Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Bestehen reste nach trojaner infektion?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 18.01.2017, 22:33   #16
Glaringsoul
 
Bestehen reste nach trojaner infektion? - Standard

Bestehen reste nach trojaner infektion?



Code:
ATTFilter
C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2016-12-31 14:08 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2016-12-31 14:08 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-12-31 14:08 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2016-12-31 14:08 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2016-12-31 14:08 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2016-12-31 14:08 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2016-12-31 14:08 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-12-31 14:08 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
2016-12-31 14:08 - 2016-09-15 17:48 - 01320448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-12-31 14:08 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-12-31 14:08 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2016-12-31 14:08 - 2016-09-15 17:44 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-12-31 14:08 - 2016-09-15 17:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-12-31 14:08 - 2016-09-15 17:42 - 00545792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-12-31 14:08 - 2016-09-15 17:42 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-12-31 14:08 - 2016-09-15 17:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
2016-12-31 14:08 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundMediaPolicy.dll
2016-12-31 14:08 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2016-12-31 14:08 - 2016-09-15 17:40 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2016-12-31 14:08 - 2016-09-15 17:38 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-31 14:08 - 2016-09-15 17:36 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-12-31 14:08 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2016-12-31 14:08 - 2016-09-15 17:36 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-12-31 14:08 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-31 14:08 - 2016-09-15 17:35 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-12-31 14:08 - 2016-09-15 17:35 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-12-31 14:08 - 2016-09-15 17:35 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\rshx32.dll
2016-12-31 14:08 - 2016-09-15 17:34 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2016-12-31 14:08 - 2016-09-15 17:34 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-12-31 14:08 - 2016-09-15 17:33 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-12-31 14:08 - 2016-09-15 17:33 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-12-31 14:08 - 2016-09-15 17:32 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-12-31 14:08 - 2016-09-15 17:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2016-12-31 14:08 - 2016-09-15 17:29 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-12-31 14:08 - 2016-09-15 17:29 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-12-31 14:08 - 2016-09-15 17:27 - 02860032 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-12-31 14:08 - 2016-09-15 17:27 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-12-31 14:08 - 2016-09-15 17:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-12-31 14:08 - 2016-09-15 17:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-12-31 14:08 - 2016-09-15 17:26 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-12-31 14:08 - 2016-09-15 17:25 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-12-31 14:08 - 2016-09-15 17:24 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-12-31 14:08 - 2016-09-15 17:23 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-12-31 14:08 - 2016-09-15 17:23 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-12-31 14:08 - 2016-09-15 17:23 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2016-12-31 14:08 - 2016-09-15 17:22 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-12-31 14:08 - 2016-09-15 17:19 - 03202048 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-12-31 14:08 - 2016-09-15 17:17 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-12-31 14:08 - 2016-09-15 17:16 - 01817088 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-12-31 14:08 - 2016-09-15 17:16 - 00531456 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2016-12-31 14:08 - 2016-09-15 17:16 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2016-12-31 14:08 - 2016-09-07 06:54 - 00133472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-31 14:08 - 2016-09-07 06:44 - 02049480 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-12-31 14:08 - 2016-09-07 06:34 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-12-31 14:08 - 2016-09-07 06:33 - 00681304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-12-31 14:08 - 2016-09-07 06:29 - 00595488 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-12-31 14:08 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-12-31 14:08 - 2016-09-07 06:24 - 00057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-31 14:08 - 2016-09-07 06:13 - 00640976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-12-31 14:08 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-12-31 