016-04-20 20:46 - 00000000 ____D C:\Program Files\DIFX
2016-04-20 20:44 - 2011-07-15 21:31 - 00022128 _____ (ST Microelectronics) C:\Windows\system32\Drivers\stdcfltn.sys
2016-04-20 20:43 - 2016-04-20 20:43 - 00000000 ____D C:\Program Files\STMicroelectronics
2016-04-20 20:42 - 2016-04-20 20:42 - 00000000 ____D C:\dell
2016-04-20 20:41 - 2016-04-24 16:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-20 20:41 - 2016-04-20 20:41 - 00000000 ____D C:\Program Files (x86)\STMicroelectronics
2016-04-20 20:41 - 2012-05-23 10:22 - 00081520 _____ (ST Microelectronics) C:\Windows\system32\accelernco01.dll
2016-04-20 20:41 - 2012-05-23 10:22 - 00027760 _____ (ST Microelectronics) C:\Windows\system32\Drivers\accelern.sys
2016-04-20 20:40 - 2016-04-20 20:41 - 13536952 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Chipset_Driver_RCHTX_WN_2.00.10.34_A11(1).EXE
2016-04-20 20:39 - 2016-04-20 20:39 - 00000000 ____D C:\Users\wrecken\AppData\Local\Dell
2016-04-20 20:38 - 2016-04-20 20:44 - 294586208 _____ C:\Users\wrecken\Downloads\DDPA_Setup_X1C1N_A09_64bits_ZPE.exe
2016-04-20 20:38 - 2016-04-20 20:43 - 189497952 _____ (Dell Inc.) C:\Users\wrecken\Downloads\DDP_Application_TDC1K_WN_2.2.00003.009_A06.EXE
2016-04-20 20:38 - 2016-04-20 20:38 - 04300104 _____ C:\Users\wrecken\Downloads\CW1394A0.exe
2016-04-20 20:37 - 2016-04-20 20:42 - 93179176 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Video_Driver_W33X5_WN_8.15.10.2993_A11.EXE
2016-04-20 20:37 - 2016-04-20 20:41 - 71707184 _____ (Dell Inc.) C:\Users\wrecken\Downloads\R296919.EXE
2016-04-20 20:37 - 2016-04-20 20:41 - 69216640 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Input_Driver_GGY5W_WN_8.1200.101.127_A06.EXE
2016-04-20 20:37 - 2016-04-20 20:40 - 65738376 _____ C:\Users\wrecken\Downloads\R285455.exe
2016-04-20 20:31 - 2016-04-25 17:33 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2016-04-20 20:30 - 2016-04-20 20:30 - 13536952 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Chipset_Driver_RCHTX_WN_2.00.10.34_A11.EXE
2016-04-20 20:30 - 2016-04-20 20:30 - 05935792 _____ C:\Users\wrecken\Downloads\SWB_DRVR_ME6P2_4M_6_2_40_1045_MR_A04_SETUP_ZPE.exe
2016-04-20 20:30 - 2016-04-20 20:30 - 05100920 _____ C:\Users\wrecken\Downloads\Ricoh_multi-device_A01_R230630_setup_ZPE.exe
2016-04-20 20:30 - 2016-04-20 20:30 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Intel
2016-04-20 20:29 - 2016-04-20 20:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2016-04-20 20:28 - 2016-04-20 20:54 - 00000000 ____D C:\Program Files (x86)\Intel
2016-04-20 20:28 - 2016-04-20 20:49 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-04-20 20:28 - 2016-04-20 20:28 - 00000000 ____D C:\ProgramData\Intel
2016-04-20 20:28 - 2016-04-20 20:28 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-04-20 20:26 - 2016-04-24 15:23 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-20 20:26 - 2016-04-20 20:28 - 00000000 ____D C:\Program Files\Intel
2016-04-20 20:25 - 2016-04-20 21:14 - 00000000 ____D C:\ProgramData\Dell
2016-04-20 20:23 - 2016-04-20 20:24 - 144350696 _____ (Dell Inc.) C:\Users\wrecken\Downloads\Network_Driver_3MNPT_WN_15.10.0.10_A06.EXE
2016-04-20 20:22 - 2016-04-24 19:32 - 00000000 ____D C:\Users\wrecken\AppData\Local\Deployment
2016-04-20 20:22 - 2016-04-24 17:15 - 00108840 _____ C:\Users\wrecken\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-20 20:22 - 2016-04-20 20:22 - 00000000 ____D C:\Users\wrecken\AppData\Local\Apps\2.0
2016-04-20 20:04 - 2016-04-20 19:12 - 00000000 ____D C:\Windows\Panther
2016-04-20 19:26 - 2016-04-20 20:27 - 00000000 ____D C:\Users\wrecken\AppData\Local\Mozilla
2016-04-20 19:26 - 2016-04-20 20:21 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Mozilla
2016-04-20 19:25 - 2016-04-20 19:25 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-20 19:25 - 2016-04-20 19:25 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-04-20 19:25 - 2016-04-20 19:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-04-20 19:25 - 2016-04-20 19:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-04-20 19:12 - 2016-04-25 17:34 - 00001409 _____ C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-04-20 19:12 - 2016-04-24 17:17 - 00000000 ____D C:\Users\wrecken\AppData\Local\VirtualStore
2016-04-20 19:12 - 2016-04-23 21:35 - 00000000 ____D C:\Users\wrecken
2016-04-20 19:12 - 2016-04-20 19:12 - 00000020 ___SH C:\Users\wrecken\ntuser.ini
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Vorlagen
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Startmenü
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Netzwerkumgebung
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Lokale Einstellungen
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Eigene Dateien
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Druckumgebung
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Documents\Eigene Videos
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Documents\Eigene Musik
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Documents\Eigene Bilder
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\AppData\Local\Verlauf
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\AppData\Local\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\wrecken\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Programme
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-04-20 19:12 - 2016-04-20 19:12 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-04-20 19:12 - 2011-04-12 09:54 - 00000000 ____D C:\Users\wrecken\AppData\Roaming\Media Center Programs
2016-04-20 19:09 - 2016-04-20 19:09 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-04-20 19:09 - 2016-04-20 19:09 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-04-20 19:08 - 2016-04-20 19:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-04-20 19:08 - 2016-04-20 19:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-04-13 17:53 - 2016-04-13 18:51 - 2452996552 _____ C:\Users\wrecken\Downloads\RG_V8_Rev.L_Customer_ROBOGUIDE.7z

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-04-25 20:52 - 2011-04-12 09:43 - 00698926 _____ C:\Windows\system32\perfh007.dat
2016-04-25 20:52 - 2011-04-12 09:43 - 00149034 _____ C:\Windows\system32\perfc007.dat
2016-04-25 20:52 - 2009-07-14 07:13 - 01592784 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-25 20:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-04-25 17:44 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-25 17:44 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-25 16:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-25 16:16 - 2009-07-14 06:45 - 00412688 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-25 16:11 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-04-25 16:11 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-04-25 16:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2016-04-25 16:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-04-25 16:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2016-04-25 16:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-04-25 16:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-04-24 15:31 - 2009-07-14 04:34 - 00017523 _____ C:\Windows\system32\Drivers\etc\services
2016-04-23 22:02 - 2011-12-05 09:22 - 00000000 ___RD C:\Users\wrecken\Documents\Notes
2016-04-23 22:02 - 2011-11-26 21:24 - 00000000 ___RD C:\Users\wrecken\Documents\Scanned Documents
2016-04-20 22:20 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-04-20 21:29 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-04-20 21:27 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-04-20 21:26 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew
2016-04-20 21:26 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-20 21:13 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-04-20 21:13 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-04-20 21:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-04-20 20:04 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-04-20 19:12 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2016-04-20 19:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-04-20 19:09 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-04-20 19:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-04-06 10:18 - 2010-11-21 05:27 - 00453280 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-03-30 21:37 - 2016-01-26 21:31 - 00000000 ____D C:\Users\wrecken\Documents\SelfMV

Einige Dateien in TEMP:
====================
C:\Users\wrecken\AppData\Local\Temp\ChangeIcon.exe
C:\Users\wrecken\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-04-20 19:05

==================== Ende von FRST.txt ============================
         
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-04-2016
durchgeführt von wrecken (2016-04-25 21:10:48)
Gestartet von C:\Users\wrecken\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2016-04-20 17:12:10)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2048369672-643187680-2407283211-500 - Administrator - Disabled)
Gast (S-1-5-21-2048369672-643187680-2407283211-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2048369672-643187680-2407283211-1002 - Limited - Enabled)
wrecken (S-1-5-21-2048369672-643187680-2407283211-1000 - Administrator - Enabled) => C:\Users\wrecken

