Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Internet gesperrt von Netcologne, laut Info habe ich Gootkit !

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Thema geschlossen
Alt 22.10.2020, 19:07   #16
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Code:
ATTFilter
2020-10-20 11:17 - 2020-10-20 11:17 - 000644576 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000643584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000637360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000635832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000634760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000634696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000632544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\agentactivationruntime.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000630096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000627712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000624480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000623392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000617472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.ConversationalAgent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000606880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000604472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000603464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000603448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000602432 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000602192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000598336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000595512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000594464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000590848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000589824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000586048 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000585704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000583616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000583608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000581632 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000581632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Devices.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000579072 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000578376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000575800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000573752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000560400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000548544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000546976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\IESettingSync.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000538440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000537696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000531448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000530912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000529208 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000523712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000521096 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000521016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000520704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\glmf32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UiaManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.PredictionUnit.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000509248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000504552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000502584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-10-20 11:17 - 2020-10-20 11:17 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000500968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000495840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000488104 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000488064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000487936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000487048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000482104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000477512 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000475696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000474424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000474112 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000471600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcIso.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000469920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000466928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000459264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000455480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000455168 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000446264 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000442680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000440120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboutSettingsHandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000430392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000427200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-10-20 11:17 - 2020-10-20 11:17 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CscUnpinTool.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000420936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000419432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000418816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000418416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000416864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000414200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000413232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000413208 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000412672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000411448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000410064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000408000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000407872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_OptionalFeatures.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000403768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000403384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_User.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000397728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000395592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glmf32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000389432 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenData.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerPlatform.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallControlPanel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000382728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.FileExplorer.Common.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000377344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000376032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000374496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000374080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000374072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreShellAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000371376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioHandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000367104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000366392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vault.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000361040 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000360960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000360024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Fonts.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000353256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000352784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000343992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HrtfApo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FrameServerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000342424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000337768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AarSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxpTaskSync.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000332600 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000329528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000329504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000324416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000322376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msquic.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000313152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemSettings.DataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000311920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallControlPanel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000308024 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000305272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000303288 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000303168 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnputil.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Proxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000295464 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000293864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000293184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000288672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000287680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000287544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000286520 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000286016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ConfigWrapper.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.FileExplorer.Common.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerPlatform.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000275288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000271664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vault.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000270640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000268080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-10-20 11:17 - 2020-10-20 11:17 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxpTaskSync.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000260928 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchangeHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000260816 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000259888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000258880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldpc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000253008 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000252616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capauthz.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000251192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinREAgent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuceffects.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fidocredprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000241144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000240136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-10-20 11:17 - 2020-10-20 11:17 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000230904 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000230392 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000229176 _____ (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.Desktop.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000228152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000225088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleBand.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000224576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000219960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000218936 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215896 _____ (Microsoft Corporation) C:\WINDOWS\system32\coreglobconfig.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msls31.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215352 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Devices.Sensors.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000213344 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000212760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000212480 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000210432 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldpc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000208696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000207608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NetAdapterCx.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000207168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdscore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-10-20 11:17 - 2020-10-20 11:17 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000204000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000203544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000202568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000198792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000196784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000195384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000195232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000195136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SwitcherDataModel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000191656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000190976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000190792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxApplicabilityEngine.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000190040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fidocredprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-10-20 11:17 - 2020-10-20 11:17 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000188000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000185912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000185448 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000182592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowService.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000181048 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dsui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000180040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000180032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000179000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000176656 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000176448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000175928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000175608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000173016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuceffects.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000171568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000171440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUxClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Clipboard.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000169456 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000167224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000166280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000166200 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000164232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpcsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000163216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000163208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coreglobconfig.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000162704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000161608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000161608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000160056 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000157024 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000155976 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000153400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000153376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000152904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000152576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000151864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000151864 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\useractivitybroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000149272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000148992 _____ C:\WINDOWS\system32\EoAExperiences.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dsui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\control.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000147264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000147232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000146216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000145664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\socialapis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000143096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000143056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000142008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000141008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000141008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000139960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000137896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidcom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredDialogBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000136328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000134800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133744 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Haptics.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwclientres.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000131688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\recovery.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000130128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CaptureService.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvEmulation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000128616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000126024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000125016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000123968 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWSDAHost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleAPIs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000119608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadWamExtension.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabinet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000118584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000118584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000117800 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MaintenanceUI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000117216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000117056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000116536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DSCache.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000115192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000115008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsiCx.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2020-10-20 11:17 - 2020-10-20 11:17 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcfgutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2020-10-20 11:17 - 2020-10-20 11:17 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoipRT.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000111024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\provmigrate.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000110512 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000110008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkQoSPolicyCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000109504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\socialapis.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000108352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000107416 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000107376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PktMon.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindfltapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000102720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidfdp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000101744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-10-20 11:17 - 2020-10-20 11:17 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.ServiceHostBuilder.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000099656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlgpclnt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdsapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcfgutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000097088 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsCtfMonitor.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000096032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\spinf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000095024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000094496 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000093952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000093488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000092960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000091448 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.Preview.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-10-20 11:17 - 2020-10-20 11:17 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeopleAPIs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000086784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
         

Alt 22.10.2020, 19:08   #17
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Code:
ATTFilter
2020-10-20 11:17 - 2020-10-20 11:17 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rassstp.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbssysprep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MitigationConfiguration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spinf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000082176 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpolcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provmigrate.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\deploymentcsps.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000076952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\djoin.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.ServiceHostBuilder.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000074832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DiagnosticInvoker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiverExt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000072824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-10-20 11:17 - 2020-10-20 11:17 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000072288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsCtfMonitor.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcacli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MitigationConfiguration.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NapiNSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000069752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000069728 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000069432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000068928 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000068680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000068192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colbact.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.internal.shellcommon.AccountsControlExperience.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidnsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemUWPLauncher.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidfdp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000064824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000064072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Print.Workflow.Source.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmlocalmanagement.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unenrollhook.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000060464 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000059448 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpolcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000058176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiverExt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000057664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000057360 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000057144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmLpac.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000056312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\threadpoolwinrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagnosticdataquery.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcacli.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NapiNSP.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmpostprocessevaluator.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000052672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000052664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wtsapi32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000052664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ResourcePolicyClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000051120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iri.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ffbroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000050104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc_os.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotect.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrnr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.SecurityMitigationsBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmlocalmanagement.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IndirectKmd.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000047016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemId.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2010CustomActions.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000045904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\execmodelproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000042808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000042328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidnsp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000041816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000041280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.SecurityMitigationsBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiclnt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000040248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000039720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iri.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000038712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIMgrBroker.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acwow64.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000037688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netutils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dusmapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CIDiag.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000034152 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptbase.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscacheugc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000033096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000033064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000031760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\linkinfo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000031528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptbase.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000031496 _____ (Microsoft Corporation) C:\WINDOWS\system32\version.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000028384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32topl.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\davhlpr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000027848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000027336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000027320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\version.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowProxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025848 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000024296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerEnc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000024288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsrole.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2020-10-20 11:17 - 2020-10-20 11:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000021816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScriptRunner.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000021312 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000021312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000021280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidtel.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000020640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerEnc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragproxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000020280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000019256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000019144 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\midimap.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsregtask.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-10-20 11:17 - 2020-10-20 11:17 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mobilenetworking.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wowreg32.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000017728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\backgroundTaskHost.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000017600 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrss.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000017216 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000017016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowProxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EsdSip.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.Native.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJPN.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshqos.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000015672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVSentinel.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidcrl40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmiso8601utils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIManagerBrokerps.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidcrl40.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwstreamingux.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfoext.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000012088 _____ (Microsoft Corporation) C:\WINDOWS\system32\6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmiso8601utils.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wship6.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSHTCPIP.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUS.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000009279 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-10-20 11:17 - 2020-10-20 11:17 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106n.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUS.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106n.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101.DLL
2020-10-20 11:17 - 2020-10-20 11:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2020-10-20 11:17 - 2020-10-20 11:17 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragres.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-10-20 11:17 - 2020-10-20 11:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2020-10-20 11:16 - 2020-10-20 11:17 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 017542144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 009034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 008009880 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 007266128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 006709248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 006195712 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 006070904 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 005783288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 005729280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 004732928 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 004590560 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 004517376 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2020-10-20 11:16 - 2020-10-20 11:16 - 004025344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003852288 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003779392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 003750912 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003537520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003436544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003305984 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003181056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 003066880 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002978816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002970624 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002942976 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 002648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002631168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002568704 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002503520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002485928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002377728 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 002311680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002305024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002250240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002242048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002107872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002102784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsudk.shellcommon.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002077696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 002040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001954816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001932760 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001905664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001837568 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001827840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001784480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001766912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001765184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001715200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001563520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001531904 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001515520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001473024 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001468928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001422336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001403904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001361920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001358336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001305600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001277952 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001262592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001261056 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001257984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001253376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001237536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001228800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001184360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 001148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001146368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001141984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001132544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001108288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001092392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001089856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001063936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001046528 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001043456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001030656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001030656 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001025768 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 001021952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000979768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000968704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000939448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000937472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000934912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000930816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000914216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000903984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000885248 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000844984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.Schema.Shell.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000821056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000809280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000799544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000796984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000795136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000764976 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000753664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsInternal.ComposableShell.ComposerFramework.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000707544 _____ C:\WINDOWS\system32\TextShaping.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000702776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000686408 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000678200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000647992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2020-10-20 11:16 - 2020-10-20 11:16 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000639288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\UiaManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000628120 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000602440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-10-20 11:16 - 2020-10-20 11:16 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000593440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000586792 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000577952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-10-20 11:16 - 2020-10-20 11:16 - 000560376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000539264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000528904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000507192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000504832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellAPI.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\HrtfApo.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000472376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000454968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000429880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000429712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000425272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000423224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000420456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000418800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MitigationClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000401728 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_isv.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000393728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000385240 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000383224 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000367248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.DisplayEnhancementOverride.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000361472 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000354344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000351200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_InputPersonalization.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000339000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000333144 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000318736 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.shareexperience.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000306176 _____ C:\WINDOWS\system32\HeatCore.dll
         
