Trojaner-Board - Alles probiert, komme nicht weiter, habe keine Ahnung, schwarzer Bildschirm nach Windowsupdate

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Alles probiert, komme nicht weiter, habe keine Ahnung, schwarzer Bildschirm nach Windowsupdate (https://www.trojaner-board.de/163849-alles-probiert-komme-habe-keine-ahnung-schwarzer-bildschirm-windowsupdate.html)

Hallo Schrauber,
bin leicht frustriert. Die automatische Reparatur funktioniert leider nicht.
PC auffrischen: Fehlermeldung -> Probleme beim aktualisieren. Es wurden keine Änderungen vorgenommen.
Systemwiederherstellung: Fehlermeldung -> Lokaler Datenträger C: Sie müssen für dieses Laufwerk Computerschutz aktivieren.
Aus lauter Verzweiflung habe ich heute die CD DE-Cleaner Rettungssystem aus 2012 versucht. Aktualisierung der Datenbank wurde verweigert. Ich habe dann auf den Stand von 2012 gescannt und war verblüfft. Hier nur ein Auszug, weil Datei zu groß.

Code:

Avira / Linux Version 1.9.150.0

Copyright (c) 2010 by Avira GmbH

All rights reserved.
 

WARNING: [This key has expired] Initialization

engine set:         8.2.4.242

VDF Version:        7.11.8.98 
 

key file:           /AntiVir/rescue_cd.key

registered user:    DE-Cleaner Rettungssystem

serial number:      2213856893

key expires:        Mär 31 2012

update service:     unavailable!
 

Scan start time: Mo 16 Feb 2015 11:03:29 UTC

Command line: /AntiVir/scancl --allfiles --defaultaction=clean,rename --withtype=dial,spr,adspy,bdc,heur-dblext,pck --log=/tmp/rescue-system_scan_20150216-1103.log --logformat=singleline --quarantine=/tmp/quarantine --heurlevel=2 --nolinks -z --archivemaxsize=2602MB /media 
 

auto excluding /sys from scanning (is a special fs)

auto excluding /proc from scanning (is a special fs)

configuration file: /AntiVir/scancl.conf

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/Microsoft Shared/Ink/micaut.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadox.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msjro.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Windows Defender/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/XAudio2_8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/mfdvdec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..d-searchintegration_31bf3856ad364e35_6.3.9600.17415_none_811756d5977fe2fd/IMESEARCHPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/IMEPADSM.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs404.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs411.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.3.9600.17415_none_35ebe763a74f36bb/padrs804.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-directshow-asf_31bf3856ad364e35_6.3.9600.17415_none_161d250f06a8a6d4/qasf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-displayswitch_31bf3856ad364e35_6.3.9600.17415_none_e82156322c99a971/DisplaySwitch.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17415_none_5f733065cb885d62/eappgnui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-ehome-tvratings_31bf3856ad364e35_6.3.9600.17415_none_1ef232dee221adb0/tvratings.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-fax-common_31bf3856ad364e35_6.3.9600.17415_none_0764542258bebc92/FXSCOMEX.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-fax-mapi_31bf3856ad364e35_6.3.9600.17415_none_4affa9b48005d622/FXSEXT32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

   ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-commonpal_31bf3856ad364e35_6.3.9600.17415_none_8ac33df9f6359d3f/ProximityCommonPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-common_31bf3856ad364e35_6.3.9600.17415_none_b90b112f5f123bd8/ProximityCommon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-rtapipal_31bf3856ad364e35_6.3.9600.17415_none_c348997356d3f23e/ProximityRtapiPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/g711codc.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/tapi3.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapicore_31bf3856ad364e35_6.3.9600.17415_none_df997dc34eb4cf4e/tapiperf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/VBICodec.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/WSTPager.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-video-tvvideocontrol_31bf3856ad364e35_6.3.9600.17415_none_ea0fef988b373dc7/MSVidCtl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.17415_none_664a77d902ccd130/vds_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17415_none_d046838989dfe045/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17467_none_d01274818a069ea8/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisdecd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

   ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.3.9600.17415_none_6b06644b95924abb/IMEDICAPICCPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-cacpad_31bf3856ad364e35_6.3.9600.17415_none_056e049f9dcd597f/imkrcac.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-migration_31bf3856ad364e35_6.3.9600.17415_none_bd5c810fbf7bc997/imkrmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-padresource_31bf3856ad364e35_6.3.9600.17415_none_d7b77cf0a4e91448/padrs412.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-skfpad_31bf3856ad364e35_6.3.9600.17415_none_e175c59c77fa076c/imkrskf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..simple-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_547d7f35e052ae6f/msdaosp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/oeimport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/WinMail.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-media-mp3acm_31bf3856ad364e35_6.3.9600.17415_none_00c18a254406a5d4/l3codecp.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpps_31bf3856ad364e35_6.3.9600.17415_none_4376af3b575d4893/wmpps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-n..iagnosticsframework_31bf3856ad364e35_6.3.9600.17415_none_714721adfc2a38c2/ndfetw.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..ponents-mdac-sqlxml_31bf3856ad364e35_6.3.9600.17415_none_ae5f9cb388dff938/sqlxmlx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntlanui2_31bf3856ad364e35_6.3.9600.17415_none_cb11b3a7f9d286d9/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-p..ellextensionhandler_31bf3856ad364e35_6.3.9600.17415_none_908ce85aadbead14/XPSSHHDR.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-panmap_31bf3856ad364e35_6.3.9600.17415_none_fe48b39f3a852b67/panmap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

 ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-peertopeeradmin_31bf3856ad364e35_6.3.9600.17415_none_dc35c99eeb475272/p2pnetsh.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

  ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_9e2c4d65e2c1ef06/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadco.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msadds.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/msadc/msdaprst.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Program Files (x86)/Common Files/System/Ole DB/msdatt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
Avira / Linux Version 1.9.150.0
Copyright (c) 2010 by Avira GmbH
All rights reserved.

WARNING: [This key has expired] Initialization
engine set: 8.2.4.242
VDF Version: 7.11.8.98

key file: /AntiVir/rescue_cd.key
registered user: DE-Cleaner Rettungssystem
serial number: 2213856893
key expires: Mär 31 2012
update service: unavailable!

Scan start time: Mo 16 Feb 2015 11:03:29 UTC
Command line: /AntiVir/scancl --allfiles --defaultaction=clean,rename --withtype=dial,spr,adspy,bdc,heur-dblext,pck --log=/tmp/rescue-system_scan_20150216-1103.log --logformat=singleline --quarantine=/tmp/quarantine --heurlevel=2 --nolinks -z --archivemaxsize=2602MB /media