14:08 - 2016-09-07 06:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2016-12-31 14:08 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-12-31 14:08 - 2016-09-07 06:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-12-31 14:08 - 2016-09-07 06:01 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2016-12-31 14:08 - 2016-09-07 06:01 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-12-31 14:08 - 2016-09-07 06:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-31 14:08 - 2016-09-07 05:59 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-12-31 14:08 - 2016-09-07 05:59 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2016-12-31 14:08 - 2016-09-07 05:59 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-12-31 14:08 - 2016-09-07 05:59 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2016-12-31 14:08 - 2016-09-07 05:58 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-12-31 14:08 - 2016-09-07 05:58 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-31 14:08 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-12-31 14:08 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-12-31 14:08 - 2016-09-07 05:56 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-12-31 14:08 - 2016-09-07 05:56 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-12-31 14:08 - 2016-09-07 05:56 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-12-31 14:08 - 2016-09-07 05:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2016-12-31 14:08 - 2016-09-07 05:54 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-31 14:08 - 2016-09-07 05:54 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2016-12-31 14:08 - 2016-09-07 05:53 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-12-31 14:08 - 2016-09-07 05:49 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-12-31 14:08 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2016-12-31 14:08 - 2016-09-07 05:46 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2016-12-31 14:08 - 2016-09-07 05:41 - 01891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-12-31 14:08 - 2016-09-07 05:40 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2016-12-31 14:08 - 2016-09-07 05:39 - 05384192 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2016-12-31 14:08 - 2016-09-07 05:38 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-12-31 14:08 - 2016-09-07 05:35 - 00650240 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2016-12-31 14:08 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-12-31 14:08 - 2016-08-20 07:06 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-12-31 14:08 - 2016-08-20 06:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-31 14:08 - 2016-08-20 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-12-31 14:08 - 2016-08-20 06:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-12-31 14:08 - 2016-08-20 06:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-12-31 14:08 - 2016-08-20 06:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-12-31 14:08 - 2016-08-20 06:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-12-31 14:08 - 2016-08-20 06:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-12-31 14:08 - 2016-08-20 06:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-12-31 14:08 - 2016-08-20 06:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-12-31 14:08 - 2016-08-20 06:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-12-31 14:08 - 2016-08-20 06:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-12-31 14:08 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2016-12-31 14:08 - 2016-08-20 06:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-12-31 14:08 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2016-12-31 14:08 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2016-12-31 14:08 - 2016-08-20 06:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-12-31 14:08 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-12-31 14:08 - 2016-08-20 06:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-12-31 14:08 - 2016-08-20 06:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-12-31 14:08 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2016-12-31 14:08 - 2016-08-19 02:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-12-31 14:08 - 2016-08-06 05:31 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-12-31 14:08 - 2016-08-06 05:29 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-12-31 14:08 - 2016-08-06 05:26 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-31 14:08 - 2016-08-06 05:23 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-31 14:08 - 2016-08-06 05:18 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-12-31 14:08 - 2016-08-06 05:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-31 14:08 - 2016-08-06 05:15 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-12-31 14:08 - 2016-08-06 05:13 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-12-31 14:08 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-12-31 14:08 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-12-31 14:08 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-12-31 14:08 - 2016-08-06 04:48 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-31 14:08 - 2016-08-06 04:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-31 14:08 - 2016-08-06 04:48 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-12-31 