__________________


Alt 22.10.2020, 19:30   #18
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Code:
ATTFilter
2020-10-20 11:16 - 2020-10-20 11:16 - 000305472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Devices.Sensors.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000293176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddisplay.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Accessibility.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposerFramework.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000269624 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000259264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000255296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000240176 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000239432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000234296 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000230728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.System.UserProfile.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000223040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000219016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000216376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000215880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000214840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000211736 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000207160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000203976 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsBroker.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\useractivitybroker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\EapTeapAuth.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotcli.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Haptics.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000186472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000185672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000185664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000183112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000171992 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000165376 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\control.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000161672 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000160064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000159048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000155960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000152376 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadWamExtension.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000148280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyServer.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoipRT.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DSCache.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000147200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tsusbhub.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000133440 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000127288 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000122392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlgpclnt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000113112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRBroker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2020-10-20 11:16 - 2020-10-20 11:16 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.Preview.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000103288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuntimeBroker.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticInvoker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000097672 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerApi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000090408 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.AccountsControlExperience.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemUWPLauncher.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\execmodelproxy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000078528 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\GPCSEWrapperCsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000076976 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManagerForUser.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\TempSignedLicenseExchangeTask.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000071784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyClient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsi.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000070968 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\threadpoolwinrt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000067192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.PlatformExtension.DevicePickerExperience.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000061960 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemId.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000060744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc_os.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000056648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifidatacapabilityhandler.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS
2020-10-20 11:16 - 2020-10-20 11:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveTask.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000031552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000030480 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2020-10-20 11:16 - 2020-10-20 11:16 - 000030024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000029456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\midimap.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000026608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IntelTA.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregtask.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdiagnostics.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mobilenetworking.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000019776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000019776 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000016704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys
2020-10-20 11:16 - 2020-10-20 11:16 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsiproxy.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-10-20 11:16 - 2020-10-20 11:16 - 000011784 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2020-10-20 11:16 - 2020-10-20 11:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-10-20 11:12 - 2020-10-20 11:12 - 008628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0019.dll
2020-10-20 11:12 - 2020-10-20 11:12 - 006361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2020-10-20 11:12 - 2020-10-20 11:12 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2020-10-20 11:12 - 2020-10-20 11:12 - 005496320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2020-10-20 11:12 - 2020-10-20 11:12 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2020-10-20 11:10 - 2020-10-22 15:49 - 000760608 _____ C:\WINDOWS\system32\perfh019.dat
2020-10-20 11:10 - 2020-10-22 15:49 - 000151316 _____ C:\WINDOWS\system32\perfc019.dat
2020-10-20 11:10 - 2020-10-20 11:10 - 000340720 _____ C:\WINDOWS\system32\perfi019.dat
2020-10-20 11:10 - 2020-10-20 11:10 - 000041686 _____ C:\WINDOWS\system32\perfd019.dat
2020-10-20 11:10 - 2020-10-20 11:10 - 000000000 ____D C:\WINDOWS\SysWOW64\ru
2020-10-20 11:10 - 2020-10-20 11:10 - 000000000 ____D C:\WINDOWS\system32\ru
2020-10-20 11:07 - 2020-10-20 11:10 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2020-10-20 11:07 - 2020-10-20 11:07 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-10-20 11:07 - 2020-10-20 11:07 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-10-20 11:07 - 2020-10-20 11:07 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-10-20 11:07 - 2020-10-20 11:07 - 000000000 ____D C:\Program Files\MSBuild
2020-10-20 11:07 - 2020-10-20 11:07 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-10-20 11:07 - 2020-10-20 11:07 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-10-20 11:07 - 2019-12-03 14:04 - 000781384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-10-20 11:07 - 2019-12-03 14:04 - 000105544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-10-20 11:07 - 2019-12-03 14:04 - 000037864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-10-20 11:07 - 2019-11-08 14:44 - 001168968 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-10-20 11:07 - 2019-11-08 14:44 - 000127056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-10-20 11:07 - 2019-11-08 14:44 - 000038072 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-10-20 11:02 - 2020-10-20 11:02 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-10-20 10:40 - 2020-10-20 10:40 - 000000000 ____D C:\ProgramData\HP
2020-10-20 10:40 - 2019-03-21 06:10 - 000319864 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpbcoinsx64.dll
2020-10-19 18:27 - 2020-10-20 12:05 - 000000000 ___DC C:\WINDOWS\Panther
2020-10-19 18:22 - 2020-10-19 18:22 - 000000000 ___HD C:\$WinREAgent
2020-10-19 18:21 - 2020-10-19 18:21 - 002062144 _____ (Malwarebytes) C:\Users\EE\Downloads\MBSetup(1).exe
2020-10-19 18:17 - 2020-10-22 20:00 - 000051320 _____ C:\Users\EE\Downloads\Addition.txt
2020-10-19 18:16 - 2020-10-22 20:02 - 000020166 _____ C:\Users\EE\Downloads\FRST.txt
2020-10-19 18:16 - 2020-10-22 20:02 - 000000000 ____D C:\FRST
2020-10-19 18:15 - 2020-10-19 18:15 - 002299904 _____ (Farbar) C:\Users\EE\Downloads\FRST64.exe
2020-10-19 18:04 - 2020-10-19 18:04 - 002670815 _____ C:\Users\EE\Downloads\Autoruns.zip
2020-10-19 13:13 - 2020-10-19 13:13 - 000000008 _____ C:\Users\EE\Desktop\B.txt
2020-10-19 12:34 - 2020-10-19 12:34 - 000001416 _____ C:\Users\EE\Documents\Bericht Malwarebytes.txt
2020-10-19 12:26 - 2020-10-19 12:26 - 000000000 ____D C:\Program Files (x86)\NetSecurity
2020-10-19 11:55 - 2020-10-19 20:16 - 000000000 ____D C:\ProgramData\F-Secure
2020-10-19 11:55 - 2020-10-19 12:26 - 000000000 ____D C:\Users\EE\AppData\Local\F-Secure
2020-10-19 11:55 - 2020-10-19 11:55 - 002271104 _____ (F-Secure Corporation) C:\Users\EE\Downloads\Sicherheitspaket-Installer.exe
2020-10-19 11:08 - 2020-10-19 11:26 - 000000000 ____D C:\WINDOWS\pss
2020-10-19 11:08 - 2020-10-19 11:14 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-10-17 18:12 - 2020-10-17 18:14 - 000000000 ____D C:\AdwCleaner
2020-10-17 18:12 - 2020-10-17 18:12 - 008447152 _____ (Malwarebytes) C:\Users\EE\Downloads\adwcleaner_8.0.8.exe
2020-10-17 18:12 - 2020-10-17 18:12 - 005054744 _____ (AO Kaspersky Lab) C:\Users\EE\Downloads\tdsskiller.exe
2020-10-17 17:56 - 2020-10-17 18:09 - 000322138 _____ C:\TDSSKiller.3.1.0.28_17.10.2020_17.56.16_log.txt
2020-10-15 21:34 - 2020-10-22 19:39 - 000000000 ____D C:\Program Files (x86)\Google
2020-10-15 21:34 - 2020-10-15 21:35 - 000000000 ____D C:\Users\EE\AppData\Local\Google
2020-10-15 21:34 - 2020-10-15 21:34 - 001317080 _____ (Google LLC) C:\Users\EE\Downloads\ChromeSetup.exe
2020-10-15 20:37 - 2020-10-15 20:37 - 000000910 _____ C:\Users\EE\Downloads\singsing-netcologne-de-zertifikatskette.pem
2020-10-15 20:36 - 2020-10-15 20:36 - 000000936 _____ C:\Users\EE\Downloads\singsing-netcologne-de.pem
2020-10-15 20:27 - 2020-10-19 11:26 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-10-15 13:24 - 2020-10-15 13:24 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-10-15 13:24 - 2020-10-15 13:24 - 000000993 _____ C:\ProgramData\Desktop\Firefox.lnk
2020-10-15 13:23 - 2020-10-15 13:23 - 057691944 _____ (Mozilla) C:\Users\EE\Downloads\Firefox_Setup_82.0b5.exe
2020-10-13 10:50 - 2020-10-17 18:14 - 000270336 _____ C:\Users\EE\AppData\Roaming\cookies.sqlite
2020-10-09 17:24 - 2020-04-24 02:22 - 000136040 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus.sys