auto excluding /sys from scanning (is a special fs)
auto excluding /proc from scanning (is a special fs)
configuration file: /AntiVir/scancl.conf
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/Microsoft Shared/Ink/micaut.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadomd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msador15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadox.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/ado/msjro.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/msadc/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Program Files (x86)/Common Files/System/msadc/msadco.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/Microsoft.NET/Framework/sbs_microsoft.jscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/Microsoft.NET/Framework/sbs_mscordbi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/intl.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/iprtprio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/umdmxfrm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AdvancedInstallers/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AdvancedInstallers/cmiv2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/amstream.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/appmgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AuditNativeSnapIn.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/AuthFWGP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/avicap32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/colorui.dll <<< Is the ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/cmcfg32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dot3hc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dplaysvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dplayx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpmodemx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
/SysWOW64/dxmasf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/IME/IMEJP/IMJPPRED.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/IME/IMEJP/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/msdxm.ocx <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/npmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/ntasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/SysWOW64/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-n..ty-assistant-client_31bf3856ad364e35_6.3.9600.17415_none_0ba9b734590de510/NcaApi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-narrator_31bf3856ad364e35_6.3.9600.17415_none_b97d7e29abd72d30/Narrator.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-networkprofile_31bf3856ad364e35_6.3.9600.17415_none_73faf6937e43fccc/nlmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-networkprofile_31bf3856ad364e35_6.3.9600.17415_none_73faf6937e43fccc/npmproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-mfdvdec_31bf3856ad364e35_6.3.9600.17415_none_0411a0754fea29c4/mfdvdec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-p..ntalcontrolsservice_31bf3856ad364e35_6.3.9600.17415_none_b3ac3252aa5a5b6b/wpcsvc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.3.9600.17415_none_97696364a9122507/sysmon.ocx <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.3.9600.17415_none_97696364a9122507/wvc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.3.9600.17415_none_0f363fab279eeda4/dmocx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-commonpal_31bf3856ad364e35_6.3.9600.17415_none_8ac33df9f6359d3f/ProximityCommonPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-common_31bf3856ad364e35_6.3.9600.17415_none_b90b112f5f123bd8/ProximityCommon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-proximity-rtapipal_31bf3856ad364e35_6.3.9600.17415_none_c348997356d3f23e/ProximityRtapiPal.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17415_none_09400d1a828d7a10/rascfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17415_none_09400d1a828d7a10/rasmxs.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17484_none_08f35d5c82c72450/rascfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasbase_31bf3856ad364e35_6.3.9600.17484_none_08f35d5c82c72450/rasmxs.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.3.9600.17415_none_5a7fe4aa68a3c1e6/cmcfg32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.3.9600.17415_none_a708de906feb1606/iprtprio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-regctrl_31bf3856ad364e35_6.3.9600.17415_none_0bc16e6b88555956/RegCtrl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.3.9600.17415_none_ef8e5a9de3f6db8e/clb.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.3.9600.17415_none_32b7bc650a04033e/racpldlg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.3.9600.17415_none_05e17c5d2c61bacd/wshext.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scanprofiles_31bf3856ad364e35_6.3.9600.17415_none_42c6d9925b401d44/scansetting.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scanprofiles_31bf3856ad364e35_6.3.9600.17415_none_42c6d9925b401d44/wiascanprofiles.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/dispex.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/scrobj.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/wscript.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-scripting_31bf3856ad364e35_6.3.9600.17415_none_43c7f84f08782672/wshcon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17238_none_4c39062452bd4a6f/delegatorprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17238_none_4c39062452bd4a6f/storagewmi_passthru.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17415_none_4c4ba8ea52afc0d6/delegatorprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_6.3.9600.17415_none_4c4ba8ea52afc0d6/storagewmi_passthru.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-streambufferengine_31bf3856ad364e35_6.3.9600.17415_none_2deb5e6ab98ad4f1/sbeio.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17415_none_cc1f1314c7680b8c/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.3.9600.17415_none_6c3031069fd50051/syssetup.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.3.9600.17090_none_41e3ecb6bba29f59/srclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.3.9600.17415_none_423f7520bb5d3320/srclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-t..lservices-workspace_31bf3856ad364e35_6.3.9600.17415_none_cc4ea5a3623cff49/TSWorkspace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-t..s-sessionenvservice_31bf3856ad364e35_6.3.9600.17415_none_da3dfac6efc53db4/rdvvmtransport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/g711codc.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapi3_31bf3856ad364e35_6.3.9600.17415_none_5ca8570397aea2b2/tapi3.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapicore_31bf3856ad364e35_6.3.9600.17415_none_df997dc34eb4cf4e/tapiperf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-tapisetup_31bf3856ad364e35_6.3.9600.17415_none_6552cffca3483ad8/TapiSysprep.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..d-manager-psfactory_31bf3856ad364e35_6.3.9600.17415_none_6b29e085a4926e77/VscMgrPS.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/cca.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/VBICodec.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_6.3.9600.17415_none_5ea044f53f8edc05/WSTPager.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-video-tvvideocontrol_31bf3856ad364e35_6.3.9600.17415_none_ea0fef988b373dc7/MSVidCtl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.17415_none_664a77d902ccd130/vds_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17415_none_d046838989dfe045/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.3.9600.17467_none_d01274818a069ea8/eventcls.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/Mpeg2Data.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/MSDvbNP.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/MSNP.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisdecd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.3.9600.17415_none_d75cdd635f2dd974/psisrndr.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..eakerstemmer-korean_31bf3856ad364e35_7.0.9600.17415_none_b6d73288a53c184b/korwbrkr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.3.9600.17415_none_ffe4a7a6ff793060/winsockhc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17238_none_32c9e58909305059/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17238_none_32c9e58909305059/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17415_none_32dc884f0922c6c0/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17415_none_32dc884f0922c6c0/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17489_none_3294da030957efb3/wudriver.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.9.9600.17489_none_3294da030957efb3/wups.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.9.9600.17489_none_dc9f9a43af0f21af/wuwebv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.3.9600.17415_none_2df3e04abb7190fe/wiatrace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.9.9600.17415_none_dce7488faed9f8bc/wuwebv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-wordpad_31bf3856ad364e35_6.3.9600.17415_none_291a1e6c7503b9b8/WordpadFilter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_networking-mpssvc_31bf3856ad364e35_6.3.9600.17415_none_05d92c12c148d771/WfHC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_srpuxnativesnapin_31bf3856ad364e35_6.3.9600.17415_none_e3e2bb450a0a57de/SrpUxNativeSnapIn.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17079_none_c0c8e20f5f17e14f/MpClient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17079_none_c0c8e20f5f17e14f/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17347_none_c0e756f15f015243/MpClient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_windows-defender-service_31bf3856ad364e35_6.3.9600.17347_none_c0e756f15f015243/MpOAV.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_devicepairingproxy_31bf3856ad364e35_6.3.9600.17415_none_c55a71773132c587/DevicePairingProxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_fdwnet_31bf3856ad364e35_6.3.9600.17415_none_d0150c888f71bca9/fdWNet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-a..c-performance-layer_31bf3856ad364e35_6.3.9600.17415_none_a523710bba6f4205/dmscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_fdssdp_31bf3856ad364e35_6.3.9600.17415_none_cfca51fa8f9e6327/fdSSDP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-hyper-v-g..aller-win6x-package_31bf3856ad364e35_6.3.9600.16384_none_6903587fe444ef1b/Windows6.2-HyperVIntegrationServices-x86.cab --> x86_microsoft-hyper-v-integration-services_31bf3856ad364e35_6.3.9600.16385_none_366657450c182ac2\vmictimeprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [archive scan abort]
[renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-hyper-v-g..aller-win6x-package_31bf3856ad364e35_6.3.9600.16384_none_6903587fe444ef1b/Windows6.x-HyperVIntegrationServices-x86.cab --> x86_wvmic.inf_31bf3856ad364e35_6.3.9600.16385_none_968283a5680527fe\vmictimeprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [archive scan abort]
[renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-acledit_31bf3856ad364e35_6.3.9600.17415_none_fccddfab77f1f80c/acledit.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-acmcorecodecs_31bf3856ad364e35_6.3.9600.17415_none_b5c13af2152862c8/msadp32.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-acmcorecodecs_31bf3856ad364e35_6.3.9600.17415_none_b5c13af2152862c8/msg711.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.3.9600.17415_none_dae07b54ab02d120/dswave.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mcicda.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mciseq.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mci_31bf3856ad364e35_6.3.9600.17415_none_b1f9b88907980192/mciwave.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.3.9600.17415_none_21ea27672befe36c/msacm32.drv <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-authorizationmanagerui_31bf3856ad364e35_6.3.9600.17415_none_b6c656001b057afc/azroleui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-btpanui_31bf3856ad364e35_6.3.9600.17415_none_017c1588126b7149/btpanui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-bwcontexthandler_31bf3856ad364e35_6.3.9600.17415_none_73e277349e5b96f8/BWContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-c..gureexpandedstorage_31bf3856ad364e35_6.3.9600.17415_none_3160fa8c94d1ca5c/ConfigureExpandedStorage.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cfmifs_31bf3856ad364e35_6.3.9600.17415_none_850d34717464fa78/cfmifsproxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cmi_31bf3856ad364e35_6.3.9600.16384_none_3e6e0ecf762473d7/cmiv2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cmiadapter_31bf3856ad364e35_6.3.9600.16384_none_52b4fe842cccb496/cmiadapter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-console_31bf3856ad364e35_6.3.9600.17415_none_2b45b9c4c7d701a9/console.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-content-filter-office_31bf3856ad364e35_7.0.9600.17415_none_3710b3d4feaedfe5/offfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-cpfilters_31bf3856ad364e35_6.3.9600.17415_none_cc5750ebf98e5150/CPFilters.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-charcodedictionary_31bf3856ad364e35_6.3.9600.17415_none_be4d2e451414d65d/IMJPCD.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.3.9600.17415_none_a352a625a146deac/imjpmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.3.9600.17415_none_2b73bcc2710b6220/IMEAPIS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-lmprofile_31bf3856ad364e35_6.3.9600.17105_none_dd5756ef722dd77a/IMJPLMP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-lmprofile_31bf3856ad364e35_6.3.9600.17415_none_dd4c8cb57235eae0/IMJPLMP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-nameinput_31bf3856ad364e35_6.3.9600.17415_none_e84a9e115c8a2211/IMJPCMLD.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.3.9600.17415_none_821d9e488d7aab82/IMJPDCTP.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..anese-softkeyapplet_31bf3856ad364e35_6.3.9600.17415_none_0658d6dbdd903f47/imjpskey.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_6.3.9600.17415_none_3c50128a41c63c77/IMEFILES.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_6.3.9600.17415_none_1bfd7bb0f8338a5b/IMELM.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..characterlistapplet_31bf3856ad364e35_6.3.9600.17415_none_165f3d6a8735b3e7/IMJPCLST.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..ctx-directinput-cpl_31bf3856ad364e35_6.3.9600.17415_none_266c583a4a8970db/joy.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dplaysvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dplayx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dpmodemx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay4-payload_31bf3856ad364e35_1.0.9600.16384_none_e5259b1910dede14/dpwsockx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnlobby.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnsvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.3.9600.17415_none_d2aeaf50b8e377ca/IMJKAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..e-handwritingapplet_31bf3856ad364e35_6.3.9600.17415_none_a3953d9e0b999b79/IMJPCAC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..hared-versiondialog_31bf3856ad364e35_6.3.9600.17415_none_9f7baf1b5567f5aa/imever.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.3.9600.17415_none_27ad803a858bbbc9/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-customizer_31bf3856ad364e35_6.3.9600.17415_none_f7d57eb572607d7d/imjpcus.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..japanese-prediction_31bf3856ad364e35_6.3.9600.17415_none_144ed86c6198d6f9/IMJPPRED.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..lekanjifinderapplet_31bf3856ad364e35_6.3.9600.17415_none_77a00128642f25bb/IMJPSKF.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..me-japanese-dictapi_31bf3856ad364e35_6.3.9600.17415_none_6147a09330d203fa/IMJPDAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..njifinderdictionary_31bf3856ad364e35_6.3.9600.17415_none_db031faed131aee3/IMJPKDIC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/iyuv_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/msyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/tsbyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfmps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..oragecontexthandler_31bf3856ad364e35_6.3.9600.17415_none_5b7f350e4a9bccc6/StorageContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.3.9600.17415_none_7cedfbbfb2ac4657/ksuser.