14:08 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-12-31 14:08 - 2016-08-06 04:48 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-12-31 14:08 - 2016-08-06 04:47 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-12-31 14:08 - 2016-08-06 04:46 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-12-31 14:08 - 2016-08-06 04:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-12-31 14:08 - 2016-08-06 04:45 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-12-31 14:08 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2016-12-31 14:08 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-12-31 14:08 - 2016-08-06 04:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-12-31 14:08 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2016-12-31 14:08 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-12-31 14:08 - 2016-08-06 04:43 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-12-31 14:08 - 2016-08-06 04:41 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-12-31 14:08 - 2016-08-06 04:41 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-12-31 14:08 - 2016-08-06 04:41 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-12-31 14:08 - 2016-08-06 04:40 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-12-31 14:08 - 2016-08-06 04:39 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-12-31 14:08 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2016-12-31 14:08 - 2016-08-06 04:34 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-12-31 14:08 - 2016-08-06 04:29 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2016-12-31 14:08 - 2016-08-06 04:29 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-12-31 14:08 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-12-31 14:08 - 2016-08-06 04:23 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-12-31 14:08 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2016-12-31 14:08 - 2016-08-06 04:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-12-31 14:08 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-12-31 14:08 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2016-12-31 14:08 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2016-12-31 14:08 - 2016-08-02 09:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-12-31 14:08 - 2016-08-02 09:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-12-31 14:08 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2016-12-31 14:08 - 2016-07-22 02:25 - 00389000 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2016-12-29 14:11 - 2016-12-29 14:10 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-29 14:00 - 2017-01-14 18:41 - 00000000 ____D C:\Users\Henselmann\AppData\Roaming\Skype
2016-12-29 14:00 - 2016-12-29 14:00 - 00003300 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2016-12-29 13:59 - 2017-01-02 20:10 - 00000000 ___SD C:\Users\Henselmann\AppData\LocalLow\Microsoft
2016-12-23 11:04 - 2017-01-11 17:36 - 00003884 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:04 - 2017-01-06 02:10 - 01855544 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-12-23 11:04 - 2017-01-06 02:10 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-12-23 11:04 - 2017-01-06 02:10 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-12-23 11:04 - 2017-01-06 02:10 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-12-23 11:04 - 2017-01-06 02:10 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-12-23 11:04 - 2016-12-31 18:14 - 00000000 ____D C:\Users\Henselmann\AppData\Local\NVIDIA Corporation
2016-12-23 11:04 - 2016-12-31 15:26 - 00000000 ____D C:\Users\Henselmann\AppData\Local\NVIDIA
2016-12-23 11:04 - 2016-12-23 11:04 - 00000000 ____D C:\Users\Henselmann\AppData\Local\CEF
2016-12-23 11:04 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-12-23 11:04 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-12-23 11:04 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-12-23 11:04 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-12-23 11:04 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-12-23 11:04 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-12-23 11:03 - 2017-01-18 17:49 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-23 11:03 - 2017-01-11 17:36 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:03 - 2017-01-11 17:36 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:03 - 2017-01-11 17:36 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:03 - 2017-01-11 17:36 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:03 - 2017-01-11 17:36 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-23 11:03 - 2017-01-11 17:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-23 11:03 - 2017-01-11 17:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-23 11:03 - 2017-01-06 00:42 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-12-23 11:03 - 2016-12-31 15:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-23 11:03 - 2016-12-11 19:47 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-12-23 11:03 - 2016-12-11 19:47 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-12-23 11:03 - 2016-12-09 09:52 - 07639617 _____ C:\Windows\system32\nvcoproc.bin