2020-10-09 16:05 - 2013-05-19 02:02 - 000039168 _____ (Scarlet.Crush Productions) C:\WINDOWS\system32\Drivers\ScpVBus.sys
2020-10-06 18:30 - 2020-10-06 18:33 - 395330948 _____ C:\Users\EE\Downloads\AppleTV2,1_4.4.2_9A336a_Restore.ipsw
2020-10-06 17:54 - 2020-10-06 17:54 - 000046405 _____ C:\Users\EE\Downloads\Fiberecable Way from AIN06 to CC04 .pptx
2020-10-06 05:23 - 2020-10-06 05:28 - 698406382 _____ C:\Users\EE\Downloads\AppleTV2,1_6.2_11D257c_Restore.ipsw
2020-10-06 05:21 - 2020-10-06 05:23 - 279991056 _____ C:\Users\EE\Downloads\AppleTV2,1_4.2.1_8C154_Restore.ipsw
2020-10-05 22:17 - 2020-10-05 22:19 - 205796673 _____ C:\Users\EE\Downloads\factoryrestore-2.3.1.img.zip
2020-10-02 19:30 - 2020-10-02 19:30 - 002189243 _____ C:\Users\EE\Downloads\snow3rd.zip
2020-10-02 19:27 - 2020-10-02 19:27 - 000000000 ____D C:\Users\EE\.android
2020-09-30 20:10 - 2020-09-30 20:10 - 113188864 _____ C:\Users\EE\Downloads\calibre-5.0.1.msi
2020-09-30 20:09 - 2020-09-30 20:09 - 000000000 ____D C:\Users\EE\AppData\Roaming\Sony Corporation
2020-09-29 17:43 - 2020-04-24 02:22 - 000166760 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2020-09-28 18:59 - 2020-09-28 18:59 - 000010042 _____ C:\Users\EE\Downloads\DHL-Paketmarke_2UF24XZ4AG2D_1_Eugen_Einhorn.pdf
2020-09-26 18:31 - 2020-09-26 18:31 - 000013749 _____ C:\Users\EE\Downloads\DHL-Paketmarke_FFBTS9W6CZN8_1_Eugen_Einhorn.pdf
2020-09-26 14:33 - 2020-09-26 14:33 - 005264826 _____ C:\Users\EE\Downloads\Thomas_Electronic_Online_Shop_Bedienungsanleitung_Panasonic_BD-Recorder_UBS80_UBC80_PDF.pdf
2020-09-24 13:59 - 2020-09-24 13:59 - 000225280 _____ C:\Users\EE\Downloads\boot.firm
2020-09-24 13:35 - 2020-09-24 13:34 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-10-22 20:01 - 2020-05-13 15:20 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-10-22 20:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-10-22 19:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-10-22 19:43 - 2020-05-13 15:18 - 000000000 ____D C:\Users\EE\AppData\Local\Adobe
2020-10-22 15:49 - 2019-12-07 16:51 - 000743650 _____ C:\WINDOWS\system32\perfh007.dat
2020-10-22 15:49 - 2019-12-07 16:51 - 000150072 _____ C:\WINDOWS\system32\perfc007.dat
2020-10-22 15:49 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2020-10-22 15:43 - 2020-04-27 22:16 - 000000000 ____D C:\Users\EE\AppData\LocalLow\Mozilla
2020-10-22 15:43 - 2020-04-27 22:03 - 000000000 ___RD C:\Users\EE\OneDrive
2020-10-22 15:43 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-10-22 15:42 - 2020-04-28 16:26 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-10-22 15:42 - 2020-04-27 22:16 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-10-22 15:42 - 2020-04-27 22:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-10-22 15:42 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-10-22 15:42 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-10-22 14:33 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-10-22 14:31 - 2020-05-01 19:48 - 000795000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-10-22 11:39 - 2020-04-28 05:35 - 000002349 _____ C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2020-10-22 11:39 - 2020-04-27 22:14 - 000002341 _____ C:\Users\EE\Desktop\Microsoft Teams.lnk
2020-10-22 11:12 - 2020-04-27 22:01 - 000000000 ____D C:\Users\EE\AppData\Local\Packages
2020-10-21 14:43 - 2020-04-27 22:13 - 000000000 ____D C:\Users\EE\AppData\Local\PlaceholderTileLogoFolder
2020-10-21 14:15 - 2020-04-27 22:16 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-10-21 13:05 - 2020-08-09 19:58 - 000002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-10-21 13:05 - 2020-08-09 19:58 - 000002257 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-10-21 13:05 - 2020-08-09 19:58 - 000002257 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2020-10-21 12:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2020-10-20 12:21 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-10-20 12:05 - 2020-04-27 22:17 - 000000000 ____D C:\ProgramData\Packages
2020-10-20 12:05 - 2020-04-27 22:01 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-10-20 12:05 - 2020-04-27 22:01 - 000000000 ___RD C:\Users\EE\3D Objects
2020-10-20 12:05 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2020-10-20 12:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-10-20 12:04 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-10-20 12:02 - 2019-12-07 11:14 - 000000000 __RHD C:\Users\Public\Libraries
2020-10-20 11:59 - 2020-08-23 18:35 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-10-20 11:59 - 2020-04-28 19:55 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-10-20 11:59 - 2020-04-27 22:04 - 000000000 ____D C:\AMD
2020-10-20 11:58 - 2020-09-09 20:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2020-10-20 11:58 - 2020-07-16 19:54 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mazda
2020-10-20 11:58 - 2020-07-05 22:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 14.0
2020-10-20 11:58 - 2020-07-05 22:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter
2020-10-20 11:58 - 2020-06-10 22:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bowers & Wilkins
2020-10-20 11:58 - 2020-05-31 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2020-10-20 11:58 - 2020-05-30 18:31 - 000000000 ____D C:\Program Files\UNP
2020-10-20 11:58 - 2020-05-01 12:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2020-10-20 11:58 - 2020-04-28 21:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reader for pc
2020-10-20 11:58 - 2020-04-28 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-10-20 11:58 - 2020-04-28 21:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2020-10-20 11:58 - 2020-04-28 20:43 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperOrca
2020-10-20 11:58 - 2020-04-28 20:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2020-10-20 11:58 - 2020-04-28 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-10-20 11:58 - 2020-04-28 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigaset QuickSync
2020-10-20 11:58 - 2020-04-28 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synology
2020-10-20 11:58 - 2020-04-28 17:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unknown Device Identifier 8.01
2020-10-20 11:58 - 2020-04-28 17:01 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2020-10-20 11:58 - 2020-04-28 16:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2020-10-20 11:58 - 2020-04-28 16:38 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Control Center
2020-10-20 11:58 - 2020-04-28 16:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUB to MOBI
2020-10-20 11:58 - 2020-04-28 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2020-10-20 11:58 - 2020-04-28 16:33 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dreamboxEDIT
2020-10-20 11:58 - 2020-04-28 16:19 - 000000000 ____D C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2020-10-20 11:58 - 2020-04-28 16:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2020-10-20 11:58 - 2020-04-28 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClipGrab
2020-10-20 11:58 - 2020-04-27 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2020-10-20 11:58 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-10-20 11:58 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-10-20 11:58 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-10-20 11:58 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-10-20 11:57 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2020-10-20 11:24 - 2020-04-28 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2020-10-20 11:24 - 2020-04-28 19:55 - 000000000 ____D C:\Program Files\Realtek
2020-10-20 11:24 - 2020-04-28 18:00 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2020-10-20 11:24 - 2020-04-28 17:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2020-10-20 11:24 - 2020-04-28 17:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation
2020-10-20 11:24 - 2020-04-28 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Samsung
2020-10-20 11:24 - 2020-04-28 16:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2020-10-20 11:24 - 2020-04-27 22:04 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2020-10-20 11:24 - 2020-04-27 22:04 - 000000000 ____D C:\Program Files\AMD
2020-10-20 11:21 - 2019-12-07 16:54 - 000000000 ___SD C:\WINDOWS\system32\AppV
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Com
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-10-20 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-10-20 11:20 - 2019-12-07 16:54 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-10-20 11:20 - 2019-12-07 16:54 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-10-20 11:20 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-10-20 11:20 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2020-10-20 11:20 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-10-20 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2020-10-20 11:20 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2020-10-20 11:12 - 2019-12-07 16:53 - 000000000 ____D C:\WINDOWS\OCR
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\winrm
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\WCN
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\slmgr
2020-10-20 11:10 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\dsc
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\IME
2020-10-20 11:10 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-10-20 10:17 - 2020-04-27 22:35 - 000000000 ____D C:\Program Files\Microsoft Office
2020-10-19 20:26 - 2020-04-27 22:16 - 000000204 _____ C:\Users\EE\Documents\UCI-Gutscheine.txt
2020-10-19 12:31 - 2020-04-28 17:34 - 000000000 ____D C:\ProgramData\Acronis
2020-10-19 11:14 - 2020-07-05 22:26 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12
2020-10-15 16:09 - 2020-04-28 20:55 - 000000000 ____D C:\Users\EE\AppData\Local\CrashDumps
2020-10-11 17:19 - 2020-05-01 15:43 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2020-10-11 09:32 - 2020-05-01 15:43 - 000002190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-10-05 20:21 - 2020-04-27 21:57 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-10-05 19:22 - 2020-04-28 16:27 - 000000000 ____D C:\Users\EE\AppData\Roaming\TeamViewer
2020-10-03 02:33 - 2019-12-07 11:18 - 000835472 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-10-03 02:33 - 2019-12-07 11:18 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-10-02 15:53 - 2020-04-28 16:17 - 000001076 _____ C:\Users\Public\Desktop\ClipGrab.lnk
2020-10-02 15:53 - 2020-04-28 16:17 - 000001076 _____ C:\ProgramData\Desktop\ClipGrab.lnk
2020-10-02 15:53 - 2020-04-28 16:17 - 000000000 ____D C:\Program Files (x86)\ClipGrab
2020-09-30 20:52 - 2020-04-27 22:16 - 000000000 ____D C:\Users\EE\Documents\Calibre Bibliothek
2020-09-30 20:11 - 2020-04-28 16:18 - 000001029 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2020-09-30 20:11 - 2020-04-28 16:18 - 000001029 _____ C:\ProgramData\Desktop\calibre - E-book management.lnk
2020-09-30 20:11 - 2020-04-28 16:18 - 000000000 ____D C:\Program Files (x86)\Calibre2
2020-09-30 20:09 - 2020-04-28 21:52 - 000000000 ____D C:\ProgramData\Sony Corporation
2020-09-30 18:35 - 2020-08-25 16:46 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2020-09-25 18:56 - 2020-04-27 22:16 - 000000000 ____D C:\ProgramData\Mozilla
2020-09-24 13:35 - 2020-04-27 22:20 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-09-24 13:35 - 2020-04-27 22:20 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-09-24 13:35 - 2020-04-27 22:20 - 000002021 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-09-24 13:34 - 2020-04-27 22:19 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2020-10-13 10:50 - 2020-10-17 18:14 - 000270336 _____ () C:\Users\EE\AppData\Roaming\cookies.sqlite
2020-06-24 12:50 - 2020-06-24 13:04 - 000000600 _____ () C:\Users\EE\AppData\Local\PUTTY.RND