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.10.34 - STMicroelectronics)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.15) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.15 - Adobe Systems Incorporated)
Another Matrix Screen Saver (HKLM-x32\...\Another Matrix Screen Saver_is1) (Version:  - NicheScreenSavers.com)
AuthenTec WinBio FingerPrint Software 64-bit (Version: 3.4.2.1016 - AuthenTec, Inc.) Hidden
Avast Business Security (HKLM-x32\...\Avast) (Version: 11.1.2510 - AVAST Software)
Dell Custom Help (Version: 16.01.1000.0235 - Intel Corporation) Hidden
Dell Data Protection | Access (HKLM\...\{ABBA2EA4-740E-4052-902B-9CA70B081E3F}) (Version: 2.3.00003.072 - Dell Inc.)
Dell System Detect (HKU\S-1-5-21-2048369672-643187680-2407283211-1000\...\58d94f3ce2c27db0) (Version: 7.4.0.3 - Dell)
Dell System Manager (HKLM\...\{9CC89928-4787-4ED5-9942-4EBF6C2468E6}) (Version: 1.7.10000 - Dell Inc.)
FANUC ROBOGUIDE (HKLM-x32\...\{9E2C7340-E595-427B-8136-C5133E4450D6}) (Version: V8.30139 (Rev.L) - FANUC Robotics America, Inc.)
FANUC Robotics Robot Neighborhood (HKLM-x32\...\{22B5A25F-85A9-4149-895D-7307E22875BA}) (Version: 8.30139.18.03 - FANUC Robotics America, Inc.)
FANUC Robotics Robot Server (HKLM-x32\...\{85950D11-0FA2-4058-AB3F-48AEC62C1165}) (Version: 8.30139.18.03 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V7.20 (HKLM-x32\...\{29DDB6F7-87D6-4DCE-A7D6-00CBD05C9A0D}) (Version: (Rev.R) - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V7.30 (HKLM-x32\...\{BCEAADAE-9259-40CB-9456-D4E44C74AAB7}) (Version: 7.3059.39.02 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V7.40 (HKLM-x32\...\{FEBBCC8B-BA36-4554-839E-DE7151B513D7}) (Version: 7.40112.22.04 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V7.50 (HKLM-x32\...\{4273ECBC-C67E-4AD9-BF96-BA47A5045492}) (Version: 7.50130.28.06 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V7.70 (HKLM-x32\...\{53F5FAAD-DA06-4A30-9811-7350DDB126F6}) (Version: 7.7096.48.02 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V8.10 (HKLM-x32\...\{D9653066-CF72-4B4B-8A0E-8D572513AA33}) (Version: 8.10109.27.04 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V8.13 (HKLM-x32\...\{FA4BBDA5-A60C-4363-AD31-E5CC344C244F}) (Version: 8.1326.15.05 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V8.20 (HKLM-x32\...\{78D6AF42-E1C3-447F-A9F4-52814AEEEEE4}) (Version: 8.20167.25.06 - FANUC Robotics America, Inc.)
FANUC Robotics Virtual Robot Controller V8.30 (HKLM-x32\...\{ACC5C1AD-626A-4DE6-8AEB-F4FF68A49D31}) (Version: 8.30139.18.06 - FANUC Robotics America, Inc.)
FANUC Robotics Vision Controls V8 (HKLM-x32\...\{3236D3BD-46AD-49FE-972C-436CA420D2E6}) (Version: 8.30139.18.02 - FANUC CORPORATION / FANUC Robotics America, Inc.)
FANUC Vision PC Controls V7.70 (HKLM-x32\...\{599C7020-56D9-4DB2-9B2F-262AA44630DF}) (Version: 7.7096.48.02 - FANUC CORPORATION / FANUC Robotics America, Inc.)
Gemalto (Version: 01.64.01.0010 - Wave Systems Corp) Hidden
GemPcCCID (Version: 2.0.1 - Gemalto) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2993 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{b6b417a3-1f40-4618-aadd-49628bda7836}) (Version: 16.1.1 - Intel Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 45.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.2 (x86 de)) (Version: 45.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.2 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
O2Micro OZ776 SCR Driver (Version: 2.1.4.223GS - O2Micro) Hidden
O2Micro OZ776 SCR Driver (x32 Version: 2.1.4.223GS - O2Micro) Hidden
OrangeEdit 2.0 BETA (HKLM-x32\...\OrangeEdit_is1) (Version: 2.0.11.62 - OrangeApps GmbH)
PBA Driver-x64 (Version: 1.0.1.8 - Dell Inc.) Hidden
RarZilla Free Unrar (HKLM-x32\...\RarZilla Free Unrar) (Version: 7 - Philipp Winterberg)
RealDownloader (x32 Version: 18.1.3.103 - RealNetworks, Inc.) Hidden
RealDownloader (x32 Version: 18.1.3.104 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.3 - RealNetworks)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RICOH Media Driver ver.2.07.01.01 (HKLM-x32\...\{2B818257-E6C7-4841-8C29-C5C9A982BCE5}) (Version: 2.07.01.01 - RICOH)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.16041.12 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.16041.12 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
SI TSS (Version: 2.1.41 - Security Innovation) Hidden
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)
SPBA (WBF) 5.9 (Version: 5.9.7.7232 - Authentec Inc.) Hidden
Update for Outlook 2007 Junk Email Filter (kb947945) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E397056B-7AE5-4FF1-8B13-276BF8201847}) (Version:  - Microsoft)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Video Downloader (x32 Version: 1.0.0 - RealNetworks) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Wave Crypto Runtime 2.0.9.0 x64 (Version: 02.00.09.0000 - Wave Systems Corp) Hidden
Wave Support Software Installer (Version: 05.15.00.024 - Wave Systems Corp) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.7900 - Broadcom Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1DED5AAB-B397-41D3-8450-9F2889CE8082} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2048369672-643187680-2407283211-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {323CAAD0-593A-4539-8AD2-413B8781C563} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-04-21] (AVAST Software)
Task: {510AB55E-4F6B-499C-922C-DEEF75F3EB51} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {7EFA78F2-A9FA-4486-91D5-FE2D28A88686} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-04-21] (AVAST Software)
Task: {91BB4DCE-F59F-4908-BCE7-98C01CE24AE9} - System32\Tasks\{4FF864C5-EDA6-4F07-A08B-4AC9EE2B5BA2} => C:\Program Files (x86)\FANUC\ROBOGUIDE\bin\ROBOGUIDE.exe [2015-12-24] (FANUC Robotics)
Task: {B1620D7D-43B3-418B-8B56-E641B6820AAE} - System32\Tasks\{B2815F2B-A96F-4699-A53E-C58F982BD6C5} => pcalua.exe -a E:\Programme\ALDITALKVerbindungsassistent\Setup.exe -d E:\Programme\ALDITALKVerbindungsassistent
Task: {C5E3FC15-7CBF-4714-BFEA-5B66552FC3EC} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-02-03] ()
Task: {ED1E5118-7BF4-4584-BB42-3BDF769B24A3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {FA18D084-F0F8-418C-9A8D-95ED611AE8E9} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2048369672-643187680-2407283211-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-02-03 18:49 - 2016-02-03 18:49 - 00032544 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2011-02-08 01:41 - 2011-02-08 01:41 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2016-03-28 20:07 - 2016-03-28 20:07 - 00230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-04-20 20:41 - 2012-09-05 12:51 - 00686744 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
2016-04-20 20:46 - 2013-02-01 12:58 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-02-03 18:00 - 2016-02-03 18:00 - 00712432 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
2016-04-21 07:01 - 2016-04-21 07:01 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-04-21 07:01 - 2016-04-21 07:01 - 00133256 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-04-24 13:45 - 2016-04-24 13:45 - 02890240 _____ () C:\Program Files\AVAST Software\Avast\defs\16042400\algo.dll
2016-04-21 07:03 - 2016-04-21 07:03 - 00509344 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-04-25 20:22 - 2016-04-25 20:22 - 02890240 _____ () C:\Program Files\AVAST Software\Avast\defs\16042500\algo.dll
2016-04-21 07:01 - 2016-04-21 07:01 - 00647360 _____ () C:\Program Files\AVAST Software\Avast\sqlite3.dll
2016-02-03 18:48 - 2016-02-03 18:48 - 00037688 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll
2016-02-03 18:48 - 2016-02-03 18:48 - 00039224 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2016-02-03 18:49 - 2016-02-03 18:49 - 00037192 _____ () C:\Program Files (x86)\Real\UpdateService\VideoDLUpdatePlugin.dll
2016-04-21 07:01 - 2016-04-21 07:01 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-02-03 17:53 - 2016-02-03 17:53 - 01382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll
2016-04-21 12:19 - 2016-04-21 12:19 - 00654608 _____ () C:\Program Files (x86)\Real\RealPlayer\RPDS\Lib\r1api.dll
2016-02-03 18:00 - 2016-02-03 18:00 - 00077552 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\dtvhooks.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2048369672-643187680-2407283211-1000\...\dell.com -> dell.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
         

Alt 26.04.2016, 20:00   #5
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Addition.txt ist nicht komplett...

__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 27.04.2016, 05:28   #6
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Code:
ATTFilter
==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2048369672-643187680-2407283211-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\wrecken\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: tcsd_win32.exe => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealTimes.lnk => C:\Windows\pss\RealTimes.lnk.CommonStartup
MSCONFIG\startupreg: RealDownloader => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{86A373C9-28CB-4FB8-A77D-1E099AD59F94}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{59ABC7E2-FB28-4AD4-A947-4EFDF26D7864}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8681259F-9B49-4A3A-97D3-AE715AA6EF29}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{99373641-7B09-4927-9E79-ED8605B93B61}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{75EF70A6-B4CD-4378-B222-05AD383E966F}] => (Allow) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{E5EA2F6D-B6D9-4891-B5CA-E632CA65A11E}] => (Allow) C:\PROGRA~2\FANUC\ROBOGU~1\bin\RGCore.exe
FirewallRules: [{018C0D34-1D3E-4234-BA47-6428AF991986}] => (Allow) C:\PROGRA~2\FANUC\Shared\ROBOTS~1\frrobot.exe
FirewallRules: [{CEBF90C4-277F-405E-8C17-D6B391EA3E99}] => (Allow) C:\PROGRA~2\FANUC\Shared\OFFLIN~1\FRVRC\FRVIRT~1.EXE
FirewallRules: [{9EEB0B71-BA8F-406B-ACEB-0644A29843F1}] => (Allow) C:\PROGRA~2\FANUC\Shared\ROBOTS~1\FRROBO~1.EXE
FirewallRules: [{5CABB7C4-0369-4B64-A94B-46E79B61A0A9}] => (Allow) C:\PROGRA~2\FANUC\Shared\UTILIT~1\FRLICE~1.EXE

==================== Wiederherstellungspunkte =========================

21-04-2016 11:31:22 Installed Samsung Kies
21-04-2016 11:53:10 Installed Samsung Kies3
21-04-2016 13:10:38 Installed Microsoft SQL Server Compact 3.5 SP2 ENU
21-04-2016 22:02:50 Windows Update
24-04-2016 14:11:29 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
24-04-2016 15:23:33 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
24-04-2016 15:29:48 Installed FANUC ROBOGUIDE
24-04-2016 16:19:59 Installed FANUC Vision PC Controls V7.70
24-04-2016 16:21:39 Installed FANUC Robotics Vision Controls V8
24-04-2016 20:01:12 Windows Update
25-04-2016 18:35:57 Windows Update
25-04-2016 20:00:43 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/25/2016 08:37:38 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (04/25/2016 08:16:35 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (04/25/2016 05:33:11 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:47:07 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:41:01 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:38:55 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:36:42 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: System.Web.Mobile, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil . Error code = 0x80070020

Error: (04/25/2016 04:29:17 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:21:23 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)

Error: (04/25/2016 04:17:42 PM) (Source: bcc) (EventID: 1) (User: )
Description: synchronize -  exchange FAILED  -12  (1 retry)


Systemfehler:
=============
Error: (04/25/2016 08:51:24 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft XML Core Services 4.0 Service Pack 2 für x64-basierte Systeme (KB973688)

Error: (04/25/2016 08:31:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft XML Core Services 4.0 Service Pack 2 für x64-Systeme (KB954430)

Error: (04/25/2016 05:35:13 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (04/25/2016 05:35:12 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (04/25/2016 04:21:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für Internet Explorer*8 für Windows 7 für x64-basierte Systeme (KB2598845)

Error: (04/25/2016 04:14:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (04/25/2016 04:14:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Business Console Client Antivirus Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (04/25/2016 04:14:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Business Console Client" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (04/25/2016 04:14:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Antivirus" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (04/25/2016 04:13:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Business Console Client Antivirus Service" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2016-04-24 16:28:16.477
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-04-24 16:28:16.368
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-04-24 15:31:49.393
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-04-24 15:31:49.268
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-04-24 15:30:33.343
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-04-24 15:30:33.249
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\Machnm32.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Prozentuale Nutzung des RAM: 88%
Installierter physikalischer RAM: 2933.85 MB
Verfügbarer physikalischer RAM: 348.65 MB
Summe virtueller Speicher: 5865.91 MB
Verfügbarer virtueller Speicher: 2311.24 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:218.2 GB) (Free:89.36 GB) NTFS
Drive e: (INTENSO) (Fixed) (Total:465.64 GB) (Free:129.28 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: E7637C42)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=218.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 19B84FEC)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=0C)