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..txvideoacceleration_31bf3856ad364e35_6.3.9600.17415_none_00c111f15d92f1de/dxva2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-data-pdf_31bf3856ad364e35_6.3.9600.17054_none_8b14dab8af3047a0/Windows.Data.Pdf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-data-pdf_31bf3856ad364e35_6.3.9600.17415_none_8b41224aaf0ee5cf/Windows.Data.Pdf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deskadp_31bf3856ad364e35_6.3.9600.17415_none_449830e399e9e074/deskadp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deskmon_31bf3856ad364e35_6.3.9600.17415_none_43c02b679a722165/deskmon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingfolder_31bf3856ad364e35_6.3.9600.17415_none_e11e9a9843074ad4/DevicePairingFolder.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicesetupui_31bf3856ad364e35_6.3.9600.17415_none_0a5efa7385e4337d/Dsui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/adprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/capiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/cngprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/wincredprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.3.9600.17415_none_e90e8a34ef389522/qdvd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicecenter_31bf3856ad364e35_6.3.9600.17415_none_3d5115311a6e8281/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17415_none_02ef9fb11e7054fa/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17481_none_029fef151eacb335/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.3.9600.17415_none_7f36c26655490681/DeviceProperties.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-deviceuxres_31bf3856ad364e35_6.3.9600.17415_none_b55b0bbce9576733/DeviceUxRes.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dfsui_31bf3856ad364e35_6.3.9600.17415_none_eeac620a1862de51/DfsShlEx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-difxapi_31bf3856ad364e35_6.3.9600.17415_none_9d2ffcf1b1921e23/difxapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-capture_31bf3856ad364e35_6.3.9600.16384_none_4d78e7ba3b244b5d/qcap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-devenum_31bf3856ad364e35_6.3.9600.17415_none_ee2a0b6f5b4b731f/devenum.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dmo_31bf3856ad364e35_6.3.9600.17415_none_af82a0b11a091615/msdmo.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-dv_31bf3856ad364e35_6.3.9600.17415_none_91c325a63b8286a9/qdv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.3.9600.17415_none_4afb8a00bda52bca/mpg2splt.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.3.9600.17415_none_a23de75cfc1a91d9/amstream.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.3.9600.17415_none_a23de75cfc1a91d9/mciqtz32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directshow-vfw-capture_31bf3856ad364e35_6.3.9600.17415_none_6b6a8627425004ad/vfwwdm32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.3.9600.16384_none_f7cfbe6c52e952c4/sbs_mscordbi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.3.9600.16384_none_e1f0b5a502b18fd9/sbscmp20_perfcounter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/dinput.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/dinput8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.3.9600.17415_none_b284799f270ebf8d/pid.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-xaudio2_8_31bf3856ad364e35_6.3.9600.17415_none_db6e9d21588acfad/XAudio2_8.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-diskcopy_31bf3856ad364e35_6.3.9600.17415_none_fc9d6413b2148894/diskcopy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-diskmanagement_31bf3856ad364e35_6.3.9600.17415_none_9684151a8b1d4126/dmintf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-docprop_31bf3856ad364e35_6.3.9600.17415_none_2e85dadb717b7381/docprop.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dot3gpui_31bf3856ad364e35_6.3.9600.17415_none_2a73fc6cb02642cf/dot3gpui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dot3helperclass_31bf3856ad364e35_6.3.9600.17415_none_1407cd8c61dadb82/dot3hc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-dssec_31bf3856ad364e35_6.3.9600.17415_none_ef5236e617e7d464/dssec.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-directx-xinput_31bf3856ad364e35_6.3.9600.17415_none_c7e4258d5952896c/XInput9_1_0.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-enhancedstorage-api_31bf3856ad364e35_6.3.9600.17415_none_6a1b2e4d2b267af4/EhStorAPI.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-es-configurepassword_31bf3856ad364e35_6.3.9600.17415_none_7ce6ae220c384492/EhStorPwdMgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-eventviewer_31bf3856ad364e35_6.3.9600.17415_none_02d77ffab77a9474/els.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-d..nese-eacommonapijpn_31bf3856ad364e35_6.3.9600.17415_none_26e00a97eb83d11f/IMJPAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.3.9600.17415_none_74a1f1a06c1e56a5/frprov.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.3.9600.17415_none_74a1f1a06c1e56a5/ustprov.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/adrclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmclient.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmshell.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmstormod.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srmtrace.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-fsrm-common_31bf3856ad364e35_6.3.9600.17415_none_5e9b0b0a7c2fecae/srm_ps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..licy-admin-scrptadm_31bf3856ad364e35_6.3.9600.17415_none_6655ef22803181f8/scrptadm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.3.9600.17415_none_86a86a73d52f755d/AdmTmpl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-g..policy-admin-appmgr_31bf3856ad364e35_6.3.9600.17415_none_8fa5bb64d159776b/appmgr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-gameuxmig_31bf3856ad364e35_6.3.9600.17415_none_bb04ab042deaf78e/gameuxmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-gdi-painting_31bf3856ad364e35_6.3.9600.17415_none_0c58377e376c1387/mf3216.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.3.9600.17415_none_cc3c2bedaa66d1dc/gptext.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.3.9600.17415_none_fa0397e58b0c44b3/gpscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-healthcenter_31bf3856ad364e35_6.3.9600.17238_none_4036ded07f42070c/ActionCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-healthcenter_31bf3856ad364e35_6.3.9600.17415_none_404981967f347d73/ActionCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.3.9600.17415_none_8b904c772f1a3ee5/itircl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.3.9600.17415_none_8b904c772f1a3ee5/itss.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17416_none_955b38163e0f319f/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17498_none_95630cd63e082f99/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_11.0.9600.17631_none_95480aba3e1d1c0a/pngfilt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-help-clientproxy_31bf3856ad364e35_6.3.9600.17415_none_5a3663f82f14ad07/HelpPaneProxy.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCCAC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCDIC.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.3.9600.17415_none_9015740b16df079a/IMTCSKF.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..ice-transliteration_31bf3856ad364e35_6.3.9600.17415_none_ed995eb3422dc9bf/elsTrans.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..escriptdetectiondll_31bf3856ad364e35_6.3.9600.17415_none_b7d80e4ab2ef1f80/elslad.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..l-chinese-migration_31bf3856ad364e35_6.3.9600.17415_none_0ff9341c1075b300/imtcmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..nal-nlsdownleveldll_31bf3856ad364e35_6.3.9600.17415_none_9d9562bf73632740/Nlsdl.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..odepage-57002-57011_31bf3856ad364e35_6.3.9600.17415_none_ce57f849f3b34ebb/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..odepage-iso2022core_31bf3856ad364e35_6.3.9600.17415_none_f51660738ba6b684/C_IS2022.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..onal-codepage-54936_31bf3856ad364e35_6.3.9600.17415_none_6fe7a5b95b0f6b65/C_G18030.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17416_none_5d5c10fac37028d1/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17498_none_5d63e5bac36926cb/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.0.9600.17631_none_5d48e39ec37e133c/JavaScriptCollectionAgent.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-icsigd_31bf3856ad364e35_6.3.9600.17415_none_cf57f46dbc6c2d23/icsigd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17498_none_717df5977a917477/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17631_none_7162f37b7aa660e8/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17416_none_e339d5bd6a7c1bd7/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17498_none_e341aa7d6a7519d1/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.0.9600.17631_none_e326a8616a8a0642/iedvtool.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17416_none_59be358fa20a052b/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17498_none_59c60a4fa2030325/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.0.9600.17631_none_59ab0833a217ef96/DiagnosticsTap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-controls_31bf3856ad364e35_11.0.9600.17416_none_717620d77a98767d/licmgr10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.0.9600.17416_none_30d507b5bbc6b4e5/F12Tools.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-imagingengine_31bf3856ad364e35_6.3.9600.17415_none_c0d55b40497b05aa/ImagingEngine.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.3.9600.17415_none_6b06644b95924abb/IMEDICAPICCPS.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-cacpad_31bf3856ad364e35_6.3.9600.17415_none_056e049f9dcd597f/imkrcac.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-migration_31bf3856ad364e35_6.3.9600.17415_none_bd5c810fbf7bc997/imkrmig.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-padresource_31bf3856ad364e35_6.3.9600.17415_none_d7b77cf0a4e91448/padrs412.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-skfpad_31bf3856ad364e35_6.3.9600.17415_none_e175c59c77fa076c/imkrskf.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-tools_31bf3856ad364e35_6.3.9600.17415_none_98e7d099991da57a/imkrudt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo4-codecs_31bf3856ad364e35_6.3.9600.17415_none_d0ba7dec72b49b4b/ir41_qc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo4-codecs_31bf3856ad364e35_6.3.9600.17415_none_d0ba7dec72b49b4b/ir41_qcx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-indeo5-codecs_31bf3856ad364e35_6.3.9600.17415_none_b9ece2b48c5be9ea/ir50_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ie-setup_31bf3856ad364e35_11.0.9600.17416_none_40d42493726e0aee/inseng.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ime-korean-commonapi_31bf3856ad364e35_6.3.9600.17415_none_6e83c2c36690cf52/imkrapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-international-els-core_31bf3856ad364e35_6.3.9600.17415_none_1d035c974fe7dae3/ELSCore.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-languagesdb_31bf3856ad364e35_6.3.9600.17415_none_05a7293d2f70b435/UserLanguageProfileCallback.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-luainstaller_31bf3856ad364e35_6.3.9600.17415_none_ada2d0d983ab52c2/luainstall.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-legacyhwui_31bf3856ad364e35_6.3.9600.17415_none_776081c663a0eb14/hdwwiz.cpl <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..-mdac-rds-shape-dll_31bf3856ad364e35_6.3.9600.17415_none_64fbce61d87e94c9/msadds.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..-temptable-provider_31bf3856ad364e35_6.3.9600.17415_none_b2e9d7ccd8819122/msdatt.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..dac-rds-persist-dll_31bf3856ad364e35_6.3.9600.17415_none_29998b1b42b5a066/msdaprst.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..drivercompatibility_31bf3856ad364e35_6.3.9600.17415_none_80c4bc7402ac3df7/MirrorDrvCompat.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..ac-sql-cliconfg-dll_31bf3856ad364e35_6.3.9600.17415_none_ff6bb76775b659fc/cliconfg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..b-odbc-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_b89ba2e32c82b9bd/msdasql.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..factory-handler-dll_31bf3856ad364e35_6.3.9600.17415_none_0047a4f8d6ff6fe7/msdfmap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..mdac-sql-netlibs-np_31bf3856ad364e35_6.3.9600.17415_none_83c84e6895d7f478/dbnmpntw.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..nents-mdac-ado15-rh_31bf3856ad364e35_6.3.9600.17415_none_c8c2733369f76f7a/msadrh15.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.3.9600.17415_none_f6dd53f65d1f317c/msadce.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..oracle-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_280f5aafae9d5a25/msdaora.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..server-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_f9e5952ca15938ce/sqloledb.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..simple-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_547d7f35e052ae6f/msdaosp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/DirectDB.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/oeimport.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mail-app_31bf3856ad364e35_6.3.9600.17415_none_86448ceb6b1534c1/WinMail.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-media-mp3acm_31bf3856ad364e35_6.3.9600.17415_none_00c18a254406a5d4/l3codecp.acm <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpps_31bf3856ad364e35_6.3.9600.17415_none_4376af3b575d4893/wmpps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-mediaplayer-wmpshell_31bf3856ad364e35_6.3.9600.17415_none_a0b3b91b60aed27a/wmpshell.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-m..remote-provider-dll_31bf3856ad364e35_6.3.9600.17415_none_3d10651cbad4d376/msdarem.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-msasn1_31bf3856ad364e35_6.3.9600.17415_none_5c46752dc0c164f1/msasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-msidle_31bf3856ad364e35_6.3.9600.17415_none_606e3c3dbe06e810/msidle.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-networkprovisioning_31bf3856ad364e35_6.3.9600.17415_none_623e608ed5a11f35/xmlprovi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntasn1-dll_31bf3856ad364e35_6.3.9600.17415_none_4f204f69e034bc88/ntasn1.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntfstransactionapi_31bf3856ad364e35_6.3.9600.17415_none_6dc54772dc9aa78b/txfw32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_microsoft-windows-ntlanui2_31bf3856ad364e35_6.3.9600.17415_none_cb11b3a7f9d286d9/ntlanui2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17631_none_2986fb37d16e617f/iesysprep.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.3.9600.17415_none_135ce4dd72111d59/SCardDlg.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17086_none_cbd45c52c79ff3de/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/wow64_microsoft-windows-smspaceprovider_31bf3856ad364e35_6.3.9600.17221_none_cc103e34c773c7d3/smphost.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows/WinSxS/x86_windows-media-speechsynthesis-winrt_31bf3856ad364e35_6.3.9600.17415_none_148a01188942cbc3/Windows.Media.SpeechSynthesis.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/SysWOW64/C_IS2022.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/SysWOW64/C_ISCII.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_networking-mpssvc-admin_31bf3856ad364e35_6.3.9600.17415_none_3a3e8d569d2ef7d0/AuthFWGP.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_windows-media-speechsynthesis-winrt_31bf3856ad364e35_6.3.9600.17415_none_148a01188942cbc3/Windows.Media.SpeechSynthesis.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