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         
Addition.txt auch?

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-10-2020
durchgeführt von EE (22-10-2020 20:02:48)
Gestartet von C:\Users\EE\Downloads
Windows 10 Pro Version 2004 19041.572 (X64) (2020-10-20 10:04:54)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-590958880-3246498269-3680704979-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-590958880-3246498269-3680704979-503 - Limited - Disabled)
EE (S-1-5-21-590958880-3246498269-3680704979-1001 - Administrator - Enabled) => C:\Users\EE
Gast (S-1-5-21-590958880-3246498269-3680704979-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-590958880-3246498269-3680704979-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Sicherheitspaket by F-Secure (Disabled - Up to date) {8AC831E5-DF57-0DC0-D07B-4DE1A5FFFD9A}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Acronis Universal Restore Bootable Media Builder (HKLM-x32\...\{8C7086EC-DD84-4F9F-9671-6B899545EA32}) (Version: 11.5.40067 - Acronis)
AirPort (HKLM-x32\...\{AA68AAAE-41F0-40B5-8896-5947F5FD6889}) (Version: 5.6.1.2 - Apple Inc.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
ANT Drivers Installer x64 (HKLM\...\{998DF7E5-262F-4391-A117-8D9E383B8C0A}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Assessments on Client (HKLM-x32\...\{C1C83898-5A60-AE9D-A3AB-7534375CA453}) (Version: 8.100.26866 - Microsoft) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{E323667D-F082-4379-87DF-BF7C9E00F9D5}) (Version: 5.0.1 - Kovid Goyal)
ClipGrab 3.8.14 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version:  - The ClipGrab Project)
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\CopyTrans Suite) (Version: 4.100 - WindSolutions)
CrystalDiskInfo 8.4.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
Data Lifeguard Diagnostic version 1.36 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dot4 (HKLM\...\{3EEDA265-C6F3-4EC1-A317-1C9315DEDDDE}) (Version: 1.0.0.0 - HP)
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version:  - )
EaseUS Partition Master 14.0 (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)
Elevated Installer (HKLM-x32\...\{5053832D-D695-4E6A-A777-8CC79DF61A85}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM-x32\...\{870D4BDF-96FD-4A68-ACF4-A35CB31E0B3A}) (Version: 21.3 - Thüringer Landesamt für Finanzen)
EPUB to MOBI (HKLM-x32\...\{C65AA5AE-8B80-46B6-ADFC-BBF1EFF2AD98}_is1) (Version:  - epubtomobi.com)
Excel (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
FileZilla Client 3.48.0 (HKLM-x32\...\FileZilla Client) (Version: 3.48.0 - Tim Kosse)
Garmin Express (HKLM-x32\...\{040c11a0-b209-4b21-b861-163f52e01d88}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{F8609938-A6C9-4796-87BC-471F62EA4F0E}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries) Hidden
Gigaset QuickSync (HKLM\...\{90cbe112-5ab9-4ff3-aa3a-25dec23359ab}) (Version: 8.6.0880.1 - Gigaset Communications GmbH)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iPod-Unterstützung (HKLM\...\{D9DF60DE-E46E-40DC-BAF6-546AA63013EC}) (Version: 120.7.3.55 - Apple Inc.)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kits Configuration Installer (HKLM-x32\...\{B74E65FD-CC47-41C5-4B89-791A3F61942D}) (Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes version 4.2.1.89 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.2.1.89 - Malwarebytes)
Mazda Toolbox (HKLM-x32\...\Mazda Toolbox) (Version:  - )
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.13231.20390 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 86.0.622.48 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.49 - )
Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 20.169.0823.0006 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\Teams) (Version: 1.3.00.28779 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{97238E8A-4919-4A1E-965A-C6C36938F4CE}) (Version: 2.68.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.0 Preview 3 (x64) (HKLM-x32\...\{66ed90d9-d99c-4f52-866b-e42940abba3e}) (Version: 5.0.0.28814 - Microsoft Corporation)
Mozilla Firefox 83.0 (x64 de) (HKLM\...\Mozilla Firefox 83.0 (x64 de)) (Version: 83.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0 - Mozilla)
MyDriveConnect 4.0.4.2260 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.4.2260 - TomTom)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20200 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden
Outlook (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
PowerPoint (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7586 - Realtek Semiconductor Corp.)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.5 - Samsung)
Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Samsung SideSync (HKLM-x32\...\Samsung SideSync) (Version: 4.7.5.244 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SuperOrca (HKLM-x32\...\SuperOrca) (Version: 11.0.0.1 - Pantaray)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.2-24922 - Synology)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.4461 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.5.3 - TeamViewer)
TomTom HOME 2.8.0.2146 (HKLM-x32\...\TomTom HOME) (Version: 2.8.0.2146 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolkit Documentation (HKLM-x32\...\{6C870B12-6FF2-68FC-8C3B-DD177BBF3F92}) (Version: 8.100.26866 - Microsoft) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0a - Ghisler Software GmbH)
Unknown Device Identifier 8.01 (HKLM\...\Unknown Device Identifier_is1) (Version: 8.01 - Huntersoft)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.10 - VideoLAN)
Windows Assessment and Deployment Kit for Windows 8.1 (HKLM-x32\...\{e9e06304-a604-434b-b35f-d9beb94dc06d}) (Version: 8.100.26866 - Microsoft Corporation)
Windows-Treiberpaket - Apple Inc. Apple ODD (05/17/2010 3.1.0.0) (HKLM\...\D6B4CB6AD2F81752C2EF8DCF6AD5EBC567ADD45C) (Version: 05/17/2010 3.1.0.0 - Apple Inc.)
Windows-Treiberpaket - Atmel Corporation (libusb0) Atmel USB Devices  (10/02/2010 1.2.2.0) (HKLM\...\52DAED6955BA3A58B0EA4BAC7B5158E5BBB8B427) (Version: 10/02/2010 1.2.2.0 - Atmel Corporation)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Word (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
WPT Redistributables (HKLM-x32\...\{64F3FB9A-9250-B2D6-00B4-50BE0358AEE8}) (Version: 8.100.26866 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB}) (Version: 8.100.26837 - Microsoft) Hidden
Zeppelin Air Recovery Utility (HKLM-x32\...\{4AB30A93-1108-4703-B737-82C206771039}) (Version: 2.2.3.342 - Bowers & Wilkins) Hidden
Zeppelin Recovery Utility (HKLM-x32\...\{c771c813-6cad-441f-8719-818b1e4fd511}) (Version: 2.2.3.342 - Bowers & Wilkins)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.45.3.0_x86__kgqvnymyfvs32 [2020-10-22] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.46.6.0_x86__kgqvnymyfvs32 [2020-09-30] (king.com)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_120.1.741.0_x64__v10z8vjag6ke6 [2020-10-14] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa [2020-09-20] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-05-01] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-05-01] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-08-20] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.28.32802.0_x64__8wekyb3d8bbwe [2020-10-14] (Microsoft Corporation) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-590958880-3246498269-3680704979-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\EE\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-590958880-3246498269-3680704979-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\EE\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-27] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0006\amd64\FileSyncShell64.dll [2020-10-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-27] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm --app-url=hxxps://excel.office.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb --app-url=hxxps://outlook.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf --app-url=hxxps://powerpoint.office.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi --app-url=hxxps://word.office.com/

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2019-09-09 08:13 - 2019-09-09 08:13 - 001364992 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Garmin\Express\CefSharp.Core.dll
2020-08-27 14:45 - 2020-08-27 14:45 - 000073216 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Garmin\Express\FixBootSector.dll
2017-05-08 10:35 - 2017-05-08 10:35 - 000325632 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Garmin\Express\GpsImgWrapper.dll
2019-07-27 09:57 - 2019-07-27 09:57 - 096071680 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\libcef.dll
2014-10-24 21:34 - 2014-10-24 21:34 - 000880640 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\fsk.dll
2014-04-25 21:46 - 2014-04-25 21:46 - 000798720 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2020-08-27 14:45 - 2020-08-27 14:45 - 001976832 _____ (Apache Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\XercesLib.dll
2020-08-27 14:51 - 2020-08-27 14:51 - 000234496 _____ (Dynastream Innovations Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\ANT_WrappedLib.dll
2020-08-27 14:45 - 2020-08-27 14:45 - 002711552 _____ (Garmin International) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Garmin\Express\legacyio.dll
2017-05-08 10:35 - 2017-05-08 10:35 - 000343552 _____ (Garmin International, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\IMG_GPSMAP.dll
2020-08-27 14:45 - 2020-08-27 14:45 - 000425472 _____ (Garmin) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\XMLdll.dll
2020-05-31 10:47 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2014-04-25 21:33 - 2014-04-25 21:33 - 000348160 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\MSVCR71.dll
2020-04-27 22:44 - 2020-04-27 22:44 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-04-27 22:44 - 2020-04-27 22:44 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2020-08-27 14:47 - 2020-08-27 14:47 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\DSI_SiUSBXp_3_1.DLL
2014-04-25 21:47 - 2014-04-25 21:47 - 000034816 _____ (Sony Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperServicePS.dll
2019-07-27 09:57 - 2019-07-27 09:57 - 000762368 _____ (The Chromium Authors) [Datei ist nicht signiert] C:\Program Files (x86)\Garmin\Express\chrome_elf.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

SearchScopes: HKU\S-1-5-21-590958880-3246498269-3680704979-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-16] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\sharepoint.com -> hxxps://zvwtg-files.sharepoint.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-03-19 06:49 - 2020-04-28 21:38 - 000000885 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 activation.acronis.com web-api-tih.acronis.com 

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-590958880-3246498269-3680704979-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{81F7A38B-CD81-4CED-892C-F947E6F11561}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4B3E4161-88E2-403B-9543-3232A4894FE3}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{74C60B6D-A2DC-44AE-A72B-C98FD4308F9C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{171A9CC5-BFAA-4E12-B41B-18C1E7F05721}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FE57127F-1A7C-4F3D-9447-E6F805AFC8E1}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5F64E1FC-0B32-49BC-A343-EC341EA08827}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2531971E-F910-460E-8A4A-2A39645FD913}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EF6E14B3-AD34-4B2A-AB9E-A8FF64103988}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.3.52015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BE42364B-6854-41D1-9057-2F9EC404C47E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{F5C899F9-659E-4D9A-B527-C37A11F6AFA1}C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe (AVM Berlin) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B3830F7D-A231-4FB2-A64A-2E4D38856C09}C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe (AVM Berlin) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0E80A8A7-8BCD-40DF-AAC4-173CC11F277D}C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [TCP Query User{47C364C5-72E7-49BE-B547-B1EE37EBB5E8}C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [UDP Query User{12DBF554-2F1B-44B5-86E8-353C42752A7D}C:\program files (x86)\airport\aputil.exe] => (Allow) C:\program files (x86)\airport\aputil.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{588D9CA5-8BD4-4333-8B5A-B8F7F2AA9C00}C:\program files (x86)\airport\aputil.exe] => (Allow) C:\program files (x86)\airport\aputil.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2497B3A3-2B62-4B35-81F5-1997BFB54DA6}] => (Allow) C:\Program Files (x86)\AirPort\APAgent.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{E3D7C238-4D0B-4FF0-A77C-E9575F480967}C:\users\ee\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\ee\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{6D14EDE6-D7B6-4F3A-9155-6C9863DE297A}C:\users\ee\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\ee\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0B15DCC2-57A7-463C-B375-B69220B9781D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{04EFA5CE-E90E-4DBC-B56E-507C1482E87E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{720CD592-0CA5-4357-9E9A-FC7300C7BE2F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{27022CD7-6BA7-4C9B-A3FE-B4A41280D623}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B4C7658-3DD5-4FE2-8DA6-EC7216373EC5}] => (Allow) C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{FF86B428-8F30-4669-B89E-07EEADF7F05B}] => (Allow) C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [UDP Query User{4DF6ADE0-5D1D-4B26-A39A-7602E5FF539C}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> )
FirewallRules: [TCP Query User{BB2BB86B-E8B4-4A86-A508-0DDF4509018E}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> )
FirewallRules: [{4B948C5F-0307-4582-B284-91FBA1394CDC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{263EEE98-A513-4C39-8018-8D3747572EA0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{BAF6599F-2225-41FD-B7C5-EF3F14AB4713}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6D21D11D-BCFC-416E-B12A-D45F9A8F29F2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{E45EEE35-BA5F-4313-8087-4BBAE801225F}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe => Keine Datei
FirewallRules: [TCP Query User{67CB05B7-AB12-4B0E-A585-D92D2AC7B13D}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe => Keine Datei
FirewallRules: [{3D9AE743-5621-4EDE-8455-EE2D4275A6CF}] => (Allow) C:\Users\EE\AppData\Local\Programs\Opera\68.0.3618.56\opera.exe => Keine Datei
FirewallRules: [{1D210D5C-1DC2-4CEB-BB98-D051BE6B9246}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C5A48AFF-415E-4B2F-9E5C-84422F3DD446}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C78635BC-4439-49A0-975B-F929F71E613D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{20715143-DE19-47D3-8E99-7EAF4C359705}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{63F37ECB-13DA-4980-8E59-81D903DED075}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E380D01-3AB2-4898-BAD8-2089E7E128B8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{39A2F1CD-4A32-4D42-9DE0-F8E87DBD3F34}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BAF74011-DFCD-47CE-ADC6-C8FEEC42D2A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51500593-765B-4F96-8F2C-747512A3FAA1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1103B775-6E7A-4F46-B889-7ABF60154621}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Wiederherstellungspunkte =========================