==================== Ende von Addition.txt ============================
         

Alt 28.04.2016, 08:22   #7
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Schritt 1
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 28.04.2016, 09:52   #8
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Code:
ATTFilter
10:46:54.0095 0x0490  TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
10:46:57.0925 0x0490  ============================================================
10:46:57.0925 0x0490  Current date / time: 2016/04/28 10:46:57.0925
10:46:57.0925 0x0490  SystemInfo:
10:46:57.0925 0x0490  
10:46:57.0925 0x0490  OS Version: 6.1.7601 ServicePack: 1.0
10:46:57.0925 0x0490  Product type: Workstation
10:46:57.0925 0x0490  ComputerName: WRECKEN-PC
10:46:57.0925 0x0490  UserName: wrecken
10:46:57.0925 0x0490  Windows directory: C:\Windows
10:46:57.0925 0x0490  System windows directory: C:\Windows
10:46:57.0925 0x0490  Running under WOW64
10:46:57.0925 0x0490  Processor architecture: Intel x64
10:46:57.0925 0x0490  Number of processors: 4
10:46:57.0925 0x0490  Page size: 0x1000
10:46:57.0925 0x0490  Boot type: Normal boot
10:46:57.0925 0x0490  ============================================================
10:47:01.0534 0x0490  KLMD registered as C:\Windows\system32\drivers\24113539.sys
10:47:02.0012 0x0490  System UUID: {8FE791E9-7173-EFE9-ECF1-F729294DE373}
10:47:03.0037 0x0490  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:47:03.0047 0x0490  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
10:47:03.0395 0x0490  ============================================================
10:47:03.0395 0x0490  \Device\Harddisk0\DR0:
10:47:03.0396 0x0490  MBR partitions:
10:47:03.0396 0x0490  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1D4C000
10:47:03.0396 0x0490  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D60000, BlocksNum 0x1B465000
10:47:03.0396 0x0490  \Device\Harddisk1\DR1:
10:47:03.0396 0x0490  MBR partitions:
10:47:03.0397 0x0490  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x3A384C02
10:47:03.0397 0x0490  ============================================================
10:47:03.0670 0x0490  C: <-> \Device\Harddisk0\DR0\Partition2
10:47:03.0671 0x0490  E: <-> \Device\Harddisk1\DR1\Partition1
10:47:03.0671 0x0490  ============================================================
10:47:03.0671 0x0490  Initialize success
10:47:03.0671 0x0490  ============================================================
10:48:53.0757 0x1194  ============================================================
10:48:53.0757 0x1194  Scan started
10:48:53.0757 0x1194  Mode: Manual; SigCheck; TDLFS; 
10:48:53.0757 0x1194  ============================================================
10:48:53.0757 0x1194  KSN ping started
10:48:56.0284 0x1194  KSN ping finished: true
10:48:58.0608 0x1194  ================ Scan system memory ========================
10:48:58.0608 0x1194  System memory - ok
10:48:58.0608 0x1194  ================ Scan services =============================
10:48:59.0076 0x1194  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
10:48:59.0326 0x1194  1394ohci - ok
10:48:59.0373 0x1194  [ 1575A815C27789061F34B4F55AE0B5C3, F41CF20CB26DF5F2BEA83463A790849DC240202CF558DE4F3BF6372230D42566 ] Acceler         C:\Windows\system32\DRIVERS\accelern.sys
10:48:59.0451 0x1194  Acceler - ok
10:48:59.0482 0x1194  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
10:48:59.0513 0x1194  ACPI - ok
10:48:59.0529 0x1194  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
10:48:59.0653 0x1194  AcpiPmi - ok
10:48:59.0887 0x1194  [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
10:48:59.0903 0x1194  AdobeARMservice - ok
10:49:00.0153 0x1194  [ 28FFB14117CCEDD7D2F124596AA9B785, 8FC482C6444C904B5536979B3354597FD714634EC7372B464118C42AA9DCB58A ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
10:49:00.0184 0x1194  AdobeFlashPlayerUpdateSvc - ok
10:49:00.0231 0x1194  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
10:49:00.0387 0x1194  adp94xx - ok
10:49:00.0433 0x1194  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
10:49:00.0527 0x1194  adpahci - ok
10:49:00.0543 0x1194  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
10:49:00.0652 0x1194  adpu320 - ok
10:49:00.0683 0x1194  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
10:49:00.0714 0x1194  AeLookupSvc - ok
10:49:00.0777 0x1194  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys
10:49:00.0917 0x1194  AFD - ok
10:49:00.0948 0x1194  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
10:49:01.0057 0x1194  agp440 - ok
10:49:01.0089 0x1194  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
10:49:01.0120 0x1194  ALG - ok
10:49:01.0151 0x1194  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
10:49:01.0213 0x1194  aliide - ok
10:49:01.0213 0x1194  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
10:49:01.0276 0x1194  amdide - ok
10:49:01.0276 0x1194  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
10:49:01.0354 0x1194  AmdK8 - ok
10:49:01.0369 0x1194  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
10:49:01.0447 0x1194  AmdPPM - ok
10:49:01.0525 0x1194  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
10:49:01.0603 0x1194  amdsata - ok
10:49:01.0635 0x1194  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
10:49:01.0697 0x1194  amdsbs - ok
10:49:01.0900 0x1194  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
10:49:01.0931 0x1194  amdxata - ok
10:49:01.0978 0x1194  [ A9FB80B0BBA6F765F4E691B7AD4963A7, 06BC740AF47ACECEE3707C433357F872EA0D9F2CA1B9FC2489FA3B421A262EF0 ] AppID           C:\Windows\system32\drivers\appid.sys
10:49:02.0071 0x1194  AppID - ok
10:49:02.0103 0x1194  [ C47B6624AF9AEE4146743DCB133A159D, 10D1E6C9F972C3A8CC304F38B0A52818A78D70B4AF71F6E22CE1773397FC2AB4 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
10:49:02.0134 0x1194  AppIDSvc - ok
10:49:02.0181 0x1194  [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo         C:\Windows\System32\appinfo.dll
10:49:02.0212 0x1194  Appinfo - ok
10:49:02.0212 0x1194  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
10:49:02.0321 0x1194  arc - ok
10:49:02.0321 0x1194  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
10:49:02.0383 0x1194  arcsas - ok
10:49:02.0633 0x1194  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
10:49:02.0664 0x1194  aspnet_state - ok
10:49:02.0867 0x1194  [ 28E2BACBE78E0AA693E1952BBB031B67, BD2125F6B0AE5028160001EFB26164C965E74514D260447E2E3449E9166A940F ] aswBcc          C:\Program Files\AVAST Software\Avast\bcc.exe
10:49:02.0914 0x1194  aswBcc - ok
10:49:02.0945 0x1194  [ E3DC7F70E6B75A3AE57A671E6BFE14EE, C7835E1EFED3DD11D1B3189AAAE0904C5A0BC7F77D5C6E0BB7C44A47EFD9289C ] aswHwid         C:\Windows\system32\drivers\aswHwid.sys
10:49:03.0039 0x1194  aswHwid - ok
10:49:03.0054 0x1194  [ CD0F8FD566613DBA2303C272372DCD40, 29E03BEDECD8BE4F0A577EDD19E87A13D07A42A602440356BE0DA29E4B354D3C ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys
10:49:03.0117 0x1194  aswMonFlt - ok
10:49:03.0148 0x1194  [ 22DAE0645D566D8452BCDA8DD6219957, BA6862F5A888C934C6191D6AB20FB0193941AB436525DFE9A6FAE3D9B7F328FB ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
10:49:03.0241 0x1194  aswRdr - ok
10:49:03.0273 0x1194  [ 431A0AB82850F4B4E9BE78EBF6D63731, 0CCD84071EFC5BF7E3EBDBC877F487029D82E5A10F662CA00B53D80396E21ECD ] aswRvrt         C:\Windows\system32\drivers\aswRvrt.sys
10:49:03.0304 0x1194  aswRvrt - ok
10:49:03.0366 0x1194  [ 2F8F7239D6E6C1B1A345A5A0C29AC2FC, C5B64026D366C8EBC8AA12EE00C6D6175996B8020F1E613A7BA91C2A0DA07B16 ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
10:49:03.0475 0x1194  aswSnx - ok
10:49:03.0538 0x1194  [ 484E8C6AD6F3050582638A8E741FF9FA, 10DF9719336D1656449D3A35568BFD0DE6D24DF95BDC9F5B0D15FAF2EE1B9C87 ] aswSP           C:\Windows\system32\drivers\aswSP.sys
10:49:03.0631 0x1194  aswSP - ok
10:49:03.0663 0x1194  [ 18DD02CBF64B28CF9E749DFCEC6660A5, E812519FB93E64FCBF0BC1FAA039E9C29ACEA8822C01D35F068C3489EC36171E ] aswStm          C:\Windows\system32\drivers\aswStm.sys
10:49:03.0709 0x1194  aswStm - ok
10:49:03.0803 0x1194  [ 227B9F700E7C4DAA4822E852383BBE6F, 60B094BBF428C9E031DFD54AC18D99A2C468C400A757919DF7C4927BDE7030DF ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
10:49:03.0850 0x1194  aswVmm - ok
10:49:03.0881 0x1194  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
10:49:03.0943 0x1194  AsyncMac - ok
10:49:03.0990 0x1194  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
10:49:04.0021 0x1194  atapi - ok
10:49:04.0084 0x1194  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:49:04.0146 0x1194  AudioEndpointBuilder - ok
10:49:04.0162 0x1194  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
10:49:04.0193 0x1194  AudioSrv - ok
10:49:04.0287 0x1194  [ F443FD1B03C79AE5DD2DEEBCA4DD28E3, B3C72A3AD7129E44717E76E979CDED1A32C88713C8E5F05D4EC9F5D897815015 ] Avast Business Console Client Antivirus Service C:\Program Files\AVAST Software\Avast\bccavsvc.exe
10:49:04.0365 0x1194  Avast Business Console Client Antivirus Service - ok
10:49:04.0380 0x1194  [ EA954D39A992E3194695B11D8D367369, C73B4361DBBDCBA1456DD095BD7296357FF1C6A33B1581884B4EE82E8518EE33 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
10:49:04.0411 0x1194  avast! Antivirus - ok
10:49:04.0458 0x1194  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
10:49:04.0505 0x1194  AxInstSV - ok
10:49:04.0552 0x1194  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
10:49:04.0708 0x1194  b06bdrv - ok
10:49:04.0770 0x1194  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
10:49:04.0848 0x1194  b57nd60a - ok
10:49:04.0879 0x1194  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
10:49:04.0911 0x1194  BDESVC - ok
10:49:04.0926 0x1194  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
10:49:04.0989 0x1194  Beep - ok
10:49:05.0067 0x1194  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
10:49:05.0145 0x1194  BFE - ok
10:49:05.0223 0x1194  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
10:49:05.0394 0x1194  BITS - ok
10:49:05.0425 0x1194  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
10:49:05.0472 0x0d9c  Object required for P2P: [ 28E2BACBE78E0AA693E1952BBB031B67 ] aswBcc
10:49:05.0566 0x1194  blbdrive - ok
10:49:05.0597 0x1194  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
10:49:05.0737 0x1194  bowser - ok
10:49:05.0769 0x1194  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
10:49:05.0815 0x1194  BrFiltLo - ok
10:49:05.0831 0x1194  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
10:49:05.0862 0x1194  BrFiltUp - ok
10:49:05.0878 0x1194  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
10:49:05.0909 0x1194  Browser - ok
10:49:05.0940 0x1194  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
10:49:06.0018 0x1194  Brserid - ok
10:49:06.0034 0x1194  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
10:49:06.0112 0x1194  BrSerWdm - ok
10:49:06.0127 0x1194  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
10:49:06.0190 0x1194  BrUsbMdm - ok
10:49:06.0190 0x1194  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
10:49:06.0330 0x1194  BrUsbSer - ok
10:49:06.0424 0x1194  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
10:49:06.0455 0x1194  BthEnum - ok
10:49:06.0471 0x1194  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
10:49:06.0502 0x1194  BTHMODEM - ok
10:49:06.0564 0x1194  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
10:49:06.0642 0x1194  BthPan - ok
10:49:06.0689 0x1194  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys
10:49:06.0767 0x1194  BTHPORT - ok
10:49:06.0829 0x1194  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
10:49:06.0892 0x1194  bthserv - ok
10:49:06.0954 0x1194  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
10:49:07.0017 0x1194  BTHUSB - ok
10:49:07.0095 0x1194  [ A0DFB69ADE3444C78B17636FCF28E898, 21B1E76F056C2AFD5DEAFD620D2F90F4F617F8E76A88CEA2196E69D2CFBEE88B ] BTWAMPFL        C:\Windows\system32\DRIVERS\btwampfl.sys
10:49:07.0157 0x1194  BTWAMPFL - ok
10:49:07.0219 0x1194  [ 7CF028CE78696882B327FF13D2DFA534, 624C88C3CB511DE5F8279B7E982632F81FDFCAC8F2B038B69FEB686400E0C4F8 ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
10:49:07.0251 0x1194  btwaudio - ok
10:49:07.0282 0x1194  [ 3DEF2370E414B4E299673558BA171A51, 5A0923D9F941ABD34EC9BEE0EB62A62F135CBF128061239CC6EA0E6752791636 ] btwavdt         C:\Windows\system32\drivers\btwavdt.sys
10:49:07.0313 0x1194  btwavdt - ok
10:49:07.0516 0x1194  [ CC9DAE7759AC2C0D19111C0D38DDD232, 3E539DE221884647BCDB9DF95784F8B2F31B485024B0290128ABED41B4DE59FC ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
10:49:07.0578 0x1194  btwdins - ok
10:49:07.0625 0x1194  [ 9AD0FA253ED531D39FB2D74FE12A5FA9, 74AC5ECB4F770274BBA8EBC584A0F08FDDDA21C4BB2A2DDD4BB871DC47B1447C ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys
10:49:07.0641 0x1194  btwl2cap - ok
10:49:07.0687 0x1194  [ 9937E0E4DFC0030560A6DFE9D3A94B39, 0B9CF1932D4534BD7B1F5D7B7BD5FBF9C8D156838D24ABBDE475E79EEF1150F1 ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
10:49:07.0703 0x1194  btwrchid - ok