Statistics :
Directories............... : 50011
Archives.................. : 497
Files..................... : 355269
Infected.............. : 1849
Renamed........... : 1849
Warnings.............. : 1
Suspicious............ : 1
Ignored........... : 1
Infections................ : 1850
Time...................... : 00:25:39

NT/Accessories/WordpadFilter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp10.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp20_mscorwks.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbscmp20_perfcounter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbs_diasymreader.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/Microsoft.NET/Framework/sbs_microsoft.jscript.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
_ ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnaddr.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnathlp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnet.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhpast.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnhupnp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnlobby.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_1.0.9600.16384_none_88384c104c9ba230/dpnsvr.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.3.9600.17415_none_d2aeaf50b8e377ca/IMJKAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..e-handwritingapplet_31bf3856ad364e35_6.3.9600.17415_none_a3953d9e0b999b79/IMJPCAC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..hared-versiondialog_31bf3856ad364e35_6.3.9600.17415_none_9f7baf1b5567f5aa/imever.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.3.9600.17415_none_27ad803a858bbbc9/imjputyc.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..japanese-customizer_31bf3856ad364e35_6.3.9600.17415_none_f7d57eb572607d7d/imjpcus.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..lekanjifinderapplet_31bf3856ad364e35_6.3.9600.17415_none_77a00128642f25bb/IMJPSKF.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..me-japanese-dictapi_31bf3856ad364e35_6.3.9600.17415_none_6147a09330d203fa/IMJPDAPI.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..njifinderdictionary_31bf3856ad364e35_6.3.9600.17415_none_db031faed131aee3/IMJPKDIC.DLL <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/iyuv_32.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/msyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.3.9600.17415_none_fa716cb5c95a2ef9/tsbyuv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfm.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.3.9600.17415_none_71201afaa99168a2/imecfmps.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..oragecontexthandler_31bf3856ad364e35_6.3.9600.17415_none_5b7f350e4a9bccc6/StorageContextHandler.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.3.9600.17415_none_7cedfbbfb2ac4657/ksuser.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-d..txvideoacceleration_31bf3856ad364e35_6.3.9600.17415_none_00c111f15d92f1de/dxva2.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deskadp_31bf3856ad364e35_6.3.9600.17415_none_449830e399e9e074/deskadp.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deskmon_31bf3856ad364e35_6.3.9600.17415_none_43c02b679a722165/deskmon.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingfolder_31bf3856ad364e35_6.3.9600.17415_none_e11e9a9843074ad4/DevicePairingFolder.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicesetupui_31bf3856ad364e35_6.3.9600.17415_none_0a5efa7385e4337d/Dsui.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/adprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/capiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/cngprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/dpapiprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.3.9600.17415_none_f090776348fd51c8/wincredprovider.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.3.9600.17415_none_e90e8a34ef389522/qdvd.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicecenter_31bf3856ad364e35_6.3.9600.17415_none_3d5115311a6e8281/DeviceCenter.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17415_none_02ef9fb11e7054fa/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-devicepairingdll_31bf3856ad364e35_6.3.9600.17481_none_029fef151eacb335/DevicePairing.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.3.9600.17415_none_7f36c26655490681/DeviceProperties.exe <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-deviceuxres_31bf3856ad364e35_6.3.9600.17415_none_b55b0bbce9576733/DeviceUxRes.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-dfsui_31bf3856ad364e35_6.3.9600.17415_none_eeac620a1862de51/DfsShlEx.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-difxapi_31bf3856ad364e35_6.3.9600.17415_none_9d2ffcf1b1921e23/difxapi.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-capture_31bf3856ad364e35_6.3.9600.16384_none_4d78e7ba3b244b5d/qcap.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-devenum_31bf3856ad364e35_6.3.9600.17415_none_ee2a0b6f5b4b731f/devenum.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dmo_31bf3856ad364e35_6.3.9600.17415_none_af82a0b11a091615/msdmo.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-dv_31bf3856ad364e35_6.3.9600.17415_none_91c325a63b8286a9/qdv.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sa2/Windows.old/Windows/WinSxS/x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.3.9600.17415_none_4afb8a00bda52bca/mpg2splt.ax <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]
ALERT: [TR/Crypt.XPACK.Gen3] /media/sda2/Windows.old/Windows/WinSxS/x86_microsoft-windows-ie-setup_31bf3856ad364e35_11.0.9600.17498_none_40dbf953726708e8/inseng.dll <<< Is the Trojan horse TR/Crypt.XPACK.Gen3 [renamed]

Statistics :
Directories............... : 50011
Archives.................. : 497
Files..................... : 355269
Infected.............. : 1849
Renamed........... : 1849
Warnings.............. : 1
Suspicious............ : 1
Ignored........... : 1
Infections................ : 1850
Time...................... : 00:25:39

Was nun? So sah der gesamte Scann aus.

Viele Grüße

Entweder, du hast den Fileinfector des Jahrhunderts drauf, ohne dass ma nen konkreter name der Infektion gezeigt wird (wie ich diese Crypt.XPack.Gen Scheisse hasse.....). oder das sind alles Fehlalarme.

Mach bitte nochmal nen Scan mit FRST in der Recovery.

Hi,
hier der Scan.

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 01

Ran by SYSTEM on MININT-7DR47NT on 17-02-2015 11:41:59

Running from D:\

Platform: WIN_81 (X64) OS Language: Deutsch (Deutschland)

Boot Mode: Recovery

Attention: Could not load system hive.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Winlogon: [Userinit] 

HKLM-x32\...\Winlogon: [Userinit]  [X]

HKLM\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION

HKLM-x32\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION

HKLM\...\InprocServer32: [Default-wbemess]  ATTENTION! ====> ZeroAccess?

HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  ATTENTION! ====> ZeroAccess?