2016-12-23 11:03 - 2016-12-01 21:02 - 00215608 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-12-23 11:03 - 2016-12-01 21:02 - 00203320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-12-23 11:02 - 2017-01-06 02:10 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-12-23 11:02 - 2016-12-12 04:03 - 03934504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-12-23 11:02 - 2016-12-12 04:03 - 03474392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-12-23 11:02 - 2016-12-12 04:03 - 00042286 _____ C:\Windows\system32\nvinfo.pb
2016-12-23 11:02 - 2016-12-02 21:41 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-12-23 11:02 - 2016-12-02 21:41 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-12-23 11:02 - 2016-12-02 21:41 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-12-23 11:02 - 2016-12-01 21:02 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437619.dll
2016-12-23 11:02 - 2016-12-01 21:02 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437619.dll
2016-12-23 11:02 - 2016-12-01 21:02 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-12-23 11:02 - 2016-12-01 21:02 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-12-23 11:00 - 2017-01-11 17:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-23 11:00 - 2016-12-23 11:00 - 00000000 ____D C:\NVIDIA
2016-12-23 10:59 - 2016-12-23 10:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-12-23 10:55 - 2016-12-23 10:55 - 01351936 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-12-23 10:55 - 2016-12-23 10:55 - 00030766 _____ C:\csb.log
2016-12-23 10:55 - 2016-12-23 10:55 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-12-23 10:55 - 2016-12-23 10:55 - 00000000 ____D C:\Users\Henselmann\AppData\Roaming\Intel Corporation
2016-12-23 10:55 - 2016-12-23 10:55 - 00000000 ____D C:\Users\Henselmann\AppData\Local\Comms
2016-12-23 10:55 - 2016-12-23 10:55 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2016-12-23 10:54 - 2016-12-23 10:55 - 00000189 _____ C:\Install.log
2016-12-23 10:54 - 2016-12-23 10:54 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-12-23 10:54 - 2015-10-10 00:27 - 00935168 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2016-12-23 10:54 - 2015-10-10 00:27 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-12-23 10:53 - 2016-12-23 10:53 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-12-23 10:53 - 2016-12-23 10:53 - 00000000 ____D C:\Program Files\Realtek
2016-12-23 10:53 - 2016-01-27 03:04 - 03195648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-12-23 10:53 - 2016-01-27 03:04 - 02894976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-12-23 10:53 - 2016-01-27 03:03 - 72203792 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-12-23 10:53 - 2016-01-27 03:03 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 04779776 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-12-23 10:53 - 2016-01-27 03:03 - 03769493 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-12-23 10:53 - 2016-01-27 03:03 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 03080784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 02036992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 01356504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00192992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-12-23 10:53 - 2016-01-27 03:03 - 00023704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-12-23 10:52 - 2017-01-18 17:52 - 02113766 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-23 10:52 - 2016-01-27 03:03 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00708320 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00445408 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00327464 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-12-23 10:52 - 2016-01-27 03:03 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-12-23 10:51 - 2017-01-07 18:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-23 10:51 - 2017-01-04 12:52 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-23 10:51 - 2016-12-23 10:55 - 00000000 ____D C:\Program Files\Intel
2016-12-23 10:51 - 2016-12-23 10:54 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-12-23 10:51 - 2016-12-23 10:54 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-23 10:51 - 2016-12-23 10:51 - 00000000 ____D C:\Users\Henselmann\Intel
2016-12-23 10:51 - 2016-12-23 10:51 - 00000000 ____D C:\ProgramData\Intel
2016-12-23 10:51 - 2016-12-23 10:51 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-23 10:51 - 2016-01-27 03:03 - 00118600 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-12-23 10:51 - 2016-01-06 09:23 - 02826832 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2016-12-23 10:50 - 2016-12-23 10:54 - 00026192 ____N (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-12-23 10:50 - 2016-12-23 10:54 - 00000010 _____ C:\Windows\GSetup.ini
2016-12-23 10:50 - 2009-08-27 08:04 - 00207400 ____R () C:\Windows\GSetup.exe
2016-12-23 10:49 - 2016-12-29 14:00 - 00002402 _____ C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-23 10:49 - 2016-12-29 14:00 - 00000000 ___RD C:\Users\Henselmann\OneDrive
2016-12-23 10:49 - 2016-12-23 10:49 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-23 10:49 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-12-23 10:48 - 2017-01-18 19:54 - 00000000 ___RD C:\Users\Henselmann\Desktop
2016-12-23 10:48 - 2017-01-18 19:54 - 00000000 ____D C:\Users\Henselmann\AppData\Local\Temp
2016-12-23 10:48 - 2017-01-18 19:48 - 00000000 ___RD C:\Users\Henselmann\Downloads