10:49:07.0750 0x1194  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
10:49:07.0906 0x1194  cdfs - ok
10:49:07.0937 0x1194  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
10:49:08.0062 0x1194  cdrom - ok
10:49:08.0109 0x1194  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
10:49:08.0187 0x1194  CertPropSvc - ok
10:49:08.0187 0x1194  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
10:49:08.0280 0x1194  circlass - ok
10:49:08.0343 0x1194  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
10:49:08.0421 0x1194  CLFS - ok
10:49:08.0561 0x1194  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:49:08.0577 0x1194  clr_optimization_v2.0.50727_32 - ok
10:49:08.0670 0x1194  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
10:49:08.0686 0x1194  clr_optimization_v2.0.50727_64 - ok
10:49:08.0733 0x0a14  Object required for P2P: [ 2F8F7239D6E6C1B1A345A5A0C29AC2FC ] aswSnx
10:49:08.0920 0x1194  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:49:08.0982 0x1194  clr_optimization_v4.0.30319_32 - ok
10:49:09.0013 0x1194  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
10:49:09.0060 0x1194  clr_optimization_v4.0.30319_64 - ok
10:49:09.0107 0x1194  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
10:49:09.0138 0x1194  CmBatt - ok
10:49:09.0216 0x1194  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
10:49:09.0279 0x1194  cmdide - ok
10:49:09.0341 0x1194  [ CA3FB5A6B626D8A00A89E049CF95954E, CD5E3E40972513195108BA46CEC1D0AEA6B09A67EEBDD17EB759BD1729B07C06 ] CNG             C:\Windows\system32\Drivers\cng.sys
10:49:09.0466 0x1194  CNG - ok
10:49:09.0497 0x1194  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
10:49:09.0575 0x1194  Compbatt - ok
10:49:09.0591 0x1194  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
10:49:09.0715 0x1194  CompositeBus - ok
10:49:09.0747 0x1194  COMSysApp - ok
10:49:09.0747 0x1194  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
10:49:09.0825 0x1194  crcdisk - ok
10:49:09.0871 0x1194  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
10:49:09.0918 0x1194  CryptSvc - ok
10:49:09.0965 0x1194  [ E1617EC33B0B88FEC429BF6EB7B9FA52, 8F9A784674DDF4B2924645836AB03BA54D714FA16BB9130EE36E96C6D2073D6A ] dcdbas          C:\Windows\system32\DRIVERS\dcdbas64.sys
10:49:10.0090 0x0d9c  Object send P2P result: true
10:49:10.0246 0x1194  dcdbas - ok
10:49:10.0433 0x1194  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch      C:\Windows\system32\rpcss.dll
10:49:10.0527 0x1194  DcomLaunch - ok
10:49:10.0605 0x1194  [ A90D2A2D55D0B4499934271927BC7C09, 1A4FDD078CB59AF63F7EFAE0B0A90D1EF86CBFED501D8EE07AA8EBC1144C1DE2 ] dcpsysmgrsvc    C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
10:49:10.0636 0x1194  dcpsysmgrsvc - ok
10:49:10.0667 0x1194  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
10:49:10.0729 0x1194  defragsvc - ok
10:49:10.0729 0x1194  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
10:49:10.0807 0x1194  DfsC - ok
10:49:10.0839 0x1194  [ BC319C065335B10A5AA5938A677A60D5, 6F32AF2A440E763DC2ADD06F3422DCF3285BDFA9E69E5C3CD67A10F039B2830F ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
10:49:10.0901 0x1194  dg_ssudbus - ok
10:49:10.0932 0x1194  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
10:49:10.0963 0x1194  Dhcp - ok
10:49:11.0073 0x1194  [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack       C:\Windows\system32\diagtrack.dll
10:49:11.0151 0x1194  DiagTrack - ok
10:49:11.0213 0x1194  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
10:49:11.0353 0x1194  discache - ok
10:49:11.0385 0x0a14  Object send P2P result: true
10:49:11.0385 0x0a14  Object required for P2P: [ 484E8C6AD6F3050582638A8E741FF9FA ] aswSP
10:49:11.0416 0x1194  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\Windows\system32\drivers\disk.sys
10:49:11.0447 0x1194  Disk - ok
10:49:11.0541 0x1194  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
10:49:11.0572 0x1194  Dnscache - ok
10:49:11.0603 0x1194  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
10:49:11.0665 0x1194  dot3svc - ok
10:49:11.0697 0x1194  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
10:49:11.0759 0x1194  DPS - ok
10:49:11.0790 0x1194  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
10:49:11.0837 0x1194  drmkaud - ok
10:49:11.0899 0x1194  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
10:49:12.0024 0x1194  DXGKrnl - ok
10:49:12.0055 0x1194  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
10:49:12.0102 0x1194  EapHost - ok
10:49:12.0211 0x1194  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
10:49:12.0383 0x1194  ebdrv - ok
10:49:12.0414 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] EFS             C:\Windows\System32\lsass.exe
10:49:12.0445 0x1194  EFS - ok
10:49:12.0539 0x1194  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
10:49:12.0617 0x1194  ehRecvr - ok
10:49:12.0617 0x1194  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
10:49:12.0664 0x1194  ehSched - ok
10:49:12.0726 0x1194  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
10:49:12.0789 0x1194  elxstor - ok
10:49:12.0804 0x1194  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
10:49:12.0945 0x1194  ErrDev - ok
10:49:13.0038 0x1194  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
10:49:13.0116 0x1194  EventSystem - ok
10:49:13.0974 0x0a14  Object send P2P result: true
10:49:13.0974 0x0a14  Object required for P2P: [ F443FD1B03C79AE5DD2DEEBCA4DD28E3 ] Avast Business Console Client Antivirus Service
10:49:14.0005 0x1194  [ 91CD2315EB4F0547E0A6573A9AF5B576, 65DEC986C7489010EC2E14FCEF96F998A4E6E60EDA12AACAB5914A9F7FECAEFA ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe
10:49:14.0052 0x1194  EvtEng - ok
10:49:14.0083 0x1194  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
10:49:14.0177 0x1194  exfat - ok
10:49:14.0177 0x1194  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
10:49:14.0255 0x1194  fastfat - ok
10:49:14.0302 0x1194  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
10:49:14.0349 0x1194  Fax - ok
10:49:14.0349 0x1194  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
10:49:14.0411 0x1194  fdc - ok
10:49:14.0442 0x1194  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
10:49:14.0489 0x1194  fdPHost - ok
10:49:14.0505 0x1194  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
10:49:14.0551 0x1194  FDResPub - ok
10:49:14.0551 0x1194  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
10:49:14.0583 0x1194  FileInfo - ok
10:49:14.0583 0x1194  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
10:49:14.0676 0x1194  Filetrace - ok
10:49:14.0676 0x1194  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
10:49:14.0785 0x1194  flpydisk - ok
10:49:14.0801 0x1194  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
10:49:14.0848 0x1194  FltMgr - ok
10:49:14.0926 0x1194  [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache       C:\Windows\system32\FntCache.dll
10:49:14.0988 0x1194  FontCache - ok
10:49:15.0035 0x1194  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
10:49:15.0051 0x1194  FontCache3.0.0.0 - ok
10:49:15.0051 0x1194  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
10:49:15.0113 0x1194  FsDepends - ok
10:49:15.0144 0x1194  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
10:49:15.0207 0x1194  Fs_Rec - ok
10:49:15.0253 0x1194  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
10:49:15.0378 0x1194  fvevol - ok
10:49:15.0378 0x1194  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
10:49:15.0409 0x1194  gagp30kx - ok
10:49:15.0503 0x1194  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
10:49:15.0597 0x1194  gpsvc - ok
10:49:15.0628 0x1194  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
10:49:15.0675 0x1194  hcw85cir - ok
10:49:15.0737 0x1194  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:49:15.0862 0x1194  HdAudAddService - ok
10:49:15.0877 0x1194  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
10:49:15.0909 0x1194  HDAudBus - ok
10:49:15.0955 0x1194  [ B6AC71AAA2B10848F57FC49D55A651AF, 4FAD833654E86F9FAF972AC8AF87FD4A9A765B26B96F096BBD63506B5D521A91 ] HECIx64         C:\Windows\system32\DRIVERS\HECIx64.sys
10:49:15.0987 0x1194  HECIx64 - ok
10:49:16.0002 0x1194  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
10:49:16.0065 0x1194  HidBatt - ok
10:49:16.0065 0x1194  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
10:49:16.0189 0x1194  HidBth - ok
10:49:16.0205 0x1194  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
10:49:16.0236 0x1194  HidIr - ok
10:49:16.0252 0x1194  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
10:49:16.0299 0x1194  hidserv - ok
10:49:16.0377 0x1194  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
10:49:16.0408 0x1194  HidUsb - ok
10:49:16.0423 0x1194  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
10:49:16.0486 0x1194  hkmsvc - ok
10:49:16.0533 0x0a14  Object send P2P result: true
10:49:16.0533 0x1194  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:49:16.0548 0x1194  HomeGroupListener - ok
10:49:16.0611 0x1194  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:49:16.0626 0x1194  HomeGroupProvider - ok
10:49:16.0642 0x1194  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
10:49:16.0704 0x1194  HpSAMD - ok
10:49:16.0767 0x1194  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
10:49:16.0923 0x1194  HTTP - ok
10:49:17.0032 0x1194  [ CDAA8E257BB625B2387219E605DDE37D, 2AAA32AFC3576DBBC422557F871B934F544642EB9B85E89971F0146E2021C187 ] hwdatacard      C:\Windows\system32\DRIVERS\ewusbmdm.sys
10:49:17.0063 0x1194  hwdatacard - ok
10:49:17.0063 0x1194  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
10:49:17.0110 0x1194  hwpolicy - ok
10:49:17.0110 0x1194  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
10:49:17.0157 0x1194  i8042prt - ok
10:49:17.0219 0x1194  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
10:49:17.0297 0x1194  iaStorV - ok
10:49:17.0375 0x1194  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
10:49:17.0422 0x1194  idsvc - ok
10:49:17.0453 0x1194  IEEtwCollectorService - ok
10:49:18.0124 0x1194  [ C458A0B66D11CBABD113EAC828276A8C, FF31B49BAF36358A16FA5478036C6431DE877BA30D6F6DF85FD0A2FA6E6CB0E1 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
10:49:18.0639 0x1194  igfx - ok
10:49:18.0670 0x1194  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
10:49:18.0701 0x1194  iirsp - ok
10:49:18.0763 0x1194  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
10:49:18.0888 0x1194  IKEEXT - ok
10:49:18.0951 0x1194  [ DD587A55390ED2295BCE6D36AD567DA9, AEB7DCB8EF89BEE8D9649A05FC482B1E4E3F44243D57A2577C862EB69166C48E ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys
10:49:18.0997 0x1194  Impcd - ok
10:49:19.0185 0x1194  [ AE594CC17C33AC146739494615E14851, 0E4FA415C1B4065083D761A458450FAE9C6A6EE6E49B3A598B43871D6F01B3EC ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
10:49:19.0231 0x1194  IntcDAud - ok
10:49:19.0263 0x1194  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
10:49:19.0278 0x1194  intelide - ok
10:49:19.0309 0x1194  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
10:49:19.0372 0x1194  intelppm - ok
10:49:19.0387 0x1194  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
10:49:19.0450 0x1194  IPBusEnum - ok
10:49:19.0450 0x1194  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:49:19.0575 0x1194  IpFilterDriver - ok
10:49:19.0684 0x1194  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
10:49:19.0746 0x1194  iphlpsvc - ok
10:49:19.0762 0x1194  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
10:49:19.0809 0x1194  IPMIDRV - ok
10:49:19.0824 0x1194  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
10:49:19.0902 0x1194  IPNAT - ok
10:49:19.0918 0x1194  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
10:49:19.0965 0x1194  IRENUM - ok
10:49:19.0980 0x1194  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
10:49:20.0011 0x1194  isapnp - ok
10:49:20.0058 0x1194  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
10:49:20.0105 0x1194  iScsiPrt - ok
10:49:20.0105 0x1194  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
10:49:20.0136 0x1194  kbdclass - ok
10:49:20.0152 0x1194  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
10:49:20.0214 0x1194  kbdhid - ok
10:49:20.0245 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] KeyIso          C:\Windows\system32\lsass.exe
10:49:20.0277 0x1194  KeyIso - ok
10:49:20.0308 0x1194  [ B6C2FA7F5E5BC1A488A57C6344D29D64, 857245D664CF9ED8121E2087D73F85DA3FED721484DDC6B51AF6A344EC29A27F ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
10:49:20.0386 0x1194  KSecDD - ok
10:49:20.0401 0x1194  [ FB4397DDCC732DB6A7B33B747C7EB708, AD8B9500AAE12C1507B982B74B86731BE75AFAC7F64538332A380AC43EDEC271 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
10:49:20.0464 0x1194  KSecPkg - ok
10:49:20.0495 0x1194  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
10:49:20.0542 0x1194  ksthunk - ok
10:49:20.0573 0x1194  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
10:49:20.0651 0x1194  KtmRm - ok
10:49:20.0682 0x1194  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