HKLM\...26dfa299cadb\InprocServer32: [Authentication UI Logon UI]  <==== ATTENTION!
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-16 12:45 - 2015-02-16 12:45 - 00000000 ____D () C:\.Trash-0

2015-02-13 17:14 - 2015-02-13 17:14 - 00000000 ____D () C:\Windows\System32\config\HiveBackup

2015-02-11 19:07 - 2015-02-17 11:41 - 00000000 ____D () C:\FRST

2015-02-10 20:46 - 2015-02-17 11:40 - 00000000 _____ () C:\Recovery.txt

2015-02-10 20:40 - 2015-02-13 07:47 - 00000464 _____ () C:\Windows\setupact.log

2015-02-10 20:40 - 2015-02-10 20:40 - 00000000 _____ () C:\Windows\setuperr.log

2015-02-10 20:39 - 2015-02-11 15:43 - 00005232 _____ () C:\Windows\PFRO.log

2015-02-10 20:15 - 2015-02-10 20:15 - 00000000 ____D () C:\Windows\System32\appmgmt

2015-02-10 20:07 - 2015-02-10 20:07 - 00000000 ____D () C:\Windows\System32\appraiser

2015-02-10 20:04 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\System32\ApnDatabase.xml

2015-02-10 20:01 - 2015-02-10 20:01 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Zuhause\Downloads\autodetectutility.exe

2015-02-10 19:59 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll

2015-02-10 19:59 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll

2015-02-10 19:59 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll

2015-02-10 19:59 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll

2015-02-10 19:59 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll

2015-02-10 19:40 - 2015-02-10 19:40 - 00001171 ____N () C:\Users\Public\Desktop\CDBurnerXP.lnk

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Canneverbe Limited

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP

2015-02-10 19:35 - 2015-02-10 19:35 - 00001034 ____N () C:\Users\Public\Desktop\PDF-Viewer.lnk

2015-02-10 19:35 - 2015-02-10 19:35 - 00000000 ____D () C:\Program Files\Tracker Software

2015-02-10 19:33 - 2015-02-10 19:33 - 00000000 ____D () C:\Users\Zuhause\Documents\PDFXVwer

2015-02-10 19:05 - 2015-02-10 19:05 - 00002271 ____N () C:\Users\Public\Desktop\Google Chrome.lnk

2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Google

2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Program Files (x86)\Google

2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543

2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543.job

2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AppEx Networks

2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AMD

2015-02-10 18:45 - 2015-02-10 20:39 - 00065536 _____ () C:\Windows\System32\spu_storage.bin

2015-02-10 18:43 - 2015-02-10 18:43 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\library_dir

2015-02-10 18:42 - 2015-02-10 18:42 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201502101842092726.log

2015-02-10 18:42 - 2015-02-10 18:42 - 00000000 ____D () C:\Program Files (x86)\AMD AVT

2015-02-10 18:40 - 2015-02-10 18:41 - 00000000 ____D () C:\Program Files\AMD

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\ProgramData\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Program Files (x86)\AMD

2015-02-10 18:31 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll

2015-02-10 18:31 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\System32\aspnet_counters.dll

2015-02-10 18:26 - 2014-12-16 12:48 - 00286376 _____ (UltraVnc) C:\Users\Zuhause\Documents\asc_fernwartung.exe

2015-02-10 18:25 - 2015-02-10 18:25 - 00001440 ____N () C:\Users\Zuhause\Desktop\asc_fernwartung - Verknüpfung.lnk

2015-02-10 18:20 - 2015-02-10 18:42 - 00000000 ____D () C:\ProgramData\AMD

2015-02-10 18:20 - 2015-02-10 18:20 - 00060817 _____ () C:\Windows\SysWOW64\CCCInstall_201502101820310764.log

2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files\ATI Technologies

2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies

2015-02-10 18:19 - 2015-02-10 19:30 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-10 18:11 - 2015-02-10 18:11 - 00003180 _____ () C:\Windows\System32\Tasks\{F1C5CEEC-A8B2-419C-8221-66C8EA772BE8}

2015-02-10 17:45 - 2015-02-10 20:08 - 00000000 ____D () C:\Windows\System32\MRT

2015-02-10 17:45 - 2015-02-10 20:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe

2015-02-10 17:43 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-02-10 17:43 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll

2015-02-10 17:43 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe

2015-02-10 17:43 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll

2015-02-10 17:43 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

2015-02-10 17:43 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll

2015-02-10 17:43 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll

2015-02-10 17:43 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll

2015-02-10 17:43 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll

2015-02-10 17:43 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll

2015-02-10 17:43 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll

2015-02-10 17:43 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-02-10 17:43 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2015-02-10 17:43 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll.vir

2015-02-10 17:43 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-02-10 17:43 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll.vir

2015-02-10 17:43 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll

2015-02-10 17:43 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-02-10 17:43 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2015-02-10 17:43 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys

2015-02-10 17:43 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS

2015-02-10 17:43 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys

2015-02-10 17:43 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\agilevpn.sys

2015-02-10 17:43 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL

2015-02-10 17:43 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL

2015-02-10 17:43 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL

2015-02-10 17:43 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vpnike.dll

2015-02-10 17:43 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2015-02-10 17:43 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\System32\rasapi32.dll

2015-02-10 17:43 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll

2015-02-10 17:43 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll

2015-02-10 17:43 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2015-02-10 17:43 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll

2015-02-10 17:43 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-02-10 17:43 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2015-02-10 17:43 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys

2015-02-10 17:43 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rasl2tp.sys

2015-02-10 17:43 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2015-02-10 17:43 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp

2015-02-10 17:43 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\rasmxs.dll

2015-02-10 17:43 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\rasser.dll

2015-02-10 17:43 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\rasdiag.dll

2015-02-10 17:43 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp

2015-02-10 17:43 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll.vir

2015-02-10 17:43 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll

2015-02-10 17:43 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll

2015-02-10 17:43 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\System32\AppxAllUserStore.dll

2015-02-10 17:43 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2015-02-10 17:43 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\System32\rascfg.dll

2015-02-10 17:43 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveTelemetry.dll

2015-02-10 17:43 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll.vir

2015-02-10 17:43 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll

2015-02-10 17:43 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

2015-02-10 17:43 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll

2015-02-10 17:43 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2015-02-10 17:43 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\System32\QSHVHOST.DLL

2015-02-10 17:43 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\QSVRMGMT.DLL

2015-02-10 17:43 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll

2015-02-10 17:43 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\System32\dnsapi.dll

2015-02-10 17:43 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll

2015-02-10 17:43 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll

2015-02-10 17:43 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL

2015-02-10 17:43 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL

2015-02-10 17:43 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll.vir

2015-02-10 17:43 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\WSDApi.dll

2015-02-10 17:43 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2015-02-10 17:43 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2015-02-10 17:43 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll

2015-02-10 17:43 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll

2015-02-10 17:43 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys

2015-02-10 17:43 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys

2015-02-10 17:43 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys

2015-02-10 17:43 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys

2015-02-10 17:43 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2015-02-10 17:43 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe

2015-02-10 17:43 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll

2015-02-10 17:43 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2015-02-10 17:43 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2015-02-10 17:43 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-10 17:43 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2015-02-10 17:43 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-02-10 17:43 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2015-02-10 17:43 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vhdmp.sys

2015-02-10 17:43 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll

2015-02-10 17:43 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll

2015-02-10 17:43 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll

2015-02-10 17:43 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll

2015-02-10 17:43 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-02-10 17:43 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-02-10 17:43 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-02-10 17:43 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2015-02-10 17:43 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-02-10 17:43 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-02-10 17:43 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\eventcls.dll

2015-02-10 17:43 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll.vir

2015-02-10 17:43 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\System32\vsstrace.dll

2015-02-10 17:43 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\System32\vssapi.dll

2015-02-10 17:43 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll

2015-02-10 17:43 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\System32\VSSVC.exe

2015-02-10 17:43 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll

2015-02-10 17:43 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll

2015-02-10 17:43 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll

2015-02-10 17:43 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll.vir

2015-02-10 17:43 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll

2015-02-10 17:43 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys

2015-02-10 17:43 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys

2015-02-10 17:43 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys

2015-02-10 17:43 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys

2015-02-10 17:42 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe

2015-02-10 17:42 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe

2015-02-10 17:42 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsDatabase.dll

2015-02-10 17:42 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettings.Handlers.dll

2015-02-10 17:42 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlowUI.dll

2015-02-10 17:42 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll

2015-02-10 17:42 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll

2015-02-10 17:42 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2015-02-10 17:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwififlt.sys

2015-02-10 17:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwifimp.sys

2015-02-10 17:36 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll

2015-02-10 17:36 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll

2015-02-10 17:36 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll

2015-02-10 17:36 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupStatusProvider.dll

2015-02-10 17:36 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2015-02-10 17:36 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2015-02-10 17:36 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-10 17:35 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys

2015-02-10 17:35 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe

2015-02-10 17:35 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys

2015-02-10 17:35 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2015-02-10 17:35 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-10 17:35 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll

2015-02-10 17:35 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2015-02-10 17:35 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2015-02-10 17:35 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe

2015-02-10 17:35 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys

2015-02-10 17:35 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys

2015-02-10 17:35 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys

2015-02-10 17:35 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\winshfhc.dll

2015-02-10 17:35 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2015-02-10 17:34 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2015-02-10 17:34 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2015-02-10 17:34 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2015-02-10 17:34 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec

2015-02-10 17:34 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll

2015-02-10 17:34 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2015-02-10 17:34 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2015-02-10 17:34 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-10 17:34 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2015-02-10 17:34 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-10 17:34 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-02-10 17:34 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll

2015-02-10 17:34 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2015-02-10 17:34 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll.vir

2015-02-10 17:34 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-10 17:34 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll

2015-02-10 17:34 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-02-10 17:34 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll

2015-02-10 17:34 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2015-02-10 17:34 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2015-02-10 17:34 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2015-02-10 17:34 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2015-02-10 17:34 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2015-02-10 17:34 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-10 17:34 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-02-10 17:34 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-10 17:34 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-10 17:34 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-02-10 17:34 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2015-02-10 17:34 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-02-10 17:34 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-10 17:34 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-10 17:34 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-10 17:34 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2015-02-10 17:34 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-10 17:34 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2015-02-10 17:34 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-10 17:34 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-10 17:34 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-10 17:34 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2015-02-10 17:34 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe

2015-02-10 17:33 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe

2015-02-10 17:33 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll

2015-02-10 17:16 - 2015-02-10 17:22 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AviraSpeedup