2016-12-23 10:48 - 2017-01-18 19:31 - 00000000 ___RD C:\Users\Henselmann\Videos
2016-12-23 10:48 - 2017-01-18 17:46 - 06553600 ____H C:\Users\Henselmann\NTUSER.DAT
2016-12-23 10:48 - 2017-01-18 17:46 - 00524288 ___SH C:\Users\Henselmann\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:48 - 2017-01-18 17:46 - 00065536 ___SH C:\Users\Henselmann\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-23 10:48 - 2017-01-18 17:46 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-23 10:48 - 2017-01-18 17:46 - 00000000 ____D C:\Users\Henselmann\AppData\Local
2016-12-23 10:48 - 2017-01-18 17:46 - 00000000 ____D C:\Users\Henselmann
2016-12-23 10:48 - 2017-01-18 09:45 - 00000000 ____D C:\Users\Henselmann\AppData\LocalLow
2016-12-23 10:48 - 2017-01-16 01:32 - 00000000 ___RD C:\Users\Henselmann\Pictures
2016-12-23 10:48 - 2017-01-15 20:51 - 00000000 ___RD C:\Users\Henselmann\Music
2016-12-23 10:48 - 2017-01-15 02:33 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-23 10:48 - 2017-01-15 02:32 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-23 10:48 - 2017-01-15 02:13 - 00000000 ___RD C:\Users\Henselmann\Documents
2016-12-23 10:48 - 2017-01-15 01:02 - 00000000 ____D C:\Users\Henselmann\AppData\Roaming
2016-12-23 10:48 - 2017-01-15 00:54 - 00000000 ____D C:\Users\Henselmann\AppData\Local\Microsoft
2016-12-23 10:48 - 2017-01-14 18:56 - 00000000 ___SD C:\Users\Henselmann\AppData\Roaming\Microsoft
2016-12-23 10:48 - 2017-01-10 19:33 - 00000402 ___SH C:\Users\Henselmann\Documents\desktop.ini
2016-12-23 10:48 - 2017-01-10 19:33 - 00000282 ___SH C:\Users\Henselmann\Downloads\desktop.ini
2016-12-23 10:48 - 2017-01-10 19:33 - 00000282 ___SH C:\Users\Henselmann\Desktop\desktop.ini
2016-12-23 10:48 - 2017-01-10 19:33 - 00000174 ___SH C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-23 10:48 - 2017-01-10 19:33 - 00000174 ___SH C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\Searches
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\Saved Games
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\Links
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\Favorites
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\Contacts
2016-12-23 10:48 - 2017-01-10 19:33 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-23 10:48 - 2017-01-08 00:51 - 00000000 ____D C:\Users\Henselmann\AppData\Local\Packages
2016-12-23 10:48 - 2017-01-07 23:52 - 00524288 ___SH C:\Users\Henselmann\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:48 - 2016-12-23 10:54 - 00000000 ____D C:\Users\Henselmann\AppData\Local\ConnectedDevicesPlatform
2016-12-23 10:48 - 2016-12-23 10:48 - 01310720 ___SH C:\Users\Henselmann\ntuser.dat.LOG1
2016-12-23 10:48 - 2016-12-23 10:48 - 01048576 ___SH C:\Users\Henselmann\ntuser.dat.LOG2
2016-12-23 10:48 - 2016-12-23 10:48 - 00003340 ____H C:\Users\defaultuser0\AppData\Local\IconCache.db
2016-12-23 10:48 - 2016-12-23 10:48 - 00000020 ___SH C:\Users\Henselmann\ntuser.ini
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Vorlagen
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Startmenü
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\SendTo
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Recent
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Netzwerkumgebung
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Lokale Einstellungen
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Eigene Dateien
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Druckumgebung
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Documents\Eigene Videos
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Documents\Eigene Musik
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Documents\Eigene Bilder
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Cookies
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\AppData\Local\Verlauf
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\AppData\Local\Temporary Internet Files
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\AppData\Local\Anwendungsdaten
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 _SHDL C:\Users\Henselmann\Anwendungsdaten
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ___HD C:\Users\Henselmann\AppData
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ____D C:\Users\Henselmann\AppData\Roaming\Adobe
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ____D C:\Users\Henselmann\AppData\Local\VirtualStore
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ____D C:\Users\Henselmann\AppData\Local\TileDataLayer
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ____D C:\Users\Henselmann\AppData\Local\Publishers
2016-12-23 10:48 - 2016-12-23 10:48 - 00000000 ____D C:\ProgramData\USOShared
2016-12-23 10:48 - 2016-07-16 12:48 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-23 10:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-23 10:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-23 10:48 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Henselmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-23 10:47 - 2017-01-18 19:35 - 00000275 _____ C:\Windows\WindowsUpdate.log
2016-12-23 10:47 - 2017-01-18 17:46 - 05242880 ____H C:\Users\defaultuser0\NTUSER.DAT
2016-12-23 10:47 - 2017-01-18 17:46 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Temp
2016-12-23 10:47 - 2017-01-14 18:58 - 00000000 ____D C:\Users\defaultuser0