10:49:20.0745 0x1194  LanmanServer - ok
10:49:20.0760 0x1194  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:49:20.0807 0x1194  LanmanWorkstation - ok
10:49:20.0838 0x1194  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
10:49:20.0916 0x1194  lltdio - ok
10:49:20.0947 0x1194  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
10:49:20.0994 0x1194  lltdsvc - ok
10:49:21.0010 0x1194  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
10:49:21.0057 0x1194  lmhosts - ok
10:49:21.0244 0x1194  [ D60FD98FC8E01D14565C8EBC68E8793A, 1D18A5A1AE1C4E58ED177D2067F4F83FE3C2F5503262AB1624556BAC313A5641 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
10:49:21.0275 0x1194  LMS - ok
10:49:21.0322 0x1194  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
10:49:21.0369 0x1194  LSI_FC - ok
10:49:21.0369 0x1194  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
10:49:21.0400 0x1194  LSI_SAS - ok
10:49:21.0415 0x1194  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
10:49:21.0431 0x1194  LSI_SAS2 - ok
10:49:21.0447 0x1194  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
10:49:21.0478 0x1194  LSI_SCSI - ok
10:49:21.0478 0x1194  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
10:49:21.0587 0x1194  luafv - ok
10:49:21.0618 0x1194  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
10:49:21.0649 0x1194  Mcx2Svc - ok
10:49:21.0649 0x1194  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
10:49:21.0681 0x1194  megasas - ok
10:49:21.0696 0x1194  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
10:49:21.0727 0x1194  MegaSR - ok
10:49:21.0868 0x1194  [ 033B947AF4A997820E86FCB070B1F450, 2F54F9D1E8374187B2F206E7CF22A907C735C71F38445A94BDC84E83081D3A88 ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
10:49:21.0883 0x1194  Microsoft Office Groove Audit Service - ok
10:49:21.0915 0x1194  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
10:49:21.0961 0x1194  MMCSS - ok
10:49:21.0977 0x1194  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
10:49:22.0055 0x1194  Modem - ok
10:49:22.0071 0x1194  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
10:49:22.0117 0x1194  monitor - ok
10:49:22.0117 0x1194  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
10:49:22.0164 0x1194  mouclass - ok
10:49:22.0164 0x1194  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
10:49:22.0195 0x1194  mouhid - ok
10:49:22.0227 0x1194  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
10:49:22.0289 0x1194  mountmgr - ok
10:49:22.0336 0x1194  [ F5CEB5CE82DC9CC94873C487DF2BA73C, 21F3335A9F01084F6F95F16D61D3E3ED80CE3D887ED15DD025D4E296F239B16B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
10:49:22.0351 0x1194  MozillaMaintenance - ok
10:49:22.0367 0x1194  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
10:49:22.0398 0x1194  mpio - ok
10:49:22.0398 0x1194  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
10:49:22.0476 0x1194  mpsdrv - ok
10:49:22.0539 0x1194  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
10:49:22.0648 0x1194  MpsSvc - ok
10:49:22.0695 0x1194  [ D7ADC2B83CA0B0381F75A98351F72CEE, 05476B7CA0486DF770AE492B5A90C85E3D3E7485152EB2FA30A19EC9BE44ED81 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
10:49:22.0773 0x1194  MRxDAV - ok
10:49:22.0819 0x1194  [ ACEC16415275E1AD6F7983EF472810E3, E5017E157954F6C21AA66233FF2C1A6B1FF3E4685F26648A8A21F2B9718DD97C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
10:49:22.0866 0x1194  mrxsmb - ok
10:49:22.0929 0x1194  [ 0F276F2F2018296FABC7BD2BCCAAB40B, 378A36F7282EE9FFEC8A1D5783ECD0A428E0215B1774AAA166C5AA09B3C636F7 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:49:23.0038 0x1194  mrxsmb10 - ok
10:49:23.0100 0x1194  [ 1D4B7972375052F5B7877A6FD9BE33A0, B3FD235F6FE975F1869436ED1215913F0E8EB1123BB252FD221C35AB1121C3F5 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:49:23.0163 0x1194  mrxsmb20 - ok
10:49:23.0194 0x1194  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
10:49:23.0209 0x1194  msahci - ok
10:49:23.0241 0x1194  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
10:49:23.0319 0x1194  msdsm - ok
10:49:23.0350 0x1194  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
10:49:23.0381 0x1194  MSDTC - ok
10:49:23.0381 0x1194  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
10:49:23.0475 0x1194  Msfs - ok
10:49:23.0490 0x1194  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
10:49:23.0568 0x1194  mshidkmdf - ok
10:49:23.0584 0x1194  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
10:49:23.0599 0x1194  msisadrv - ok
10:49:23.0677 0x1194  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
10:49:23.0771 0x1194  MSiSCSI - ok
10:49:23.0771 0x1194  msiserver - ok
10:49:24.0286 0x1194  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
10:49:24.0348 0x1194  MSKSSRV - ok
10:49:24.0348 0x1194  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
10:49:24.0426 0x1194  MSPCLOCK - ok
10:49:24.0426 0x1194  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
10:49:24.0504 0x1194  MSPQM - ok
10:49:24.0535 0x1194  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
10:49:24.0629 0x1194  MsRPC - ok
10:49:24.0645 0x1194  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
10:49:24.0676 0x1194  mssmbios - ok
10:49:24.0691 0x1194  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
10:49:24.0769 0x1194  MSTEE - ok
10:49:24.0785 0x1194  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
10:49:24.0832 0x1194  MTConfig - ok
10:49:24.0832 0x1194  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
10:49:24.0863 0x1194  Mup - ok
10:49:24.0925 0x1194  [ 85B42715B134BF8ABE035078F81E0A8C, B522D9BA55102FFD9138A6B6B85C9FACB4DD7D7565F4B276E44536B61962D78D ] MyWiFiDHCPDNS   C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
10:49:24.0941 0x1194  MyWiFiDHCPDNS - ok
10:49:25.0003 0x1194  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
10:49:25.0113 0x1194  napagent - ok
10:49:25.0159 0x1194  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
10:49:25.0253 0x1194  NativeWifiP - ok
10:49:25.0362 0x1194  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys
10:49:25.0471 0x1194  NDIS - ok
10:49:25.0503 0x1194  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
10:49:25.0596 0x1194  NdisCap - ok
10:49:25.0612 0x1194  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
10:49:25.0674 0x1194  NdisTapi - ok
10:49:25.0690 0x1194  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
10:49:25.0768 0x1194  Ndisuio - ok
10:49:25.0768 0x1194  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
10:49:25.0830 0x1194  NdisWan - ok
10:49:25.0846 0x1194  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
10:49:25.0924 0x1194  NDProxy - ok
10:49:25.0924 0x1194  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
10:49:25.0986 0x1194  NetBIOS - ok
10:49:26.0002 0x1194  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
10:49:26.0080 0x1194  NetBT - ok
10:49:26.0142 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] Netlogon        C:\Windows\system32\lsass.exe
10:49:26.0173 0x1194  Netlogon - ok
10:49:26.0236 0x1194  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
10:49:26.0298 0x1194  Netman - ok
10:49:26.0345 0x1194  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
10:49:26.0376 0x1194  NetMsmqActivator - ok
10:49:26.0407 0x1194  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
10:49:26.0423 0x1194  NetPipeActivator - ok
10:49:26.0485 0x1194  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
10:49:26.0563 0x1194  netprofm - ok
10:49:26.0579 0x1194  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
10:49:26.0595 0x1194  NetTcpActivator - ok
10:49:26.0610 0x1194  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
10:49:26.0626 0x1194  NetTcpPortSharing - ok
10:49:27.0031 0x1194  [ 7D3646F4E3F2C27A1415F1685391F024, E5426EC1347DBA302C786B72B510C61BA694D7A1FE0023CA61A587672F8F3548 ] NETwNs64        C:\Windows\system32\DRIVERS\NETwsw00.sys
10:49:27.0593 0x1194  NETwNs64 - ok
10:49:27.0624 0x1194  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
10:49:27.0671 0x1194  nfrd960 - ok
10:49:27.0733 0x1194  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
10:49:27.0796 0x1194  NlaSvc - ok
10:49:27.0811 0x1194  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
10:49:27.0889 0x1194  Npfs - ok
10:49:27.0921 0x1194  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
10:49:27.0967 0x1194  nsi - ok
10:49:27.0967 0x1194  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
10:49:28.0092 0x1194  nsiproxy - ok
10:49:28.0201 0x1194  [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
10:49:28.0389 0x1194  Ntfs - ok
10:49:28.0420 0x1194  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
10:49:28.0529 0x1194  Null - ok
10:49:28.0560 0x1194  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
10:49:28.0591 0x1194  nvraid - ok
10:49:28.0623 0x1194  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
10:49:28.0654 0x1194  nvstor - ok
10:49:28.0685 0x1194  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
10:49:28.0716 0x1194  nv_agp - ok
10:49:28.0872 0x1194  [ E54AA592A65F317390EEE386A8821692, 7997F8C07802F6C49F06620B35C4C382ADD5419EA8BE02CD7AF0F2EF42A93E53 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:49:28.0903 0x1194  odserv - ok
10:49:28.0919 0x1194  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
10:49:28.0966 0x1194  ohci1394 - ok
10:49:29.0013 0x1194  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:49:29.0028 0x1194  ose - ok
10:49:29.0059 0x1194  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
10:49:29.0106 0x1194  p2pimsvc - ok
10:49:29.0137 0x1194  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
10:49:29.0169 0x1194  p2psvc - ok
10:49:29.0184 0x1194  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
10:49:29.0231 0x1194  Parport - ok
10:49:29.0262 0x1194  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
10:49:29.0340 0x1194  partmgr - ok
10:49:29.0418 0x1194  [ F76829EDCD7F5C3C8B500DCB6DC99B25, C39150796B4234D523C9F8114871781E194BD64F7E65C27E46D4035BC7964A08 ] PbaDrvSvc_x64   C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe
10:49:29.0418 0x1194  PbaDrvSvc_x64 - detected UnsignedFile.Multi.Generic ( 1 )
10:49:31.0821 0x1194  Detect skipped due to KSN trusted
10:49:31.0821 0x1194  PbaDrvSvc_x64 - ok
10:49:31.0852 0x1194  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
10:49:31.0883 0x1194  PcaSvc - ok
10:49:31.0899 0x1194  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
10:49:31.0930 0x1194  pci - ok
10:49:31.0977 0x1194  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
10:49:31.0992 0x1194  pciide - ok
10:49:32.0023 0x1194  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
10:49:32.0086 0x1194  pcmcia - ok
10:49:32.0086 0x1194  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
10:49:32.0117 0x1194  pcw - ok
10:49:32.0179 0x1194  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
10:49:32.0273 0x1194  PEAUTH - ok
10:49:32.0491 0x1194  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
10:49:32.0523 0x1194  PerfHost - ok
10:49:32.0585 0x1194  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
10:49:32.0694 0x1194  pla - ok
10:49:32.0741 0x1194  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
10:49:32.0803 0x1194  PlugPlay - ok
10:49:32.0835 0x1194  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
10:49:32.0850 0x1194  PNRPAutoReg - ok
10:49:32.0897 0x1194  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
10:49:32.0913 0x1194  PNRPsvc - ok
10:49:32.0975 0x1194  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
10:49:33.0053 0x1194  PolicyAgent - ok
10:49:33.0115 0x1194  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
10:49:33.0178 0x1194  Power - ok
10:49:33.0225 0x1194  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
10:49:33.0287 0x1194  PptpMiniport - ok
10:49:33.0318 0x1194  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
10:49:33.0365 0x1194  Processor - ok
10:49:33.0443 0x1194  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
10:49:33.0459 0x1194  ProfSvc - ok
10:49:33.0490 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] ProtectedStorage C:\Windows\system32\lsass.exe
10:49:33.0521 0x1194  ProtectedStorage - ok
10:49:33.0552 0x1194  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
10:49:33.0630 0x1194  Psched - ok
10:49:33.0724 0x1194  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
10:49:33.0817 0x1194  ql2300 - ok
10:49:33.0849 0x1194  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
10:49:33.0880 0x1194  ql40xx - ok
10:49:33.0911 0x1194  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
10:49:33.0942 0x1194  QWAVE - ok
10:49:33.0958 0x1194  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
10:49:33.0989 0x1194  QWAVEdrv - ok
10:49:33.0989 0x1194  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
10:49:34.0067 0x1194  RasAcd - ok
10:49:34.0098 0x1194  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
10:49:34.0176 0x1194  RasAgileVpn - ok