2015-02-10 17:16 - 2015-02-10 17:16 - 00003364 _____ () C:\Windows\System32\Tasks\AviraSpeedup

2015-02-10 17:16 - 2015-02-10 17:16 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-02-10 17:11 - 2015-02-10 20:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1670470879-3129505335-4165064613-1001

2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 _____ () C:\Windows\ativpsrm.bin

2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\ProgramData\ESET

2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\Program Files\ESET

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieUserList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieSiteList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieBrowserModeList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Macromedia

2015-02-10 17:04 - 2015-02-10 18:29 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\VirtualStore

2015-02-10 17:04 - 2015-02-10 17:04 - 00009752 _____ () C:\Users\Zuhause\Desktop\Entfernte Anwendungen.html

2015-02-10 17:04 - 2015-02-10 17:04 - 00000020 ___SH () C:\Users\Zuhause\ntuser.ini

2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Adobe

2015-02-10 17:03 - 2015-02-10 20:37 - 01067835 _____ () C:\Windows\WindowsUpdate.log

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Startmenü

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Startmenü

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Dokumente

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2015-02-10 17:01 - 2015-02-10 17:04 - 00000000 ____D () C:\users\Zuhause

2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagwrn.xml

2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagerr.xml

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Vorlagen

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Startmenü

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Netzwerkumgebung

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Lokale Einstellungen

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Eigene Dateien

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Druckumgebung

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Musik

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Bilder

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Verlauf

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Anwendungsdaten

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Anwendungsdaten

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 ____D () C:\Windows\CSC

2015-02-10 16:59 - 2015-02-10 16:59 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-02-10 16:58 - 2015-02-10 18:34 - 00000000 ___DC () C:\Windows\Panther

2015-02-10 16:58 - 2015-02-10 16:58 - 00000000 ____D () C:\Windows.old

2015-02-10 16:57 - 2015-02-10 16:57 - 00262144 _____ () C:\Windows\System32\config\userdiff

2015-02-10 16:46 - 2015-02-10 16:46 - 00000000 ____D () C:\$WINDOWS.~BT

2015-02-10 13:15 - 2015-02-10 13:15 - 00302011 _____ () C:\Users\Zuhause\Downloads\WindowsUpdateDiagnostic.diagcab

2015-02-10 11:56 - 2015-02-10 11:56 - 00000000 ___RD () C:\Users\Zuhause\OneDrive

2015-02-10 11:47 - 2015-02-10 11:47 - 01064632 _____ (Microsoft Corporation) C:\Users\Zuhause\Downloads\Setup.X86.de-DE_O365HomePremRetail_bebf202b-a52e-46f6-baef-9f4bdaac995a_TX_DB_.exe

2015-02-09 19:19 - 2015-02-09 19:19 - 37987520 ____N (Microsoft Corporation) C:\Users\Zuhause\Downloads\Windows-KB890830-x64-V5.20.exe

2015-02-09 14:20 - 2013-08-22 07:47 - 00001108 ____N () C:\Users\Zuhause\Desktop\Calculator.lnk

2015-02-09 14:18 - 2015-02-09 14:18 - 00001893 ____N () C:\Users\Zuhause\Desktop\Datensicherung starten.lnk

2015-02-09 14:18 - 2014-11-19 13:37 - 00007413 _____ () C:\Users\Zuhause\ASC_Datensicherung.cmd

2015-02-09 14:17 - 2015-02-10 17:04 - 00000000 ____D () C:\Program Files (x86)\ASC

2015-02-09 13:53 - 2015-02-09 13:53 - 00000000 ____D () C:\Program Files (x86)\gs

2015-02-09 13:44 - 2015-02-10 17:05 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-02-09 13:24 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Packages

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Programme

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2015-02-09 13:20 - 2015-02-10 16:58 - 00000000 __SHD () C:\Recovery
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-16 12:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-02-16 12:12 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers

2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer

2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2015-02-13 07:48 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-11 16:46 - 2013-08-22 15:44 - 00338048 _____ () C:\Windows\System32\FNTCACHE.DAT

2015-02-10 20:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2015-02-10 20:07 - 2014-11-22 08:33 - 00000000 ___SD () C:\Windows\System32\CompatTel

2015-02-10 20:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppCompat

2015-02-10 20:00 - 2014-11-22 01:06 - 01686150 _____ () C:\Windows\System32\PerfStringBackup.INI

2015-02-10 20:00 - 2014-11-22 00:19 - 00726688 _____ () C:\Windows\System32\perfh007.dat

2015-02-10 20:00 - 2014-11-22 00:19 - 00151380 _____ () C:\Windows\System32\perfc007.dat

2015-02-10 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru

2015-02-10 19:22 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2015-02-10 18:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI

2015-02-10 18:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\setup

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2015-02-10 18:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows NT

2015-02-10 17:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM

2015-02-10 17:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\restore

2015-02-10 17:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2015-02-10 17:03 - 2013-08-22 14:36 - 00000000 __RHD () C:\users\Default

2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\Recovery

2015-02-10 16:58 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\System32\config\BCD-Template

2015-02-03 20:31 - 2014-11-22 08:40 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-03 20:31 - 2014-11-22 08:40 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

==================== Known DLLs (Whitelisted) ================
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe

[2014-11-22 01:41] - [2014-11-22 01:41] - 0572416 ____A (Microsoft Corporation) EC498BAE1F0D3E0E401C963F8D76C437
 

C:\Windows\System32\wininit.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0145920 ____A (Microsoft Corporation) A570A64292214C43E0BA50E6A72A6380
 

C:\Windows\explorer.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 2501368 ____A (Microsoft Corporation) 85D47EB257B06094F052E0C8AEFA3BEE
 

C:\Windows\SysWOW64\explorer.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 2207488 ____A (Microsoft Corporation) 4B37A33F4F5237BF02E537F8D12D1129
 

C:\Windows\System32\svchost.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0038792 ____A (Microsoft Corporation) E3A2AD05E24105B35E986CF9CB38EC47
 

C:\Windows\SysWOW64\svchost.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 0033088 ____A (Microsoft Corporation) D0ABC231C0B3E88C6B612B28ABBF734D
 

C:\Windows\System32\services.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0411128 ____A (Microsoft Corporation) 5BF02EBEFEDC706318C96E2E60EDCB91
 

C:\Windows\System32\User32.dll

[2014-11-22 01:42] - [2014-11-22 01:42] - 1540696 ____A (Microsoft Corporation) 25026E350BC3BE37631634EC72B10BD5
 

C:\Windows\SysWOW64\User32.dll

[2014-11-22 01:41] - [2014-11-22 01:41] - 1376256 ____A (Microsoft Corporation) 76C5CF09F53A3B089B5581B9938F8CAE
 

C:\Windows\System32\userinit.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0026112 ____A (Microsoft Corporation) 5C131534A3EA4A461A793FB507A8004F
 

C:\Windows\SysWOW64\userinit.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 0022528 ____A (Microsoft Corporation) D10643FC0095434C819316CA6CD748C0
 

C:\Windows\System32\rpcss.dll

[2014-11-22 01:40] - [2014-11-22 01:40] - 0817664 ____A (Microsoft Corporation) A6F17C299A03BAFEFB9257C462A19E00
 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.

C:\Windows\System32\Drivers\volsnap.sys

[2014-11-22 01:40] - [2014-11-22 01:40] - 0310080 ____A (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB
 
 

==================== Restore Points  =========================
 

Restore point made on: 2015-02-10 17:16:28
 

==================== Memory info =========================== 
 

Percentage of memory in use: 16%

Total physical RAM: 3542.71 MB

Available physical RAM: 2955.17 MB

Total Pagefile: 3542.71 MB

Available Pagefile: 2970.02 MB

Total Virtual: 131072 MB

Available Virtual: 131071.89 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:439.11 GB) (Free:414.61 GB) NTFS

Drive d: (INTENSO) (Removable) (Total:14.44 GB) (Free:14.43 GB) FAT32

Drive f: () (Fixed) (Total:492.06 GB) (Free:491.69 GB) NTFS

Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS

Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 25C1CE29)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=439.1 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=492.1 GB) - (Type=07 NTFS)
 

========================================================

Disk: 4 (Size: 14.5 GB) (Disk ID: C3D5E2B2)

Partition 1: (Not Active) - (Size=14.5 GB) - (Type=0B)
 
 

LastRegBack: 2015-02-10 16:58
 

Gruß

Beby010
 

==================== End Of Log ============================

--- --- ---

Scan bitte wiederholen, die Registry konnte nicht geladen werden.

Hi,
hier noch einmal der Scann.

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 01

Ran by SYSTEM on MININT-58V0SK5 on 18-02-2015 09:10:27

Running from D:\

Platform: WIN_81 (X64) OS Language: Deutsch (Deutschland)

Boot Mode: Recovery

Attention: Could not load system hive.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Winlogon: [Userinit] 

HKLM-x32\...\Winlogon: [Userinit]  [X]

HKLM\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION

HKLM-x32\...\Winlogon: [Shell]  [0 ] () <=== ATTENTION

HKLM\...\InprocServer32: [Default-wbemess]  ATTENTION! ====> ZeroAccess?

HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  ATTENTION! ====> ZeroAccess?