2016-12-23 10:47 - 2016-12-29 14:08 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-23 10:47 - 2016-12-23 10:48 - 00000000 ____D C:\Users\defaultuser0\AppData\Local
2016-12-23 10:47 - 2016-12-23 10:47 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:47 - 2016-12-23 10:47 - 00524288 ___SH C:\Users\defaultuser0\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:47 - 2016-12-23 10:47 - 00119808 ___SH C:\Users\defaultuser0\ntuser.dat.LOG1
2016-12-23 10:47 - 2016-12-23 10:47 - 00065536 ___SH C:\Users\defaultuser0\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-23 10:47 - 2016-12-23 10:47 - 00049152 ___SH C:\Users\defaultuser0\ntuser.dat.LOG2
2016-12-23 10:47 - 2016-12-23 10:47 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\SendTo
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Recent
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Cookies
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Temporary Internet Files
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Programme
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 __SHD C:\Recovery
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ___SD C:\Users\defaultuser0\AppData\Roaming\Microsoft
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ___RD C:\Users\defaultuser0\Documents
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ___HD C:\Users\defaultuser0\AppData
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\LocalLow
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Microsoft
2016-12-23 10:47 - 2016-12-23 10:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2016-12-23 10:47 - 2016-07-16 12:48 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Videos
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Pictures
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Music
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Links
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Favorites
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Downloads
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\Desktop
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\defaultuser0\Saved Games
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\defaultuser0\AppData\Roaming
2016-12-23 10:46 - 2017-01-18 19:54 - 00000000 ____D C:\Windows\Prefetch
2016-12-23 10:46 - 2017-01-18 19:35 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-23 10:46 - 2017-01-18 17:48 - 00067584 ____S C:\Windows\bootstat.dat
2016-12-23 10:46 - 2017-01-18 17:46 - 4026531840 ___SH C:\pagefile.sys
2016-12-23 10:46 - 2017-01-18 17:46 - 3416023040 ___SH C:\hiberfil.sys
2016-12-23 10:46 - 2017-01-18 17:46 - 16777216 ___SH C:\swapfile.sys
2016-12-23 10:46 - 2017-01-18 17:46 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-23 10:46 - 2017-01-15 02:58 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:46 - 2017-01-15 02:58 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-23 10:46 - 2017-01-14 19:41 - 00006756 _____ C:\Windows\setupact.log
2016-12-23 10:46 - 2017-01-11 17:00 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:46 - 2017-01-10 19:32 - 00226680 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-23 10:46 - 2016-12-23 10:46 - 00524288 ___SH C:\Windows\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:46 - 2016-12-23 10:46 - 00524288 ___SH C:\Windows\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:46 - 2016-12-23 10:46 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:46 - 2016-12-23 10:46 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:46 - 2016-12-23 10:46 - 00065536 ___SH C:\Windows\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TM.blf
2016-12-23 10:46 - 2016-12-23 10:46 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-23 10:46 - 2016-12-23 10:46 - 00047425 _____ C:\Windows\SysWOW64\license.rtf
2016-12-23 10:46 - 2016-12-23 10:46 - 00047425 _____ C:\Windows\system32\license.rtf
2016-12-23 10:46 - 2016-12-23 10:46 - 00001344 _____ C:\Windows\lsasetup.log
2016-12-23 10:46 - 2016-12-23 10:46 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-23 10:46 - 2016-12-23 10:46 - 00000000 ___HD C:\Program Files\Uninstall Information
2016-12-23 10:46 - 2016-12-23 10:46 - 00000000 ____D C:\Windows\ServiceProfiles
2016-12-23 10:46 - 2016-12-23 10:46 - 00000000 _____ C:\Windows\setuperr.log
2016-12-23 10:45 - 2017-01-17 20:58 - 00000000 __SHD C:\System Volume Information
2016-12-23 10:45 - 2017-01-10 19:32 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 10:45 - 2017-01-10 19:32 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-23 10:45 - 2016-12-23 10:46 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 10:45 - 2016-12-23 10:46 - 00000000 ____D C:\Windows\Panther
2016-12-20 11:24 - 2016-12-20 11:24 - 00035784 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-18 17:52 - 2016-07-16 23:51 - 00842658 _____ C:\Windows\system32\perfh007.dat
2017-01-18 17:52 - 2016-07-16 23:51 - 00188378 _____ C:\Windows\system32\perfc007.dat
2017-01-18 17:46 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-01-18 17:40 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-18 17:40 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness
2017-01-17 19:24 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\NDF
2017-01-15 02:55 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache
2017-01-14 19:41 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF
2017-01-11 19:30 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-11 19:30 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-10 19:32 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-01-10 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-01-10 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe
2017-01-10 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-01-10 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Provisioning
2017-01-10 19:21 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp
2017-01-09 18:26 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-01-04 02:45 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Resources
2017-01-03 19:00 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-01 19:08 - 2016-07-16 07:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-01-01 02:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\MUI
2017-01-01 02:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\MUI
2016-12-31 14:16 - 2016-07-16 23:50 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2016-12-31 14:16 - 2016-07-16 12:47 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\F12
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\wbem
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\migration
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\en-US
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\zh-HK
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\uk-UA
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\th-TH
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sl-SI
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sk-SK
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\setup
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\ro-RO
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\pt-BR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\nb-NO
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\migration
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\ja-jp
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\hr-HR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\he-IL
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\fr-CA
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\en-US
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Boot
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\ar-SA
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppPatch
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Media Player
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Mail
2016-12-31 14:16 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-31 14:16 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-12-31 14:16 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-31 14:16 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism
2016-12-31 14:16 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing
2016-12-31 14:02 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-12-31 14:02 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\appcompat
2016-12-29 14:07 - 2016-07-16 12:47 - 00000000 __SHD C:\$Recycle.Bin
2016-12-29 14:07 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-23 11:03 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Public\Pictures
2016-12-23 11:03 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Help
2016-12-23 10:51 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\drivers
2016-12-23 10:51 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\restore
2016-12-23 10:49 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\spool
2016-12-23 10:49 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-23 10:48 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-23 10:48 - 2016-07-16 07:04 - 00000000 ___RD C:\Users
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Default\Documents
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\debug
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-23 10:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2016-12-23 10:47 - 2016-07-16 07:04 - 00000000 __RHD C:\Users\Default
2016-12-23 10:46 - 2016-07-16 12:49 - 00001947 _____ C:\Windows\DtcInstall.log
2016-12-23 10:46 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\PrintDialog
2016-12-23 10:46 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\MiracastView
2016-12-23 10:46 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\System32\Tasks\Microsoft
2016-12-23 10:46 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Recovery
2016-12-23 10:45 - 2016-07-16 12:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-12-23 00:13 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-08 04:12 - 2017-01-14 20:47 - 0007597 _____ () C:\Users\Henselmann\AppData\Local\Resmon.ResmonCfg
2016-12-23 10:54 - 2016-12-23 10:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-01-01 14:03 - 2017-01-01 14:03 - 0000016 _____ () C:\ProgramData\mntemp
2016-12-31 18:14 - 2017-01-11 17:36 - 0007609 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-31 18:14 - 2017-01-10 19:32 - 0010108 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Einige Dateien in TEMP:
====================
C:\Users\Henselmann\AppData\Local\Temp\0Kraken0502DevProps.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-15 01:52

==================== Ende von FRST.txt ============================
         

 

Themen zu Bestehen reste nach trojaner infektion?