22-10-2020 14:26:14 Windows Modules Installer

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/22/2020 08:01:37 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 08:01:36 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 07:43:32 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 07:43:26 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 07:39:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 07:38:13 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 04:22:44 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/22/2020 03:43:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.


Systemfehler:
=============
Error: (10/22/2020 01:22:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9WZDNCRFJ364-MICROSOFT.SKYPEAPP

Error: (10/22/2020 11:07:33 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/21/2020 08:49:19 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (10/21/2020 08:49:19 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (10/21/2020 08:44:35 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (10/21/2020 08:44:35 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (10/21/2020 08:41:45 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.

Error: (10/21/2020 08:41:45 PM) (Source: Schannel) (EventID: 4114) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver empfangene Zertifikat wurde von einer nicht vertrauenswürdigen Zertifizierungsstelle ausgestellt. Aus diesem Grund können keine der im Zertifikat enthalten Daten überprüft werden. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat.


Windows Defender:
===================================
Date: 2020-10-22 14:33:23.1490000Z
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6BFC93CB-F780-4039-8949-EB9A00222965}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2020-10-21 13:39:26.5950000Z
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.325.748.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.17500.4
Fehlercode: 0x8007045b
Fehlerbeschreibung: Der Computer wird heruntergefahren. 

CodeIntegrity:
===================================

Date: 2020-10-22 19:57:29.3230000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:57:28.8850000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:55:22.2720000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:50:17.0250000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:35:16.3840000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:27:31.7930000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:13:54.9470000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-22 19:07:46.1370000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: LENOVO FBKT79AUS 04/17/2014
Hauptplatine: LENOVO SHARKBAY
Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 16308.07 MB
Verfügbarer physikalischer RAM: 11078.12 MB
Summe virtueller Speicher: 18740.07 MB
Verfügbarer virtueller Speicher: 12496.9 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.38 GB) (Free:78.04 GB) NTFS
Drive d: (Volume) (Fixed) (Total:1397.26 GB) (Free:343.19 GB) NTFS
Drive g: () (Removable) (Total:3.68 GB) (Free:0.91 GB) FAT32
Drive w: (video) (Network) (Total:3572.56 GB) (Free:633.29 GB) NTFS
Drive x: (photo) (Network) (Total:3572.56 GB) (Free:633.29 GB) NTFS
Drive y: (music) (Network) (Total:3572.56 GB) (Free:633.29 GB) NTFS
Drive z: (homes) (Network) (Total:3572.56 GB) (Free:633.29 GB) NTFS

\\?\Volume{65dc3a1e-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.57 GB) (Free:0.1 GB) NTFS
\\?\Volume{65dc3a1e-0000-0000-0000-807c3b000000}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 65DC3A1E)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=541 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1397.3 GB) (Disk ID: F9EA6CE4)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (Size: 3.7 GB) (Disk ID: 077F1EFD)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C)

==================== Ende von Addition.txt =======================
         
__________________

Alt 24.10.2020, 18:14   #19
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Zitat:
Hosts: 127.0.0.1 activation.acronis.com web-api-tih.acronis.com
Cracks, Keygens und andere illegale Software

Bitte lesen => Cracks, Keygens und andere illegale Software

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 25.10.2020, 12:17   #20
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Ist raus!


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-10-2020
Ran by EE (25-10-2020 12:11:52)
Running from C:\Users\EE\Downloads
Windows 10 Pro Version 2004 19041.572 (X64) (2020-10-20 10:04:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-590958880-3246498269-3680704979-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-590958880-3246498269-3680704979-503 - Limited - Disabled)
EE (S-1-5-21-590958880-3246498269-3680704979-1001 - Administrator - Enabled) => C:\Users\EE
Gast (S-1-5-21-590958880-3246498269-3680704979-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-590958880-3246498269-3680704979-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Sicherheitspaket by F-Secure (Disabled - Up to date) {8AC831E5-DF57-0DC0-D07B-4DE1A5FFFD9A}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Acronis Universal Restore Bootable Media Builder (HKLM-x32\...\{8C7086EC-DD84-4F9F-9671-6B899545EA32}) (Version: 11.5.40067 - Acronis)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.012.20048 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.445 - Adobe)
AirPort (HKLM-x32\...\{AA68AAAE-41F0-40B5-8896-5947F5FD6889}) (Version: 5.6.1.2 - Apple Inc.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
ANT Drivers Installer x64 (HKLM\...\{998DF7E5-262F-4391-A117-8D9E383B8C0A}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Assessments on Client (HKLM-x32\...\{C1C83898-5A60-AE9D-A3AB-7534375CA453}) (Version: 8.100.26866 - Microsoft) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{E323667D-F082-4379-87DF-BF7C9E00F9D5}) (Version: 5.0.1 - Kovid Goyal)
ClipGrab 3.8.14 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version:  - The ClipGrab Project)
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\CopyTrans Suite) (Version: 4.100 - WindSolutions)
CrystalDiskInfo 8.4.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
Data Lifeguard Diagnostic version 1.36 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dot4 (HKLM\...\{3EEDA265-C6F3-4EC1-A317-1C9315DEDDDE}) (Version: 1.0.0.0 - HP)
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version:  - )
EaseUS Partition Master 14.0 (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)
Elevated Installer (HKLM-x32\...\{5053832D-D695-4E6A-A777-8CC79DF61A85}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM-x32\...\{870D4BDF-96FD-4A68-ACF4-A35CB31E0B3A}) (Version: 21.3 - Thüringer Landesamt für Finanzen)
EPUB to MOBI (HKLM-x32\...\{C65AA5AE-8B80-46B6-ADFC-BBF1EFF2AD98}_is1) (Version:  - epubtomobi.com)
Excel (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
FileZilla Client 3.48.0 (HKLM-x32\...\FileZilla Client) (Version: 3.48.0 - Tim Kosse)
Garmin Express (HKLM-x32\...\{040c11a0-b209-4b21-b861-163f52e01d88}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{F8609938-A6C9-4796-87BC-471F62EA4F0E}) (Version: 7.1.3.0 - Garmin Ltd or its subsidiaries) Hidden
Gigaset QuickSync (HKLM\...\{90cbe112-5ab9-4ff3-aa3a-25dec23359ab}) (Version: 8.6.0880.1 - Gigaset Communications GmbH)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iPod-Unterstützung (HKLM\...\{D9DF60DE-E46E-40DC-BAF6-546AA63013EC}) (Version: 120.7.3.55 - Apple Inc.)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kits Configuration Installer (HKLM-x32\...\{B74E65FD-CC47-41C5-4B89-791A3F61942D}) (Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes version 4.2.1.89 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.2.1.89 - Malwarebytes)
Mazda Toolbox (HKLM-x32\...\Mazda Toolbox) (Version:  - )
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.13231.20390 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 86.0.622.51 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.49 - )
Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\Teams) (Version: 1.3.00.28779 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{97238E8A-4919-4A1E-965A-C6C36938F4CE}) (Version: 2.68.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.0 Preview 3 (x64) (HKLM-x32\...\{66ed90d9-d99c-4f52-866b-e42940abba3e}) (Version: 5.0.0.28814 - Microsoft Corporation)
Mozilla Firefox 83.0 (x64 de) (HKLM\...\Mozilla Firefox 83.0 (x64 de)) (Version: 83.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0 - Mozilla)
MyDriveConnect 4.0.4.2260 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.4.2260 - TomTom)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20200 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden
Outlook (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
PowerPoint (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7586 - Realtek Semiconductor Corp.)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.5 - Samsung)
Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Samsung SideSync (HKLM-x32\...\Samsung SideSync) (Version: 4.7.5.244 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SuperOrca (HKLM-x32\...\SuperOrca) (Version: 11.0.0.1 - Pantaray)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.2-24922 - Synology)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.4461 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.5.3 - TeamViewer)
TomTom HOME 2.8.0.2146 (HKLM-x32\...\TomTom HOME) (Version: 2.8.0.2146 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolkit Documentation (HKLM-x32\...\{6C870B12-6FF2-68FC-8C3B-DD177BBF3F92}) (Version: 8.100.26866 - Microsoft) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0a - Ghisler Software GmbH)
Unknown Device Identifier 8.01 (HKLM\...\Unknown Device Identifier_is1) (Version: 8.01 - Huntersoft)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.10 - VideoLAN)
Windows Assessment and Deployment Kit for Windows 8.1 (HKLM-x32\...\{e9e06304-a604-434b-b35f-d9beb94dc06d}) (Version: 8.100.26866 - Microsoft Corporation)
Windows-Treiberpaket - Apple Inc. Apple ODD (05/17/2010 3.1.0.0) (HKLM\...\D6B4CB6AD2F81752C2EF8DCF6AD5EBC567ADD45C) (Version: 05/17/2010 3.1.0.0 - Apple Inc.)
Windows-Treiberpaket - Atmel Corporation (libusb0) Atmel USB Devices  (10/02/2010 1.2.2.0) (HKLM\...\52DAED6955BA3A58B0EA4BAC7B5158E5BBB8B427) (Version: 10/02/2010 1.2.2.0 - Atmel Corporation)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Word (HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
WPT Redistributables (HKLM-x32\...\{64F3FB9A-9250-B2D6-00B4-50BE0358AEE8}) (Version: 8.100.26866 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB}) (Version: 8.100.26837 - Microsoft) Hidden
Zeppelin Air Recovery Utility (HKLM-x32\...\{4AB30A93-1108-4703-B737-82C206771039}) (Version: 2.2.3.342 - Bowers & Wilkins) Hidden
Zeppelin Recovery Utility (HKLM-x32\...\{c771c813-6cad-441f-8719-818b1e4fd511}) (Version: 2.2.3.342 - Bowers & Wilkins)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.45.4.0_x86__kgqvnymyfvs32 [2020-10-23] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.46.6.0_x86__kgqvnymyfvs32 [2020-09-30] (king.com)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_120.1.741.0_x64__v10z8vjag6ke6 [2020-10-14] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa [2020-10-22] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-05-01] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-05-01] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-10-23] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.28.32802.0_x64__8wekyb3d8bbwe [2020-10-14] (Microsoft Corporation) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-590958880-3246498269-3680704979-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\EE\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-590958880-3246498269-3680704979-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\EE\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-27] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\20.169.0823.0008\amd64\FileSyncShell64.dll [2020-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-27] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm --app-url=hxxps://excel.office.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb --app-url=hxxps://outlook.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf --app-url=hxxps://powerpoint.office.com/
ShortcutWithArgument: C:\Users\EE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi --app-url=hxxps://word.office.com/