10:49:34.0176 0x1194  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
10:49:34.0223 0x1660  Object required for P2P: [ F5CEB5CE82DC9CC94873C487DF2BA73C ] MozillaMaintenance
10:49:34.0239 0x1194  RasAuto - ok
10:49:34.0254 0x1194  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
10:49:34.0317 0x1194  Rasl2tp - ok
10:49:34.0332 0x1194  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
10:49:34.0395 0x1194  RasMan - ok
10:49:34.0410 0x1194  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
10:49:34.0504 0x1194  RasPppoe - ok
10:49:34.0519 0x1194  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
10:49:34.0629 0x1194  RasSstp - ok
10:49:34.0644 0x1194  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
10:49:34.0722 0x1194  rdbss - ok
10:49:34.0738 0x1194  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
10:49:34.0800 0x1194  rdpbus - ok
10:49:34.0816 0x1194  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
10:49:34.0894 0x1194  RDPCDD - ok
10:49:34.0894 0x1194  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
10:49:34.0956 0x1194  RDPENCDD - ok
10:49:34.0956 0x1194  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
10:49:35.0034 0x1194  RDPREFMP - ok
10:49:35.0065 0x1194  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
10:49:35.0159 0x1194  RDPWD - ok
10:49:35.0206 0x1194  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
10:49:35.0237 0x1194  rdyboost - ok
10:49:35.0331 0x1194  [ EC54B7C84757100169755977DC306AC7, 79A65DE41CA7B8EB2F65A9174AFA9B810EC5755F91C37ABD8F9F490360632C21 ] RealPlayerUpdateSvc C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
10:49:35.0346 0x1194  RealPlayerUpdateSvc - ok
10:49:35.0627 0x1194  [ 0E7AFE4B571C761FBB49DAD069DF3377, 20A2A0BFA2A00AFE35FA935A9F40B5AED838917137DC4E9143D45B90707A687F ] RealTimes Desktop Service C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
10:49:35.0674 0x1194  RealTimes Desktop Service - ok
10:49:35.0799 0x1194  [ 86177A203F65E08FB91D53A6F2475363, 1316208F182ECCB2DCC848E8CE707456ED6F6CD21001386F160B61AF455EFAAA ] RegSrvc         C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
10:49:35.0814 0x1194  RegSrvc - ok
10:49:35.0845 0x1194  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
10:49:35.0908 0x1194  RemoteAccess - ok
10:49:35.0970 0x1194  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
10:49:36.0079 0x1194  RemoteRegistry - ok
10:49:36.0126 0x1194  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
10:49:36.0157 0x1194  RFCOMM - ok
10:49:36.0235 0x1194  [ A6DA2B0C8F5BB3F9F5423CFF8D6A02D9, 1841364D1ADC7DFD107AE3533BD8E37AD1E176EE5822D1B354A9E8E865029996 ] risdpcie        C:\Windows\system32\DRIVERS\risdpe64.sys
10:49:36.0313 0x1194  risdpcie - ok
10:49:36.0329 0x1194  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
10:49:36.0391 0x1194  RpcEptMapper - ok
10:49:36.0407 0x1194  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
10:49:36.0438 0x1194  RpcLocator - ok
10:49:36.0485 0x1194  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs           C:\Windows\system32\rpcss.dll
10:49:36.0532 0x1194  RpcSs - ok
10:49:36.0594 0x1194  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
10:49:36.0688 0x1194  rspndr - ok
10:49:36.0703 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] SamSs           C:\Windows\system32\lsass.exe
10:49:36.0719 0x1194  SamSs - ok
10:49:36.0719 0x1194  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
10:49:36.0750 0x1660  Object send P2P result: true
10:49:36.0766 0x1194  sbp2port - ok
10:49:36.0828 0x1194  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
10:49:36.0875 0x1194  SCardSvr - ok
10:49:36.0891 0x1194  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
10:49:36.0953 0x1194  scfilter - ok
10:49:37.0031 0x1194  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
10:49:37.0156 0x1194  Schedule - ok
10:49:37.0203 0x1194  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
10:49:37.0265 0x1194  SCPolicySvc - ok
10:49:37.0312 0x1194  [ 111E0EBC0AD79CB0FA014B907B231CF0, B7D43D156C2524938503CF8E99C4D1F7A5C55E16C0368F57F4CD23C6D833B38F ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
10:49:37.0359 0x1194  sdbus - ok
10:49:37.0421 0x1194  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
10:49:37.0468 0x1194  SDRSVC - ok
10:49:37.0468 0x1194  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
10:49:37.0515 0x1194  secdrv - ok
10:49:37.0561 0x1194  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\Windows\system32\seclogon.dll
10:49:37.0593 0x1194  seclogon - ok
10:49:37.0624 0x1194  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
10:49:37.0671 0x1194  SENS - ok
10:49:37.0717 0x1194  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
10:49:37.0749 0x1194  SensrSvc - ok
10:49:37.0764 0x1194  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
10:49:37.0827 0x1194  Serenum - ok
10:49:37.0873 0x1194  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
10:49:37.0905 0x1194  Serial - ok
10:49:37.0905 0x1194  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
10:49:37.0983 0x1194  sermouse - ok
10:49:38.0014 0x1194  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
10:49:38.0107 0x1194  SessionEnv - ok
10:49:38.0107 0x1194  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
10:49:38.0170 0x1194  sffdisk - ok
10:49:38.0185 0x1194  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
10:49:38.0217 0x1194  sffp_mmc - ok
10:49:38.0232 0x1194  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
10:49:38.0263 0x1194  sffp_sd - ok
10:49:38.0263 0x1194  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
10:49:38.0295 0x1194  sfloppy - ok
10:49:38.0357 0x1194  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
10:49:38.0451 0x1194  SharedAccess - ok
10:49:38.0497 0x1194  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:49:38.0560 0x1194  ShellHWDetection - ok
10:49:38.0560 0x1194  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
10:49:38.0622 0x1194  SiSRaid2 - ok
10:49:38.0622 0x1194  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
10:49:38.0653 0x1194  SiSRaid4 - ok
10:49:38.0716 0x1194  [ 9A66A87BBC0EC4463042959B7C0D4AC1, 2E61DC50AD4A4D4782F3271BAD010137DA9A6AFC46C7568C709F68C7621DCD40 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
10:49:38.0747 0x1194  SkypeUpdate - ok
10:49:38.0747 0x1194  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
10:49:38.0841 0x1194  Smb - ok
10:49:38.0997 0x1194  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
10:49:39.0012 0x1194  SNMPTRAP - ok
10:49:39.0028 0x1194  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
10:49:39.0090 0x1194  spldr - ok
10:49:39.0153 0x1194  [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler         C:\Windows\System32\spoolsv.exe
10:49:39.0215 0x1194  Spooler - ok
10:49:39.0402 0x1194  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
10:49:39.0589 0x1194  sppsvc - ok
10:49:39.0605 0x1194  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
10:49:39.0667 0x1194  sppuinotify - ok
10:49:39.0699 0x1194  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
10:49:39.0792 0x1194  srv - ok
10:49:39.0823 0x1194  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
10:49:39.0901 0x1194  srv2 - ok
10:49:39.0933 0x1194  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
10:49:39.0995 0x1194  srvnet - ok
10:49:40.0042 0x1194  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
10:49:40.0104 0x1194  SSDPSRV - ok
10:49:40.0104 0x1194  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
10:49:40.0167 0x1194  SstpSvc - ok
10:49:40.0229 0x1194  [ 37680AECA1BF2D430719A297F68ECD49, 64E6A2C077316CE4807F2F480324F4011003686F698CCB0AA93C659DAAE1FAB5 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
10:49:40.0245 0x1194  ssudmdm - ok
10:49:40.0338 0x1194  [ 7DB9E612A2742ACEAB080B882E83141C, FFD1FA36E732F55223F3F4B5F845331DBB3073B023C2C5BF51A0E7680DEE7FA7 ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
10:49:40.0385 0x1194  ss_conn_service - ok
10:49:40.0416 0x1194  [ E4EA2412FB1B8AEE33667A9CC6D456A4, E553D07BBD98CB026033D7D10D859795682D1BFCB9D33D494177B2E747EA5064 ] stdcfltn        C:\Windows\system32\DRIVERS\stdcfltn.sys
10:49:40.0463 0x1194  stdcfltn - ok
10:49:40.0494 0x1194  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
10:49:40.0541 0x1194  stexstor - ok
10:49:40.0603 0x1194  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
10:49:40.0666 0x1194  stisvc - ok
10:49:40.0666 0x1194  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
10:49:40.0713 0x1194  swenum - ok
10:49:40.0744 0x1194  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
10:49:40.0822 0x1194  swprv - ok
10:49:40.0900 0x1194  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
10:49:40.0993 0x1194  SysMain - ok
10:49:41.0025 0x1194  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
10:49:41.0056 0x1194  TabletInputService - ok
10:49:41.0071 0x1194  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
10:49:41.0134 0x1194  TapiSrv - ok
10:49:41.0227 0x1194  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
10:49:41.0368 0x1194  Tcpip - ok
10:49:41.0461 0x1194  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
10:49:41.0586 0x1194  TCPIP6 - ok
10:49:41.0633 0x1194  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
10:49:41.0758 0x1194  tcpipreg - ok
10:49:41.0898 0x1194  [ 40C2F1FAEBF7D5E15A5F264B06D8CC70, AE4816932918E37AD33DBFFE51853B74FE9D1339AEF1B0BCE1C84EE07ADAD62F ] tcsd_win32.exe  C:\Program Files (x86)\Security Innovation\SI TSS\bin\tcsd_win32.exe
10:49:41.0992 0x1194  tcsd_win32.exe - detected UnsignedFile.Multi.Generic ( 1 )
10:49:44.0488 0x1194  tcsd_win32.exe ( UnsignedFile.Multi.Generic ) - warning
10:49:47.0015 0x1194  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
10:49:47.0046 0x1194  TDPIPE - ok
10:49:47.0077 0x1194  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
10:49:47.0124 0x1194  TDTCP - ok
10:49:47.0155 0x1194  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
10:49:47.0233 0x1194  tdx - ok
10:49:47.0249 0x1194  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
10:49:47.0280 0x1194  TermDD - ok
10:49:47.0327 0x1194  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
10:49:47.0389 0x1194  TermService - ok
10:49:47.0405 0x1194  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
10:49:47.0452 0x1194  Themes - ok
10:49:47.0483 0x1194  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
10:49:47.0545 0x1194  THREADORDER - ok
10:49:47.0577 0x1194  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
10:49:47.0655 0x1194  TrkWks - ok
10:49:47.0717 0x1194  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:49:47.0764 0x1194  TrustedInstaller - ok
10:49:47.0811 0x1194  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
10:49:47.0842 0x1194  tssecsrv - ok
10:49:47.0857 0x1194  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
10:49:47.0889 0x1194  TsUsbFlt - ok
10:49:47.0904 0x1194  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
10:49:47.0982 0x1194  TsUsbGD - ok
10:49:48.0013 0x1194  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
10:49:48.0029 0x0460  Object required for P2P: [ 0E7AFE4B571C761FBB49DAD069DF3377 ] RealTimes Desktop Service
10:49:48.0091 0x1194  tunnel - ok
10:49:48.0091 0x1194  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
10:49:48.0123 0x1194  uagp35 - ok
10:49:48.0154 0x1194  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
10:49:48.0232 0x1194  udfs - ok
10:49:48.0263 0x1194  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
10:49:48.0279 0x1194  UI0Detect - ok
10:49:48.0279 0x1194  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
10:49:48.0325 0x1194  uliagpkx - ok
10:49:48.0341 0x1194  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
10:49:48.0419 0x1194  umbus - ok
10:49:48.0419 0x1194  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
10:49:48.0450 0x1194  UmPass - ok
10:49:48.0622 0x1194  [ C7F80A34F5EFBFEF897A84400E4995A6, 967941FCC538EA7F3FA6955224B05A16543042E3394ACD201FEEB983B1BECE36 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
10:49:48.0731 0x1194  UNS - ok
10:49:48.0778 0x1194  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
10:49:48.0840 0x1194  upnphost - ok
10:49:48.0918 0x1194  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
10:49:48.0949 0x1194  usbccgp - ok
10:49:48.0996 0x1194  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
10:49:49.0027 0x1194  usbcir - ok
10:49:49.0043 0x1194  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
10:49:49.0090 0x1194  usbehci - ok
10:49:49.0137 0x1194  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
10:49:49.0168 0x1194  usbhub - ok
10:49:49.0183 0x1194  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
10:49:49.0230 0x1194  usbohci - ok
10:49:49.0246 0x1194  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
10:49:49.0293 0x1194  usbprint - ok
10:49:49.0324 0x1194  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:49:49.0371 0x1194  USBSTOR - ok
10:49:49.0386 0x1194  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