aktuelle, andere, anderen, avira, bereits, beseitigen, blockiert, dateien, entferne, entfernen, erwischt, festplatte, geschlossen, gestern, infektion, neustarten, nicht mehr, nichts, platte, quelle, scan, scanne, scannen, troja, trojaner




Ähnliche Themen: Bestehen reste nach trojaner infektion?


  1. Unsicher, ob nach Entfernung von Spyhunter4 noch Reste oder Adware vorhanden ist
    Plagegeister aller Art und deren Bekämpfung - 23.05.2016 (16)
  2. Doch noch Reste nach Erfolgreicher Bekämpfung Re-Infekt Malaha.net?
    Plagegeister aller Art und deren Bekämpfung - 13.06.2015 (7)
  3. Windows 7 - Evtl. Highjacking/ Trojaner-Infektion nach unvorsichtigem Download
    Log-Analyse und Auswertung - 20.04.2015 (16)
  4. Windows 7 Trojaner infektion nach Plugin installation
    Log-Analyse und Auswertung - 15.04.2014 (15)
  5. Nach dem Scan mit GMER hat er Festgestellt dass System Modifikationen bestehen
    Log-Analyse und Auswertung - 12.02.2014 (11)
  6. Reste von Delta Search nach Problemen mit Quicktime unter Win XP Home
    Plagegeister aller Art und deren Bekämpfung - 12.08.2013 (30)
  7. sauberer PC nach Polizei Trojaner Infektion?
    Log-Analyse und Auswertung - 20.02.2013 (16)
  8. Keylogger/Trojaner nach GVU Infektion
    Log-Analyse und Auswertung - 21.12.2012 (22)
  9. BKA - Trojaner Reste nach Kaspersky Rescue CD ?
    Log-Analyse und Auswertung - 19.07.2012 (5)
  10. Datenverschlüsselung nach Infektion mit dem Trojaner tr-dldr-agent-17383
    Plagegeister aller Art und deren Bekämpfung - 16.06.2012 (9)
  11. Datenentschlüsselung nach Infektion mit Windows-Verschlüsselungs-Trojaner
    Plagegeister aller Art und deren Bekämpfung - 16.06.2012 (2)
  12. Nach Trojaner Infektion ist der Desktop schwarz
    Plagegeister aller Art und deren Bekämpfung - 23.12.2011 (1)
  13. Nach Entfernung von Windows Recovery Virus noch Reste in der Registry
    Plagegeister aller Art und deren Bekämpfung - 09.07.2011 (9)
  14. Noch thinkpoint Reste nach Systemwiederherstellung
    Alles rund um Windows - 09.04.2011 (3)
  15. Nach Antivirus 2008 Infektion, Reste von Tdssserv.sys
    Plagegeister aller Art und deren Bekämpfung - 09.08.2009 (18)
  16. Logfile nach Trojaner Infektion...Bitte um Hilfe!
    Log-Analyse und Auswertung - 17.07.2009 (15)
  17. Reste (mailbot o.ä.) nach "rootkit.bagle" infektion
    Plagegeister aller Art und deren Bekämpfung - 12.05.2009 (5)

Zum Thema Bestehen reste nach trojaner infektion? - Code: Alles auswählen Aufklappen ATTFilter C:\Windows\SysWOW64\Windows.Gaming.Input.dll 2016-12-31 14:08 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll 2016-12-31 14:08 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll 2016-12-31 14:08 - Bestehen reste nach trojaner infektion?...
Archiv
Du betrachtest: Bestehen reste nach trojaner infektion? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.