==================== Loaded Modules (Whitelisted) =============

2019-09-09 07:13 - 2019-09-09 07:13 - 001364992 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\CefSharp.Core.dll
2020-08-27 13:45 - 2020-08-27 13:45 - 000073216 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\FixBootSector.dll
2017-05-08 09:35 - 2017-05-08 09:35 - 000325632 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\GpsImgWrapper.dll
2019-07-27 08:57 - 2019-07-27 08:57 - 096071680 _____ () [File not signed] C:\Program Files (x86)\Garmin\Express\libcef.dll
2014-10-24 20:34 - 2014-10-24 20:34 - 000880640 _____ () [File not signed] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\fsk.dll
2014-04-25 20:46 - 2014-04-25 20:46 - 000798720 _____ () [File not signed] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\19359ae49469bf9b7c0ec45f0eea3f26\A4.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\31bbb048d58f46af4cfa28cd4e099104\AEM.Actions.CCAA.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\7e97dbe1c85ac52a48d67685460652a6\AEM.Plugin.EEU.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\8bee449877e06bf000e1f1ec1604586c\AEM.Plugin.Hotkeys.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\4a3353337c092fe874ae108d3ba51513\AEM.Plugin.Source.Kit.Server.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\29121686d9f5d67741abcd49a5c2c9ae\AEM.Plugin.WinMessages.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\6ee7bd7e0eed422d737ce4f21f6eb548\AEM.Plugin.REG.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\2f72afa817c34b1c4a60fee3fcc4c731\AEM.Plugin.GD.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\4c19cb7ef5a596c9c78e5b7038e3e4c8\AEM.Server.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\c24e1d4da1c13f81d3034fe46ba24dba\AEM.Server.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\95acdb99eebfe4cb86b02ddd75be71b2\APM.Foundation.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\f505e4013c0e682e207242832dc3e078\ATICCCom.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\3efaa283749a8f8afc6639237806cba3\CCC.Implementation.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\b0be19065b449a2be0451c84e9fce166\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\bb049f96432b6c4c1ea8df310d833a7b\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\06ce82d29df3b120d1c6d7ba2870d5c3\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\6947d4bfb6465a7c61eb358daece96a6\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000209920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\0c08621acf17e48f68fa61ddab84ddac\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\0a4da03b450177dfa063a630d3c2b573\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\caf2e83db5a102be792d988f838649ff\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\bba49ec305a868b0189462b030656e2c\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\ef988e699eb93f2b7c853c7043566ae0\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\a6bd3254d6472d2bb3e87fc6f5ac4b86\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000678912 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\30610fa2453dbfba4035ee0fc2b0e3a7\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000320512 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.87ad5c75#\c0683dac226bfdbbf41c407be35ccff3\CLI.Aspect.OverDrive5.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\150fd64b19ba00575a7aaec8cc7cd89a\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\6176ef4c8e573c94e3b066828d154992\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\2fc4bab34ce8a42d29a42d0dd087e83a\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000158208 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\c01c9624b6e291fdf32ee32993bfa623\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\130ff1328a469bb9534cedcf39b7f96c\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\9052d5b9f2fab20e4a2652b52b8c3242\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\34883581803ef3b333a1f5df50927559\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\2a525bb5a644f82439408dd0383e03f7\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\263aca372794af5c2fc91e2d25b63686\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\6311b0871d54d57444c8e9d919e30bcf\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\d72a00e202c3ee355ef41142062418f7\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\4cafd0a4a8f52f56e0d75a0e179897c4\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\870138516582e687c8a19aca6675ea83\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000240640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\18eaddc2e85ec9f005ef2f1d240d24c5\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\35b0b6cdacd9fd2eb5c7db560c92dc64\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\870704bbc2a57e1582d81970e6b717c0\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\6b4b6080fcb4808712aff27b8b4499c4\CLI.Caste.A4.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\87c2dcf1efc129b103a639c14036d2a5\CLI.Caste.A4.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\998f193e1fb63b22595c5f7f84d3927b\CLI.Caste.A4.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\e9eb2096d1e131923ea2ee1d2121ff03\CLI.Caste.Fuel.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\9000bf0ede0f93f0ed79e701ae075f08\CLI.Caste.Fuel.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\11c69aacaa7c9b10427bd8954c4a842d\CLI.Caste.Fuel.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\85c2eba119de338e3da90232f602fa14\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\fc5af3277af3d5c1928ba3cba1eabd5b\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\35615ccb8b23e35455ce9d2479f51707\CLI.Caste.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\a82a86aed250fbc7421fbe045b7db2ef\CLI.Caste.HydraVision.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\f354b73f96881e0709b4a16472f44261\CLI.Caste.HydraVision.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\416a400a169e40b3a825b1947609dba8\CLI.Caste.HydraVision.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\5e13abc6087bd2f0676c2c2ef741a0a0\CLI.Caste.Platform.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\91dd0084012236f72a12f521be8a4c5c\CLI.Caste.Platform.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\b98b84f769c0cf52a296a431231c2ce1\CLI.Caste.Platform.Dashboard.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\8de86f586a5d0a9425fdd6e718269676\CLI.Component.Runtime.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000901632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\25f444f878ee0c3f96719ddd33ebcddc\CLI.Component.Systemtray.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\aef778787ba52f42c68f093a9d4add9d\CLI.Component.Dashboard.ProfileManager2.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\f512565685b279c1700a21624a5d924b\CLI.Component.Runtime.Shared.Private.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\ca285c9b4a783b09ba8e20cb95f7559b\CLI.Component.Runtime.Extension.EEU.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\8974e8f25a64974b10b3e299ce7b81a2\CLI.Component.Dashboard.Shared.Private.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\03d9aa207ca7f7b7251852757b4c79df\CLI.Component.Client.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\39af1744750edfb562e1c557c0aad599\CLI.Component.Dashboard.Shared.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\fe9ef509eb10786babacac3a28e55d40\CLI.Foundation.Private.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\bf8a2da2163fe392ed53c2548d748058\CLI.Foundation.XManifest.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\5d750f3d02daec64ef440816b2c8cfec\CLI.Foundation.CoreAudioAPI.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 001079808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\fdb772f14559558c4193534f3103e991\CLI.Foundation.Client.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\bd090a55d4540d9316d5da12de28aa48\CLI.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\73b0e8845a50ec92668bce66a5a4f26f\DEM.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\64697c8e4fc6da96b67331a3c1389e86\DEM.Graphics.I0601.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\301070414d6c8a0a028c9ea6818d601a\DEM.Graphics.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\a17b4c3d74df9517d803f975194d387e\Fuel.Foundation.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000296960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\271b296c742210a101d2c37a135dc77d\LOG.Foundation.Implementation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\73e92e134b8a77712aef782f5e944020\LOG.Foundation.Private.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\afe92e2845d87de72910b3847af885ab\LOG.Foundation.Implementation.Private.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\1fadb8808e2ca0c0bf668f8252ef9cfa\LOG.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\c70d4b55b999ae7c9b7c4ca005c38843\MOM.Foundation.ni.dll
2020-10-23 11:42 - 2020-10-23 11:42 - 000402944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\fb32e450f472fb004d61ab4079b92f44\MOM.Implementation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\7f97f11127f043940860427c076d3217\NEWAEM.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\ab1112f2228f3958f5baa3ec33ca0ab5\ADL.Foundation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\5abd11236f7ab07b75bea76bdaa1df70\APM.Server.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000298496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\186ac9b8f1d7223400deffab68be17d5\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 001654272 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\ba64a732a628bc96fbcafb18a53dccbc\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 006336512 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\24b45e885d481b6b37e2f0f5e09c83a7\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 008027648 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\a3edcc871b93a985a8f4e9c1145342cd\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 001159680 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine7332395e#\fa98da9f2fe2f00a216dddbe35fda719\CLI.Combined.Graphics.Aspects2.Runtime.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\b224174aec9212b381eb09566b24b836\CLI.Component.Client.Shared.Private.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000234496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\c321e44e2aa4d731b8ae32854ed01e1c\CLI.Component.Runtime.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\153e2101f6abf386c777f2aadafa88da\CLI.Component.Dashboard.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000016896 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0703\413434b73bdd20a1801945be908f1dc5\DEM.Graphics.I0703.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\d1e472525b028a30aabbceffe7161197\DEM.Graphics.I0706.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\6fcf9f1120024078d4ae0bea706b06f5\DEM.Graphics.I0709.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\9b14c1a163e3999ee02c08835c478b62\DEM.Graphics.I0712.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\46d2597d16397de4af70002beaf9e556\DEM.Graphics.I0804.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\eb1494854922511a30a0fbb1714af12e\DEM.Graphics.I0805.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\cbbefe12ed70338abbf18d18e2bee560\DEM.Graphics.I0812.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\d231dc765d4c79ecfb668a0049d8b696\DEM.Graphics.I0906.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\4bda0373f3b13fe3c574d5d31029f6cb\DEM.Graphics.I0912.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\8db87337f7fd0ffc6bb40f2784841d35\DEM.Graphics.I1010.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\0867ac150278cc9c0d031950d1a64996\Localization.Foundation.Private.ni.dll
2020-10-23 11:42 - 2020-10-23 11:42 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\af9de29f7a1dca84c724fe01ecf4f8e4\ResourceManagement.Foundation.Implementation.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\9942abf6a8427326a80226bd5c29b03f\ResourceManagement.Foundation.Private.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\d9453c185381355fc0815bdb0b70f6e7\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2020-10-23 11:40 - 2020-10-23 11:40 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\4ac525569587a2891e7909a33f1010fd\CLI.Caste.Graphics.Shared.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 003268096 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\8ff66e72ba7b5f3d8fdd3a31fa0c090d\CLI.Caste.Graphics.Runtime.ni.dll
2020-08-27 13:45 - 2020-08-27 13:45 - 001976832 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Garmin\Express\XercesLib.dll
2020-08-27 13:51 - 2020-08-27 13:51 - 000234496 _____ (Dynastream Innovations Inc.) [File not signed] C:\Program Files (x86)\Garmin\Express\ANT_WrappedLib.dll
2020-08-27 13:45 - 2020-08-27 13:45 - 002711552 _____ (Garmin International) [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\legacyio.dll
2017-05-08 09:35 - 2017-05-08 09:35 - 000343552 _____ (Garmin International, Inc.) [File not signed] C:\Program Files (x86)\Garmin\Express\IMG_GPSMAP.dll
2020-08-27 13:45 - 2020-08-27 13:45 - 000425472 _____ (Garmin) [File not signed] C:\Program Files (x86)\Garmin\Express\XMLdll.dll
2020-05-31 09:47 - 2019-02-21 17:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2014-04-25 20:33 - 2014-04-25 20:33 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\MSVCR71.dll
2020-04-27 21:44 - 2020-04-27 21:44 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-04-27 21:44 - 2020-04-27 21:44 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\0f311c2e34cbabf45f81b80d577980ba\Microsoft.WindowsAPICodePack.ni.dll
2020-10-23 11:41 - 2020-10-23 11:41 - 002546688 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\824e1dea37e75bf4a8c3536ac87d7a7a\Microsoft.WindowsAPICodePack.Shell.ni.dll
2020-08-27 13:47 - 2020-08-27 13:47 - 000090112 _____ (Silicon Laboratories, Inc.) [File not signed] C:\Program Files (x86)\Garmin\Express\DSI_SiUSBXp_3_1.DLL
2019-07-27 08:57 - 2019-07-27 08:57 - 000762368 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Garmin\Express\chrome_elf.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