10:49:49.0433 0x1194  usbuhci - ok
10:49:49.0464 0x1194  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
10:49:49.0511 0x1194  usbvideo - ok
10:49:49.0542 0x1194  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
10:49:49.0589 0x1194  UxSms - ok
10:49:49.0605 0x1194  [ 626BE7CD27F44185AA4DCD3603830312, EBE197BAA8F0ACEA219B402A1D03534A448048F1010A50680D728493A9B0641E ] VaultSvc        C:\Windows\system32\lsass.exe
10:49:49.0620 0x1194  VaultSvc - ok
10:49:49.0636 0x1194  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
10:49:49.0651 0x1194  vdrvroot - ok
10:49:49.0714 0x1194  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
10:49:49.0776 0x1194  vds - ok
10:49:49.0776 0x1194  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
10:49:49.0807 0x1194  vga - ok
10:49:49.0807 0x1194  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
10:49:49.0901 0x1194  VgaSave - ok
10:49:49.0901 0x1194  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
10:49:49.0948 0x1194  vhdmp - ok
10:49:49.0995 0x1194  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
10:49:50.0010 0x1194  viaide - ok
10:49:50.0057 0x1194  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
10:49:50.0088 0x1194  volmgr - ok
10:49:50.0104 0x1194  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
10:49:50.0151 0x1194  volmgrx - ok
10:49:50.0182 0x1194  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
10:49:50.0229 0x1194  volsnap - ok
10:49:50.0229 0x1194  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
10:49:50.0260 0x1194  vsmraid - ok
10:49:50.0322 0x1194  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
10:49:50.0431 0x1194  VSS - ok
10:49:50.0447 0x1194  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
10:49:50.0494 0x1194  vwifibus - ok
10:49:50.0541 0x1194  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
10:49:50.0556 0x0460  Object send P2P result: true
10:49:50.0587 0x1194  vwififlt - ok
10:49:50.0587 0x1194  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
10:49:50.0619 0x1194  vwifimp - ok
10:49:50.0634 0x1194  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
10:49:50.0697 0x1194  W32Time - ok
10:49:50.0712 0x1194  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
10:49:50.0759 0x1194  WacomPen - ok
10:49:50.0790 0x1194  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
10:49:50.0853 0x1194  WANARP - ok
10:49:50.0853 0x1194  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
10:49:50.0915 0x1194  Wanarpv6 - ok
10:49:51.0024 0x1194  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
10:49:51.0102 0x1194  WatAdminSvc - ok
10:49:51.0196 0x1194  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
10:49:51.0289 0x1194  wbengine - ok
10:49:51.0321 0x1194  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
10:49:51.0352 0x1194  WbioSrvc - ok
10:49:51.0367 0x1194  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
10:49:51.0430 0x1194  wcncsvc - ok
10:49:51.0477 0x1194  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:49:51.0492 0x1194  WcsPlugInService - ok
10:49:51.0492 0x1194  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
10:49:51.0539 0x1194  Wd - ok
10:49:51.0679 0x1194  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
10:49:51.0835 0x1194  Wdf01000 - ok
10:49:51.0898 0x1194  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
10:49:51.0913 0x1194  WdiServiceHost - ok
10:49:51.0913 0x1194  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
10:49:51.0945 0x1194  WdiSystemHost - ok
10:49:52.0007 0x1194  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll
10:49:52.0023 0x1194  WebClient - ok
10:49:52.0069 0x1194  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
10:49:52.0132 0x1194  Wecsvc - ok
10:49:52.0194 0x1194  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
10:49:52.0257 0x1194  wercplsupport - ok
10:49:52.0288 0x1194  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
10:49:52.0335 0x1194  WerSvc - ok
10:49:52.0366 0x1194  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
10:49:52.0413 0x1194  WfpLwf - ok
10:49:52.0428 0x1194  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
10:49:52.0444 0x1194  WIMMount - ok
10:49:52.0491 0x1194  WinDefend - ok
10:49:52.0522 0x1194  WinHttpAutoProxySvc - ok
10:49:52.0647 0x1194  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
10:49:52.0693 0x1194  Winmgmt - ok
10:49:52.0787 0x1194  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
10:49:52.0896 0x1194  WinRM - ok
10:49:52.0927 0x1194  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
10:49:52.0959 0x1194  WinUsb - ok
10:49:53.0021 0x1194  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
10:49:53.0099 0x1194  Wlansvc - ok
10:49:53.0115 0x1194  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
10:49:53.0146 0x1194  WmiAcpi - ok
10:49:53.0177 0x1194  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
10:49:53.0208 0x1194  wmiApSrv - ok
10:49:53.0286 0x1194  WMPNetworkSvc - ok
10:49:53.0286 0x1194  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
10:49:53.0333 0x1194  WPCSvc - ok
10:49:53.0333 0x1194  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
10:49:53.0364 0x1194  WPDBusEnum - ok
10:49:53.0364 0x1194  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
10:49:53.0442 0x1194  ws2ifsl - ok
10:49:53.0473 0x1194  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
10:49:53.0505 0x1194  wscsvc - ok
10:49:53.0520 0x1194  WSearch - ok
10:49:53.0598 0x1194  [ D7E88349BE0F01E4D8D776ADB1F325BF, 24555BEDD3BAFA18C8450354899286987B288CC2E9D2F2FEF1EE0D95A1771F50 ] WTGService      C:\Program Files (x86)\WTGService.exe
10:49:53.0629 0x1194  WTGService - ok
10:49:53.0739 0x1194  [ 86F11B85102AFA6A1A6101DCE2F09386, 68A0F0E628C8F33FDAC114876DA8ED14776DD74E80AC5A6A52257E19DE011091 ] wuauserv        C:\Windows\system32\wuaueng.dll
10:49:53.0910 0x1194  wuauserv - ok
10:49:53.0957 0x1194  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
10:49:54.0019 0x1194  WudfPf - ok
10:49:54.0019 0x1194  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
10:49:54.0051 0x1194  WUDFRd - ok
10:49:54.0097 0x1194  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
10:49:54.0113 0x1194  wudfsvc - ok
10:49:54.0160 0x1194  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
10:49:54.0191 0x1194  WwanSvc - ok
10:49:54.0409 0x1194  [ 3C61B6CCD838534E98552530A491EE04, 16F24EDF109404BB19BC2DAAF747CD7FCA0644378E66869C1085E1E083DC4D78 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
10:49:54.0550 0x1194  ZeroConfigService - ok
10:49:54.0581 0x1194  ================ Scan global ===============================
10:49:54.0612 0x1194  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
10:49:54.0659 0x1194  [ 841BF993597DCD498247684B5D3AE845, B80FDDE2F36F7DC9BCE253FFE0148C918DC3DD4357F37761B364DE7B887239EA ] C:\Windows\system32\winsrv.dll
10:49:54.0675 0x1194  [ 841BF993597DCD498247684B5D3AE845, B80FDDE2F36F7DC9BCE253FFE0148C918DC3DD4357F37761B364DE7B887239EA ] C:\Windows\system32\winsrv.dll
10:49:54.0737 0x1194  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
10:49:54.0784 0x1194  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
10:49:54.0799 0x1194  [ Global ] - ok
10:49:54.0799 0x1194  ================ Scan MBR ==================================
10:49:54.0815 0x1194  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:49:55.0283 0x1194  \Device\Harddisk0\DR0 - ok
10:49:55.0299 0x1194  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
10:49:55.0767 0x1194  \Device\Harddisk1\DR1 - ok
10:49:55.0767 0x1194  ================ Scan VBR ==================================
10:49:55.0767 0x1194  [ 05C51CC8F463DD4F21A9738DF30F01A4 ] \Device\Harddisk0\DR0\Partition1
10:49:55.0767 0x1194  \Device\Harddisk0\DR0\Partition1 - ok
10:49:55.0767 0x1194  [ C5A5D43D21E10202C9B402C0E9CEDB8E ] \Device\Harddisk0\DR0\Partition2
10:49:55.0782 0x1194  \Device\Harddisk0\DR0\Partition2 - ok
10:49:55.0782 0x1194  [ 806161EEE911A517E81424A415AF9F57 ] \Device\Harddisk1\DR1\Partition1
10:49:55.0782 0x1194  \Device\Harddisk1\DR1\Partition1 - ok
10:49:55.0782 0x1194  ================ Scan generic autorun ======================
10:49:55.0969 0x1194  [ 866DDA3561D0335AC42E4CB0350EBADA, A62B0E0AF4C3748AC902BDB35524BE416323D114955E45C68ABB052D17D69E13 ] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
10:49:56.0172 0x1194  IntelPROSet - ok
10:49:56.0235 0x1194  [ 0EBD14E7F5A374254754E7DB46A56CD4, FF91B8ABB8E3ACE9DFAE9B5227CFF4D406EEB9CBFCF7B92BA2BCAC3D8E9377E1 ] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
10:49:56.0266 0x1194  FreeFallProtection - ok
10:49:56.0297 0x1194  [ 30D95A8BC819CD080C32FC317A1DE788, 8E4ACD39A7A582DF4C6F422CD9FA225526A6A6AB5BF98BEB125061C7CD72A6F2 ] C:\Windows\system32\igfxtray.exe
10:49:56.0313 0x1194  IgfxTray - ok
10:49:56.0344 0x1194  [ 8F1E05D8E88518E165AEFFDDE8296AD1, E5F600BE5F891795E8E4FFA529C64B3448F4CE74DE9C6F0B8A9530E30FB2BC68 ] C:\Windows\system32\hkcmd.exe
10:49:56.0375 0x1194  HotKeysCmds - ok
10:49:56.0406 0x1194  [ 84F1444820B41B9633B625AFC0955A4B, D62D53C0EFAE90164D0AD8D5C5B52DF5C4EE8A2E35D7D910AB1D1505DF2D5852 ] C:\Windows\system32\igfxpers.exe
10:49:56.0422 0x1194  Persistence - ok
10:49:56.0578 0x1194  [ 35DCD380D4D579D8B8EA91D5D8AE444C, AC5B338FCD9358C2D519A7199B13794F33BFBE5BCE3AB5A6993A0D5A65A7EB1C ] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
10:49:56.0593 0x1194  GrooveMonitor - ok
10:49:56.0952 0x1194  [ 2F9094580BF3A7C19095AD9916B98941, 263161801F4F3F0552D213BF81B64F7D6D1167461BCA32808F236958F1E2B014 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
10:49:57.0280 0x1194  AvastUI.exe - ok
10:49:57.0373 0x1194  [ 35425EAE058E3E1E85E4575B2FF03E48, 5592D94F425C12A6572D8CCDE51B9376616983BB2EC2174D2B2F602CF1E8A213 ] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
10:49:57.0436 0x1194  KiesTrayAgent - ok
10:49:57.0529 0x1194  [ 4EAF6F8F0B3BE33A0E3877EB7FFD48D4, CD89A31004E3E5A3253554CABF70B89D4F2FCBC40161FFA9E633CD85261A2769 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
10:49:57.0623 0x1194  Adobe ARM - ok
10:49:57.0685 0x1194  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
10:49:57.0763 0x1194  Sidebar - ok
10:49:57.0795 0x1194  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
10:49:57.0826 0x1194  mctadmin - ok
10:49:57.0857 0x1194  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
10:49:57.0904 0x1194  Sidebar - ok
10:49:57.0919 0x1194  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
10:49:57.0935 0x1194  mctadmin - ok
10:49:58.0029 0x1194  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe
10:49:58.0091 0x1194  Sidebar - ok
10:49:58.0107 0x1194  Waiting for KSN requests completion. In queue: 94
10:49:59.0121 0x1194  Waiting for KSN requests completion. In queue: 94
10:50:00.0135 0x1194  Waiting for KSN requests completion. In queue: 94
10:50:00.0540 0x11a8  Object required for P2P: [ 4EAF6F8F0B3BE33A0E3877EB7FFD48D4 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
10:50:01.0149 0x1194  Waiting for KSN requests completion. In queue: 6
10:50:02.0163 0x1194  Waiting for KSN requests completion. In queue: 6
10:50:03.0083 0x11a8  Object send P2P result: true
10:50:03.0224 0x1194  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 11.1.2510.353 ), 0x41000 ( enabled : updated )
10:50:03.0286 0x1194  Win FW state via NFP2: enabled ( trusted )
10:50:05.0766 0x1194  ============================================================
10:50:05.0766 0x1194  Scan finished
10:50:05.0766 0x1194  ============================================================
10:50:05.0766 0x173c  Detected object count: 1
10:50:05.0766 0x173c  Actual detected object count: 1
10:51:27.0932 0x173c  tcsd_win32.exe ( UnsignedFile.Multi.Generic ) - skipped by user
10:51:27.0932 0x173c  tcsd_win32.exe ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Alt 28.04.2016, 09:58   #9
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 28.04.2016, 16:22   #10
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# end=init
# utc_time=2016-04-28 09:39:30
# local_time=2016-04-28 11:39:30 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29280
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# end=updated
# utc_time=2016-04-28 09:45:25
# local_time=2016-04-28 11:45:25 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# engine=29280
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-04-28 02:24:39
# local_time=2016-04-28 04:24:39 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=793 16777213 83 96 626238 6044490 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 20039 213483329 0 0
# scanned=2702714
# found=3
# cleaned=0
# scan_time=16753
sh=7DB115CF8B442DD28B045610FAAABA08A45E97FC ft=1 fh=d7ba6f1bc08b484c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\AppData\Local\Temp\DMR\dmr_72.exe"
sh=BF5DEB5FE04BB1340EF70022D9A48E84A65D6965 ft=1 fh=e79a135783b9a5cd vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\Downloads\RarZilla Free Unrar - CHIP-Installer.exe"
sh=9753CEAA775F97002FC11839D344CB757FE0545A ft=1 fh=2a56961f3f0fe068 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
         
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# end=init
# utc_time=2016-04-28 09:39:30
# local_time=2016-04-28 11:39:30 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29280
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# end=updated
# utc_time=2016-04-28 09:45:25
# local_time=2016-04-28 11:45:25 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=765af714c7e19944afd3c2be91e3822f
# engine=29280
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-04-28 02:24:39
# local_time=2016-04-28 04:24:39 (+0100, Mitteleuropäische Sommerzeit)
# country="United Kingdom"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=793 16777213 83 96 626238 6044490 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 20039 213483329 0 0
# scanned=2702714
# found=3
# cleaned=0
# scan_time=16753
sh=7DB115CF8B442DD28B045610FAAABA08A45E97FC ft=1 fh=d7ba6f1bc08b484c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\AppData\Local\Temp\DMR\dmr_72.exe"
sh=BF5DEB5FE04BB1340EF70022D9A48E84A65D6965 ft=1 fh=e79a135783b9a5cd vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\Downloads\RarZilla Free Unrar - CHIP-Installer.exe"
sh=9753CEAA775F97002FC11839D344CB757FE0545A ft=1 fh=2a56961f3f0fe068 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\wrecken\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
         

Alt 28.04.2016, 21:20   #11
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Schritt 1

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.



Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 29.04.2016, 14:18   #12
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Also wenn du nicht noch etwas auffäliges entdeckt hast in den diversen Logs würde ich sagen mein System ist sauber.Der Rechner läuft auch,allerdings meistens wirklich sehr langsam.Ich höre auch die Festplattengeräusche relativ laut.Aber ich denke jetzt liegts nur mehr an der Platte selber,wahrscheinlich einige Sektoren nicht mehr ganz astrein oder so.Werd mir überlegen vielleicht eine neue Platte reinzuhängen.
Danke jedenfalls für dein Hilfe

Alt 29.04.2016, 19:43   #13
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Gerne.
Der Start-Eintrag ist übrigens von einem installierten Programm welches Du nicht sehen kannst:

Code:
ATTFilter
SI TSS (Version: 2.1.41 - Security Innovation) Hidden
         
https://www.securityinnovation.com/products/tss

Wie hast Du denn Windows installiert?
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 05.05.2016, 19:14   #14
wrecken
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Sorry hab grad viel um die Ohren.Also Windows hab ich von einer Originalkopie von einem USB-Stick aus installiert.Alles läuft soweit,Updates,Firewall,Defender.Hab auch einen Hinweis von Microsoft,dass ich kostenlos auf Windows 10 upgraden könnte.Werd ich aber nicht machen.

Alt 06.05.2016, 22:31   #15
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Bedenklicher Eintrag im Startmenü - Standard

Bedenklicher Eintrag im Startmenü



Das Zeug von oben muss ja irgendwo herkommen. Das ist so aber nicht auf einer Installations-DVD...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Antwort

Themen zu Bedenklicher Eintrag im Startmenü
adobe, autorun, avast, bho, desktop, dll, error, excel, explorer, failed, flash player, format, home, install.exe, langsam, mozilla, programme, registry, rundll, scan, security, server, software, svchost.exe, usb, windows



Ähnliche Themen: Bedenklicher Eintrag im Startmenü


  1. Startmenü-Probleme mit Win8.1
    Log-Analyse und Auswertung - 20.11.2015 (29)
  2. Windows 10-Startmenü funktioniert nicht
    Log-Analyse und Auswertung - 31.10.2015 (8)
  3. Startmenü aktualiesiert - Virus?
    Plagegeister aller Art und deren Bekämpfung - 07.04.2015 (51)
  4. PUM.Hijack.Startmenü
    Log-Analyse und Auswertung - 31.10.2013 (9)
  5. Sandboxie - Browserstart über Windows Startmenü
    Antiviren-, Firewall- und andere Schutzprogramme - 27.10.2013 (2)
  6. tcbhn.exe Blabbers gefunden im Startmenü
    Log-Analyse und Auswertung - 08.12.2012 (8)
  7. Windows 7 keine Programme im Startmenü
    Plagegeister aller Art und deren Bekämpfung - 19.03.2012 (15)
  8. SecurityCenter, Desktop schwarz, Startmenü leer...
    Plagegeister aller Art und deren Bekämpfung - 19.01.2012 (3)
  9. Nach Virenbefall Startmenü Inhalte weg - Fix erfolgreich?
    Plagegeister aller Art und deren Bekämpfung - 15.12.2011 (1)
  10. Desktop schwarz, Startmenü leer, HDD
    Plagegeister aller Art und deren Bekämpfung - 13.12.2011 (3)
  11. Startmenü Einträge fehlen
    Plagegeister aller Art und deren Bekämpfung - 08.10.2011 (4)
  12. Desktop schwarz, Startmenü leer, HDD
    Plagegeister aller Art und deren Bekämpfung - 07.06.2011 (23)
  13. Startmenü im Explorer öffnen
    Alles rund um Windows - 14.03.2010 (0)
  14. Hijack.StartMenü
    Log-Analyse und Auswertung - 08.02.2010 (7)
  15. Unbekannter Startmenü Eintrag
    Plagegeister aller Art und deren Bekämpfung - 29.05.2008 (4)
  16. Unerklärliche Seiten im Startmenü
    Archiv - 18.01.2003 (6)

Zum Thema Bedenklicher Eintrag im Startmenü - Hallo zusammen, mein Rechner ist in letzter Zeit extrem langsam gewesen und einige Funktionen liefen gar nicht mehr.Zum Beispiel konnte ich kein Servicepack installieren und der Windows Instrumentationsverwaltungsdienst liess sich - Bedenklicher Eintrag im Startmenü...
Archiv
Du betrachtest: Bedenklicher Eintrag im Startmenü auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.