SearchScopes: HKU\S-1-5-21-590958880-3246498269-3680704979-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-16] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-10-02] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-590958880-3246498269-3680704979-1001\...\sharepoint.com -> hxxps://zvwtg-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2020-10-25 12:09 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-590958880-3246498269-3680704979-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BE42364B-6854-41D1-9057-2F9EC404C47E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{F5C899F9-659E-4D9A-B527-C37A11F6AFA1}C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe (AVM Berlin) [File not signed]
FirewallRules: [TCP Query User{B3830F7D-A231-4FB2-A64A-2E4D38856C09}C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7390.annexb.06.23.recover-image.exe (AVM Berlin) [File not signed]
FirewallRules: [UDP Query User{0E80A8A7-8BCD-40DF-AAC4-173CC11F277D}C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [TCP Query User{47C364C5-72E7-49BE-B547-B1EE37EBB5E8}C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_fon_wlan_7320-06.34.recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [UDP Query User{12DBF554-2F1B-44B5-86E8-353C42752A7D}C:\program files (x86)\airport\aputil.exe] => (Allow) C:\program files (x86)\airport\aputil.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{588D9CA5-8BD4-4333-8B5A-B8F7F2AA9C00}C:\program files (x86)\airport\aputil.exe] => (Allow) C:\program files (x86)\airport\aputil.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2497B3A3-2B62-4B35-81F5-1997BFB54DA6}] => (Allow) C:\Program Files (x86)\AirPort\APAgent.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{E3D7C238-4D0B-4FF0-A77C-E9575F480967}C:\users\ee\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\ee\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{6D14EDE6-D7B6-4F3A-9155-6C9863DE297A}C:\users\ee\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\ee\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0B15DCC2-57A7-463C-B375-B69220B9781D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{04EFA5CE-E90E-4DBC-B56E-507C1482E87E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{720CD592-0CA5-4357-9E9A-FC7300C7BE2F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{27022CD7-6BA7-4C9B-A3FE-B4A41280D623}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B4C7658-3DD5-4FE2-8DA6-EC7216373EC5}] => (Allow) C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{FF86B428-8F30-4669-B89E-07EEADF7F05B}] => (Allow) C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [UDP Query User{4DF6ADE0-5D1D-4B26-A39A-7602E5FF539C}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> )
FirewallRules: [TCP Query User{BB2BB86B-E8B4-4A86-A508-0DDF4509018E}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> )
FirewallRules: [{4B948C5F-0307-4582-B284-91FBA1394CDC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{263EEE98-A513-4C39-8018-8D3747572EA0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{BAF6599F-2225-41FD-B7C5-EF3F14AB4713}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6D21D11D-BCFC-416E-B12A-D45F9A8F29F2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{E45EEE35-BA5F-4313-8087-4BBAE801225F}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [TCP Query User{67CB05B7-AB12-4B0E-A585-D92D2AC7B13D}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [{3D9AE743-5621-4EDE-8455-EE2D4275A6CF}] => (Allow) C:\Users\EE\AppData\Local\Programs\Opera\68.0.3618.56\opera.exe => No File
FirewallRules: [{1D210D5C-1DC2-4CEB-BB98-D051BE6B9246}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C5A48AFF-415E-4B2F-9E5C-84422F3DD446}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C78635BC-4439-49A0-975B-F929F71E613D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{20715143-DE19-47D3-8E99-7EAF4C359705}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{63F37ECB-13DA-4980-8E59-81D903DED075}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E380D01-3AB2-4898-BAD8-2089E7E128B8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{39A2F1CD-4A32-4D42-9DE0-F8E87DBD3F34}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BAF74011-DFCD-47CE-ADC6-C8FEEC42D2A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51500593-765B-4F96-8F2C-747512A3FAA1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1103B775-6E7A-4F46-B889-7ABF60154621}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{505D0E03-89B2-4F88-8D81-78183AF0B281}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FEE55C52-5A67-4753-8B23-5246ED4FA339}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F117155F-1506-4EC3-9AD2-0BC0E0A6B2E2}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{95CECFC2-B515-48A0-89C0-C09A140A8C0C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AE4682C4-BBE3-4313-912A-16C77092BCCD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E919A5A6-3F11-4090-A793-A00AB0A4714A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7F2A7D25-A383-4880-8F2D-A034237B80F8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{00516226-6D18-43C8-90BF-7741A2306560}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12109.10002.53004.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{0BF1E24A-F47B-4F9A-ACEA-66BC85ADAA1F}C:\users\ee\downloads\fritz.box_7490-07.12-recover_en.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover_en.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [UDP Query User{C679BBE4-3FB4-46DA-8356-0092D3DEC300}C:\users\ee\downloads\fritz.box_7490-07.12-recover_en.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover_en.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [TCP Query User{4C05FD2B-6646-4197-ABA6-0C4E8B8623C3}C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [UDP Query User{83303054-93C8-4327-BB6B-BA8CE90DECE3}C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [TCP Query User{5DD00145-37C6-4739-930C-7E29DE66A5C9}C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [UDP Query User{396FD8FC-B6BF-4325-895F-E4FEE5D749AB}C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe] => (Allow) C:\users\ee\downloads\fritz.box_7490-07.12-recover.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)

==================== Restore Points =========================

22-10-2020 13:26:14 Windows Modules Installer

==================== Faulty Device Manager Devices ============

Name: Intel(R) Ethernet Connection I217-LM
Description: Intel(R) Ethernet Connection I217-LM
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: e1i65x64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (10/25/2020 12:08:56 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/25/2020 12:07:43 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/25/2020 11:58:17 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/25/2020 10:57:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/25/2020 10:31:07 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.

Error: (10/25/2020 10:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-T3C33N7.local already in use; will try DESKTOP-T3C33N7-2.local instead

Error: (10/25/2020 10:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 DESKTOP-T3C33N7.local. Addr 192.168.178.20

Error: (10/25/2020 10:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.20:5353   16 DESKTOP-T3C33N7.local. AAAA 2001:4DD3:7ECA:0000:3599:BCBD:B2A8:CFF8


System errors:
=============
Error: (10/23/2020 10:40:02 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147500053.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/23/2020 09:25:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-T3C33N7)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
===================================
Date: 2020-10-22 14:33:23.1490000Z
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6BFC93CB-F780-4039-8949-EB9A00222965}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2020-10-21 13:39:26.5950000Z
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.325.748.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.17500.4
Fehlercode: 0x8007045b
Fehlerbeschreibung: Der Computer wird heruntergefahren. 

CodeIntegrity:
===================================

Date: 2020-10-25 12:02:51.0180000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 12:43:36.3300000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 12:43:35.3110000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 12:43:35.2240000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 12:35:57.0880000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 11:25:41.4910000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 11:25:41.4490000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

Date: 2020-10-25 11:11:00.1770000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Windows signing level requirements.

==================== Memory info =========================== 

BIOS: LENOVO FBKT79AUS 04/17/2014
Motherboard: LENOVO SHARKBAY
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 33%
Total physical RAM: 16308.07 MB
Available physical RAM: 10816.04 MB
Total Virtual: 18740.07 MB
Available Virtual: 12795.45 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.38 GB) (Free:75.66 GB) NTFS
Drive d: (Volume) (Fixed) (Total:1397.26 GB) (Free:343.19 GB) NTFS
Drive g: () (Removable) (Total:3.68 GB) (Free:0.76 GB) FAT32

\\?\Volume{65dc3a1e-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.57 GB) (Free:0.1 GB) NTFS
\\?\Volume{65dc3a1e-0000-0000-0000-807c3b000000}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 65DC3A1E)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=541 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1397.3 GB) (Disk ID: F9EA6CE4)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (Size: 3.7 GB) (Disk ID: 077F1EFD)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C)

==================== End of Addition.txt =======================
         


Alt 25.10.2020, 12:25   #21
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Störende, veraltete oder unnötige Programme deinstallieren

Bitte über Programme und Features (appwiz.cpl) deinstallieren:

Acronis Universal Restore Bootable Media Builder
Adobe Acrobat Reader DC
Adobe Flash Player 32 NPAPI
EaseUS Partition Master 14.0
Excel
Word
__________________
--> Internet gesperrt von Netcologne, laut Info habe ich Gootkit !

Alt 25.10.2020, 12:26   #22
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Mir ist noch aufgefallen, dass ich diese Meldung von Malwarebytes erhalte, wenn ich Word schließe.
Angehängte Grafiken
Dateityp: png malware.png (18,5 KB, 48x aufgerufen)

Alt 25.10.2020, 12:47   #23
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Die Programme sind deinstalliert.

Alt 25.10.2020, 12:52   #24
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Zitat:
VirtualCloneDrive
Hau mal diesen Quatsch auch noch weg. Das braucht doch nun wirklich niemand mehr.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 25.10.2020, 13:04   #25
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Das stimmt wohl
Ist runter!

Alt 25.10.2020, 13:11   #26
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Scripting/Repair mit FRST64
  • Kopiere den gesamten Inhalt der folgenden Code-Box:
    Code:
    ATTFilter
    Start::
    CloseProcesses:
    AV: Sicherheitspaket by F-Secure (Disabled - Up to date) {8AC831E5-DF57-0DC0-D07B-4DE1A5FFFD9A}
    ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
    HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
    FF NewTab: Mozilla\Firefox\Profiles\5yckw81r.default -> https://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-05-30 07:51:55&bName=&bitmask=0600
    FF NewTab: Mozilla\Firefox\Profiles\ay837uv1.default-release -> https://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-05-30 07:51:55&bName=&bitmask=0600
    cmd: netsh advfirewall reset
    emptytemp:
    End::
             
  • Starte nun FRST und klicke direkt den Reparieren Button.Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
  • Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
  • Gegebenenfalls muss dein Rechner neu gestartet werden.
  • Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.
__________________
Logfiles bitte immer in CODE-Tags posten

Geändert von cosinus (25.10.2020 um 13:27 Uhr) Grund: Fix Korrektur

Alt 25.10.2020, 13:30   #27
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Code:
ATTFilter
Fix result of Farbar Recovery Scan Tool (x64) Version: 24-10-2020
Ran by EE (25-10-2020 13:23:24) Run:1
Running from C:\Users\EE\Downloads
Loaded Profiles: EE
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
Virustotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb
Virustotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi
Virustotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm
Virustotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf
AV: Sicherheitspaket by F-Secure (Disabled - Up to date) {8AC831E5-DF57-0DC0-D07B-4DE1A5FFFD9A}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
FF NewTab: Mozilla\Firefox\Profiles\5yckw81r.default -> https://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-05-30 07:51:55&bName=&bitmask=0600
FF NewTab: Mozilla\Firefox\Profiles\ay837uv1.default-release -> https://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-05-30 07:51:55&bName=&bitmask=0600
C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb
C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi
C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm
C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf
cmd: netsh advfirewall reset
emptytemp:

*****************

Processes closed successfully.
"VirusTotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb" => not found
"VirusTotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi" => not found
"VirusTotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm" => not found
"VirusTotal: C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf" => not found
"AV: Sicherheitspaket by F-Secure (Disabled - Up to date) {8AC831E5-DF57-0DC0-D07B-4DE1A5FFFD9A}" => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"Firefox newtab" => removed successfully
"Firefox newtab" => removed successfully
"C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb" => not found
"C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi" => not found
"C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm" => not found
"C:\Users\EE\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf" => not found

========= netsh advfirewall reset =========

OK.


========= End 1 CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 80510304 B
Java, Flash, Steam htmlcache => 291 B
Windows/system/drivers => 48921790 B
Edge => 1003438 B
Chrome => 9319408 B
Firefox => 1316584060 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 157344 B
NetworkService => 193080 B
EE => 1052797634 B

RecycleBin => 0 B
EmptyTemp: => 2.3 GB temporary data Removed.

================================


The system needed a reboot.

==== End 1 Fixlog 13:27:42 ====
         

Alt 25.10.2020, 13:37   #28
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Kontrollscans mit MBAM und RK

Wir sind fast fertig. Jetzt ist es an der Zeit für Kontrollscans mit
Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 25.10.2020, 14:21   #29
Mastere
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Code:
ATTFilter
RogueKiller Anti-Malware V14.7.4.0 (x64) [Oct 22 2020] (Free) von Adlice Software
Mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Betriebssystem : Windows 10 (10.0.19041) 64 bits
Gestartet in : Normaler Modus
Benutzer : EE [Administrator]
Gestartet von : C:\Users\EE\Desktop\RogueKiller64.exe
Signaturen : 20201021_093136, Treiber : Geladen
Modus : Standard-Scan, Scannen -- Datum : 2020/10/25 14:11:44 (Dauer : 00:04:17)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Prozesse ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Prozessmodule ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Dienste ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Tasks ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> XX - System Policies
  [PUM.Policies (Potenziell bösartig)] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -- 0 -> Gefunden

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ WMI ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Hosts-Datei ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Dateien ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Webbrowser ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> Firefox Config
  [PUM.SearchEngine (Potenziell bösartig)] browser.search.defaultenginename (C:\Users\EE\AppData\Roaming\Mozilla\Firefox\Profiles\ay837uv1.default-release\prefs.js) -- Bing Default Search -> Gefunden
  [PUM.SearchEngine (Potenziell bösartig)] browser.search.selectedEngine (C:\Users\EE\AppData\Roaming\Mozilla\Firefox\Profiles\ay837uv1.default-release\prefs.js) -- Bing Default Search -> Gefunden

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Anti-Rootkit : 0 (Driver: Geladen) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
         
Code:
ATTFilter
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 25.10.20
Scan-Zeit: 14:18
Protokolldatei: 8f13045a-16c4-11eb-a13a-00e07236b02b.json

-Softwaredaten-
Version: 4.2.1.89
Komponentenversion: 1.0.1070
Version des Aktualisierungspakets: 1.0.31980
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 19041.572)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-T3C33N7\EE

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 295584
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 2 Min., 27 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

Alt 25.10.2020, 14:23   #30
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Standard

Internet gesperrt von Netcologne, laut Info habe ich Gootkit !



Dann wären wir durch!

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Abschließend bitte noch einen Cleanup mit unserem TB-Cleanup-Script durchführen und unbedingt die Sicherheitsmaßnahmen lesen und umsetzen - beides ist in folgendem Lesestoff verlinkt:

__________________
Logfiles bitte immer in CODE-Tags posten

Thema geschlossen

Themen zu Internet gesperrt von Netcologne, laut Info habe ich Gootkit !
aktiviert, browser, computer, firefox, gelöscht, gesperrt, hallo zusammen, interne, internet, lieber, malwarebytes, microsoft, nachricht, netcologne, onlinebanking, registry, rootkit, seltsame, software, start, starte, suche, verhalten, version, zusammen



Ähnliche Themen: Internet gesperrt von Netcologne, laut Info habe ich Gootkit !


  1. Gootkit vollständig vom PC gelöscht?
    Log-Analyse und Auswertung - 24.10.2020 (36)
  2. Windows 10: Computer piept laut und behauptet, er sei gesperrt (Firefox)
    Log-Analyse und Auswertung - 06.06.2017 (15)
  3. Gootkit / Internetanbieter droht warnt mit Konsequenzen
    Diskussionsforum - 02.12.2016 (15)
  4. Japanisches Werbefenster (3dfg8g.info, 4qwe1g.info, 4asd2g.info) kommt immer wieder (Windows10)
    Plagegeister aller Art und deren Bekämpfung - 29.07.2016 (21)
  5. Schadsoftware erkannt laut Info Wartungscenter
    Log-Analyse und Auswertung - 12.08.2014 (2)
  6. Computer wurde gesperrt laut interpol soll ich 100 Euro strafe zahlen
    Log-Analyse und Auswertung - 08.02.2014 (7)
  7. Laut Meldung vom Virusprogramm habe ich den BOO/TDss.O' Virus
    Plagegeister aller Art und deren Bekämpfung - 12.01.2014 (24)
  8. Bizcoaching.info auch ich habe es
    Plagegeister aller Art und deren Bekämpfung - 01.09.2013 (3)
  9. Keine Internet Verbindung mehr laut Browser,msn ect
    Mülltonne - 07.05.2012 (3)
  10. Trojaner, Windows 7 gesperrt, muss laut Bundeskriminalamt Geld bezahlen
    Log-Analyse und Auswertung - 19.02.2012 (21)
  11. Backdoor.Win32.Gootkit.jd
    Plagegeister aller Art und deren Bekämpfung - 27.08.2010 (5)
  12. laut Hijack This habe ich keine Firewall und kein Antivirenprogramm ...
    Antiviren-, Firewall- und andere Schutzprogramme - 09.12.2009 (1)
  13. Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schon
    Plagegeister aller Art und deren Bekämpfung - 26.08.2007 (1)
  14. HILFEEE! Ich habe laut escan 34 viren :kloppen:
    Log-Analyse und Auswertung - 14.07.2005 (0)
  15. T-sinus 154 dsl basic und Netcologne
    Netzwerk und Hardware - 03.04.2005 (1)
  16. T-Sinus 154 Komfort & Netcologne
    Netzwerk und Hardware - 24.03.2005 (5)
  17. Netcologne DSL-Flat
    Netzwerk und Hardware - 23.01.2003 (7)

Zum Thema Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! - Code: Alles auswählen Aufklappen ATTFilter 2020-10-20 11:17 - 2020-10-20 11:17 - 000644576 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2020-10-20 11:17 - 2020-10-20 11:17 - 000643584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2020-10-20 11:17 - - Internet gesperrt von Netcologne, laut Info habe ich Gootkit !...
Archiv
Du betrachtest: Internet gesperrt von Netcologne, laut Info habe ich Gootkit ! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.