HKLM\...26dfa299cadb\InprocServer32: [Authentication UI Logon UI]  <==== ATTENTION!
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-16 12:45 - 2015-02-16 12:45 - 00000000 ____D () C:\.Trash-0

2015-02-13 17:14 - 2015-02-13 17:14 - 00000000 ____D () C:\Windows\System32\config\HiveBackup

2015-02-11 19:07 - 2015-02-18 09:10 - 00000000 ____D () C:\FRST

2015-02-10 20:46 - 2015-02-18 09:01 - 00000000 _____ () C:\Recovery.txt

2015-02-10 20:40 - 2015-02-13 07:47 - 00000464 _____ () C:\Windows\setupact.log

2015-02-10 20:40 - 2015-02-10 20:40 - 00000000 _____ () C:\Windows\setuperr.log

2015-02-10 20:39 - 2015-02-11 15:43 - 00005232 _____ () C:\Windows\PFRO.log

2015-02-10 20:15 - 2015-02-10 20:15 - 00000000 ____D () C:\Windows\System32\appmgmt

2015-02-10 20:07 - 2015-02-10 20:07 - 00000000 ____D () C:\Windows\System32\appraiser

2015-02-10 20:04 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\System32\ApnDatabase.xml

2015-02-10 20:01 - 2015-02-10 20:01 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Zuhause\Downloads\autodetectutility.exe

2015-02-10 19:59 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll

2015-02-10 19:59 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll

2015-02-10 19:59 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll

2015-02-10 19:59 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll

2015-02-10 19:59 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll

2015-02-10 19:59 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll

2015-02-10 19:40 - 2015-02-10 19:40 - 00001171 ____N () C:\Users\Public\Desktop\CDBurnerXP.lnk

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Canneverbe Limited

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited

2015-02-10 19:40 - 2015-02-10 19:40 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP

2015-02-10 19:35 - 2015-02-10 19:35 - 00001034 ____N () C:\Users\Public\Desktop\PDF-Viewer.lnk

2015-02-10 19:35 - 2015-02-10 19:35 - 00000000 ____D () C:\Program Files\Tracker Software

2015-02-10 19:33 - 2015-02-10 19:33 - 00000000 ____D () C:\Users\Zuhause\Documents\PDFXVwer

2015-02-10 19:05 - 2015-02-10 19:05 - 00002271 ____N () C:\Users\Public\Desktop\Google Chrome.lnk

2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Google

2015-02-10 19:04 - 2015-02-10 19:05 - 00000000 ____D () C:\Program Files (x86)\Google

2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543

2015-02-10 19:04 - 2015-02-10 19:04 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0455bfcb65543.job

2015-02-10 19:04 - 2015-02-10 19:04 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AppEx Networks

2015-02-10 18:47 - 2015-02-10 18:47 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AMD

2015-02-10 18:45 - 2015-02-10 20:39 - 00065536 _____ () C:\Windows\System32\spu_storage.bin

2015-02-10 18:43 - 2015-02-10 18:43 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\library_dir

2015-02-10 18:42 - 2015-02-10 18:42 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201502101842092726.log

2015-02-10 18:42 - 2015-02-10 18:42 - 00000000 ____D () C:\Program Files (x86)\AMD AVT

2015-02-10 18:40 - 2015-02-10 18:41 - 00000000 ____D () C:\Program Files\AMD

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\ProgramData\ATI

2015-02-10 18:40 - 2015-02-10 18:40 - 00000000 ____D () C:\Program Files (x86)\AMD

2015-02-10 18:31 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll

2015-02-10 18:31 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\System32\aspnet_counters.dll

2015-02-10 18:26 - 2014-12-16 12:48 - 00286376 _____ (UltraVnc) C:\Users\Zuhause\Documents\asc_fernwartung.exe

2015-02-10 18:25 - 2015-02-10 18:25 - 00001440 ____N () C:\Users\Zuhause\Desktop\asc_fernwartung - Verknüpfung.lnk

2015-02-10 18:20 - 2015-02-10 18:42 - 00000000 ____D () C:\ProgramData\AMD

2015-02-10 18:20 - 2015-02-10 18:20 - 00060817 _____ () C:\Windows\SysWOW64\CCCInstall_201502101820310764.log

2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files\ATI Technologies

2015-02-10 18:20 - 2015-02-10 18:20 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies

2015-02-10 18:19 - 2015-02-10 19:30 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-10 18:11 - 2015-02-10 18:11 - 00003180 _____ () C:\Windows\System32\Tasks\{F1C5CEEC-A8B2-419C-8221-66C8EA772BE8}

2015-02-10 17:45 - 2015-02-10 20:08 - 00000000 ____D () C:\Windows\System32\MRT

2015-02-10 17:45 - 2015-02-10 20:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe

2015-02-10 17:43 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-02-10 17:43 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll

2015-02-10 17:43 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe

2015-02-10 17:43 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll

2015-02-10 17:43 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

2015-02-10 17:43 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll

2015-02-10 17:43 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll

2015-02-10 17:43 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll

2015-02-10 17:43 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll

2015-02-10 17:43 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll

2015-02-10 17:43 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll

2015-02-10 17:43 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-02-10 17:43 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2015-02-10 17:43 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll.vir

2015-02-10 17:43 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-02-10 17:43 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll.vir

2015-02-10 17:43 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll

2015-02-10 17:43 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-02-10 17:43 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2015-02-10 17:43 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys

2015-02-10 17:43 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS

2015-02-10 17:43 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys

2015-02-10 17:43 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\agilevpn.sys

2015-02-10 17:43 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL

2015-02-10 17:43 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL

2015-02-10 17:43 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL

2015-02-10 17:43 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vpnike.dll

2015-02-10 17:43 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2015-02-10 17:43 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\System32\rasapi32.dll

2015-02-10 17:43 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll

2015-02-10 17:43 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll

2015-02-10 17:43 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2015-02-10 17:43 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll

2015-02-10 17:43 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-02-10 17:43 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2015-02-10 17:43 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys

2015-02-10 17:43 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rasl2tp.sys

2015-02-10 17:43 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2015-02-10 17:43 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp

2015-02-10 17:43 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\rasmxs.dll

2015-02-10 17:43 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\rasser.dll

2015-02-10 17:43 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\rasdiag.dll

2015-02-10 17:43 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp

2015-02-10 17:43 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll.vir

2015-02-10 17:43 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll

2015-02-10 17:43 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll

2015-02-10 17:43 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\System32\AppxAllUserStore.dll

2015-02-10 17:43 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2015-02-10 17:43 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\System32\rascfg.dll

2015-02-10 17:43 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveTelemetry.dll

2015-02-10 17:43 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll.vir

2015-02-10 17:43 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll

2015-02-10 17:43 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

2015-02-10 17:43 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll

2015-02-10 17:43 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2015-02-10 17:43 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\System32\QSHVHOST.DLL

2015-02-10 17:43 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\QSVRMGMT.DLL

2015-02-10 17:43 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll

2015-02-10 17:43 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\System32\dnsapi.dll

2015-02-10 17:43 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll

2015-02-10 17:43 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll

2015-02-10 17:43 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL

2015-02-10 17:43 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL

2015-02-10 17:43 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll.vir

2015-02-10 17:43 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\WSDApi.dll

2015-02-10 17:43 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2015-02-10 17:43 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2015-02-10 17:43 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll

2015-02-10 17:43 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll

2015-02-10 17:43 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys

2015-02-10 17:43 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys

2015-02-10 17:43 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys

2015-02-10 17:43 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys

2015-02-10 17:43 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys

2015-02-10 17:43 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2015-02-10 17:43 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe

2015-02-10 17:43 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll

2015-02-10 17:43 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2015-02-10 17:43 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2015-02-10 17:43 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-10 17:43 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2015-02-10 17:43 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-02-10 17:43 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2015-02-10 17:43 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vhdmp.sys

2015-02-10 17:43 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll

2015-02-10 17:43 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll

2015-02-10 17:43 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll

2015-02-10 17:43 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll

2015-02-10 17:43 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-02-10 17:43 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-02-10 17:43 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-02-10 17:43 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2015-02-10 17:43 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-02-10 17:43 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-02-10 17:43 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\eventcls.dll

2015-02-10 17:43 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll.vir

2015-02-10 17:43 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\System32\vsstrace.dll

2015-02-10 17:43 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\System32\vssapi.dll

2015-02-10 17:43 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll

2015-02-10 17:43 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\System32\VSSVC.exe

2015-02-10 17:43 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll

2015-02-10 17:43 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll

2015-02-10 17:43 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll

2015-02-10 17:43 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll.vir

2015-02-10 17:43 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll

2015-02-10 17:43 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys

2015-02-10 17:43 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys

2015-02-10 17:43 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys

2015-02-10 17:43 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys

2015-02-10 17:42 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe

2015-02-10 17:42 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe

2015-02-10 17:42 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsDatabase.dll

2015-02-10 17:42 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettings.Handlers.dll

2015-02-10 17:42 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlowUI.dll

2015-02-10 17:42 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll

2015-02-10 17:42 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll

2015-02-10 17:42 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2015-02-10 17:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwififlt.sys

2015-02-10 17:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vwifimp.sys

2015-02-10 17:36 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll

2015-02-10 17:36 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll

2015-02-10 17:36 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll

2015-02-10 17:36 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupStatusProvider.dll

2015-02-10 17:36 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2015-02-10 17:36 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2015-02-10 17:36 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-10 17:35 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys

2015-02-10 17:35 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe

2015-02-10 17:35 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys

2015-02-10 17:35 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2015-02-10 17:35 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-10 17:35 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll

2015-02-10 17:35 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2015-02-10 17:35 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2015-02-10 17:35 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe

2015-02-10 17:35 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys

2015-02-10 17:35 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys

2015-02-10 17:35 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys

2015-02-10 17:35 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\winshfhc.dll

2015-02-10 17:35 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2015-02-10 17:34 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2015-02-10 17:34 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2015-02-10 17:34 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2015-02-10 17:34 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec

2015-02-10 17:34 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll

2015-02-10 17:34 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2015-02-10 17:34 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2015-02-10 17:34 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-10 17:34 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2015-02-10 17:34 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-10 17:34 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-02-10 17:34 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll

2015-02-10 17:34 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2015-02-10 17:34 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll.vir

2015-02-10 17:34 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-10 17:34 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll

2015-02-10 17:34 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-02-10 17:34 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll

2015-02-10 17:34 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2015-02-10 17:34 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2015-02-10 17:34 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2015-02-10 17:34 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2015-02-10 17:34 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2015-02-10 17:34 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-10 17:34 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-02-10 17:34 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-10 17:34 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-10 17:34 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-02-10 17:34 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2015-02-10 17:34 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-02-10 17:34 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-10 17:34 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-10 17:34 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-10 17:34 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2015-02-10 17:34 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-10 17:34 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2015-02-10 17:34 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-10 17:34 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-10 17:34 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-10 17:34 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2015-02-10 17:34 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll

2015-02-10 17:33 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe

2015-02-10 17:33 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe

2015-02-10 17:33 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll

2015-02-10 17:16 - 2015-02-10 17:22 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\AviraSpeedup

2015-02-10 17:16 - 2015-02-10 17:16 - 00003364 _____ () C:\Windows\System32\Tasks\AviraSpeedup

2015-02-10 17:16 - 2015-02-10 17:16 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-02-10 17:11 - 2015-02-10 20:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1670470879-3129505335-4165064613-1001

2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2015-02-10 17:11 - 2015-02-10 17:11 - 00000000 _____ () C:\Windows\ativpsrm.bin

2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\ProgramData\ESET

2015-02-10 17:09 - 2015-02-10 17:09 - 00000000 ____D () C:\Program Files\ESET

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieUserList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieSiteList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 __SHD () C:\Users\Zuhause\AppData\Local\EmieBrowserModeList

2015-02-10 17:06 - 2015-02-10 17:06 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Macromedia

2015-02-10 17:04 - 2015-02-10 18:29 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\VirtualStore

2015-02-10 17:04 - 2015-02-10 17:04 - 00009752 _____ () C:\Users\Zuhause\Desktop\Entfernte Anwendungen.html

2015-02-10 17:04 - 2015-02-10 17:04 - 00000020 ___SH () C:\Users\Zuhause\ntuser.ini

2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2015-02-10 17:04 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Roaming\Adobe

2015-02-10 17:03 - 2015-02-10 20:37 - 01067835 _____ () C:\Windows\WindowsUpdate.log

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Startmenü

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Startmenü

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Dokumente

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2015-02-10 17:03 - 2015-02-10 17:03 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2015-02-10 17:01 - 2015-02-10 17:04 - 00000000 ____D () C:\users\Zuhause

2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagwrn.xml

2015-02-10 17:01 - 2015-02-10 17:02 - 00013338 _____ () C:\Windows\diagerr.xml

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Vorlagen

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Startmenü

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Netzwerkumgebung

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Lokale Einstellungen

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Eigene Dateien

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Druckumgebung

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Musik

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Documents\Eigene Bilder

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Verlauf

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\AppData\Local\Anwendungsdaten

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 _SHDL () C:\Users\Zuhause\Anwendungsdaten

2015-02-10 17:01 - 2015-02-10 17:01 - 00000000 ____D () C:\Windows\CSC

2015-02-10 16:59 - 2015-02-10 16:59 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-02-10 16:58 - 2015-02-10 18:34 - 00000000 ___DC () C:\Windows\Panther

2015-02-10 16:58 - 2015-02-10 16:58 - 00000000 ____D () C:\Windows.old

2015-02-10 16:57 - 2015-02-10 16:57 - 00262144 _____ () C:\Windows\System32\config\userdiff

2015-02-10 16:46 - 2015-02-10 16:46 - 00000000 ____D () C:\$WINDOWS.~BT

2015-02-10 13:15 - 2015-02-10 13:15 - 00302011 _____ () C:\Users\Zuhause\Downloads\WindowsUpdateDiagnostic.diagcab

2015-02-10 11:56 - 2015-02-10 11:56 - 00000000 ___RD () C:\Users\Zuhause\OneDrive

2015-02-10 11:47 - 2015-02-10 11:47 - 01064632 _____ (Microsoft Corporation) C:\Users\Zuhause\Downloads\Setup.X86.de-DE_O365HomePremRetail_bebf202b-a52e-46f6-baef-9f4bdaac995a_TX_DB_.exe

2015-02-09 19:19 - 2015-02-09 19:19 - 37987520 ____N (Microsoft Corporation) C:\Users\Zuhause\Downloads\Windows-KB890830-x64-V5.20.exe

2015-02-09 14:20 - 2013-08-22 07:47 - 00001108 ____N () C:\Users\Zuhause\Desktop\Calculator.lnk

2015-02-09 14:18 - 2015-02-09 14:18 - 00001893 ____N () C:\Users\Zuhause\Desktop\Datensicherung starten.lnk

2015-02-09 14:18 - 2014-11-19 13:37 - 00007413 _____ () C:\Users\Zuhause\ASC_Datensicherung.cmd

2015-02-09 14:17 - 2015-02-10 17:04 - 00000000 ____D () C:\Program Files (x86)\ASC

2015-02-09 13:53 - 2015-02-09 13:53 - 00000000 ____D () C:\Program Files (x86)\gs

2015-02-09 13:44 - 2015-02-10 17:05 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-02-09 13:24 - 2015-02-10 17:04 - 00000000 ____D () C:\Users\Zuhause\AppData\Local\Packages

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Programme

2015-02-09 13:21 - 2015-02-09 13:21 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2015-02-09 13:20 - 2015-02-10 16:58 - 00000000 __SHD () C:\Recovery
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-16 12:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-02-16 12:12 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers

2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer

2015-02-16 12:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2015-02-13 07:48 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-11 16:46 - 2013-08-22 15:44 - 00338048 _____ () C:\Windows\System32\FNTCACHE.DAT

2015-02-10 20:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2015-02-10 20:07 - 2014-11-22 08:33 - 00000000 ___SD () C:\Windows\System32\CompatTel

2015-02-10 20:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppCompat

2015-02-10 20:00 - 2014-11-22 01:06 - 01686150 _____ () C:\Windows\System32\PerfStringBackup.INI

2015-02-10 20:00 - 2014-11-22 00:19 - 00726688 _____ () C:\Windows\System32\perfh007.dat

2015-02-10 20:00 - 2014-11-22 00:19 - 00151380 _____ () C:\Windows\System32\perfc007.dat

2015-02-10 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru

2015-02-10 19:22 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2015-02-10 18:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI

2015-02-10 18:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\setup

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-02-10 18:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2015-02-10 18:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows NT

2015-02-10 17:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM

2015-02-10 17:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\restore

2015-02-10 17:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2015-02-10 17:03 - 2013-08-22 14:36 - 00000000 __RHD () C:\users\Default

2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2015-02-10 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\Recovery

2015-02-10 16:58 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\System32\config\BCD-Template

2015-02-03 20:31 - 2014-11-22 08:40 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-03 20:31 - 2014-11-22 08:40 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

==================== Known DLLs (Whitelisted) ================
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe

[2014-11-22 01:41] - [2014-11-22 01:41] - 0572416 ____A (Microsoft Corporation) EC498BAE1F0D3E0E401C963F8D76C437
 

C:\Windows\System32\wininit.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0145920 ____A (Microsoft Corporation) A570A64292214C43E0BA50E6A72A6380
 

C:\Windows\explorer.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 2501368 ____A (Microsoft Corporation) 85D47EB257B06094F052E0C8AEFA3BEE
 

C:\Windows\SysWOW64\explorer.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 2207488 ____A (Microsoft Corporation) 4B37A33F4F5237BF02E537F8D12D1129
 

C:\Windows\System32\svchost.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0038792 ____A (Microsoft Corporation) E3A2AD05E24105B35E986CF9CB38EC47
 

C:\Windows\SysWOW64\svchost.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 0033088 ____A (Microsoft Corporation) D0ABC231C0B3E88C6B612B28ABBF734D
 

C:\Windows\System32\services.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0411128 ____A (Microsoft Corporation) 5BF02EBEFEDC706318C96E2E60EDCB91
 

C:\Windows\System32\User32.dll

[2014-11-22 01:42] - [2014-11-22 01:42] - 1540696 ____A (Microsoft Corporation) 25026E350BC3BE37631634EC72B10BD5
 

C:\Windows\SysWOW64\User32.dll

[2014-11-22 01:41] - [2014-11-22 01:41] - 1376256 ____A (Microsoft Corporation) 76C5CF09F53A3B089B5581B9938F8CAE
 

C:\Windows\System32\userinit.exe

[2014-11-22 01:40] - [2014-11-22 01:40] - 0026112 ____A (Microsoft Corporation) 5C131534A3EA4A461A793FB507A8004F
 

C:\Windows\SysWOW64\userinit.exe

[2014-11-22 01:42] - [2014-11-22 01:42] - 0022528 ____A (Microsoft Corporation) D10643FC0095434C819316CA6CD748C0
 

C:\Windows\System32\rpcss.dll

[2014-11-22 01:40] - [2014-11-22 01:40] - 0817664 ____A (Microsoft Corporation) A6F17C299A03BAFEFB9257C462A19E00
 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.

C:\Windows\System32\Drivers\volsnap.sys

[2014-11-22 01:40] - [2014-11-22 01:40] - 0310080 ____A (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB
 
 

==================== Restore Points  =========================
 

Restore point made on: 2015-02-10 17:16:28
 

==================== Memory info =========================== 
 

Percentage of memory in use: 16%

Total physical RAM: 3542.71 MB

Available physical RAM: 2964.79 MB

Total Pagefile: 3542.71 MB

Available Pagefile: 2980.29 MB

Total Virtual: 131072 MB

Available Virtual: 131071.89 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:439.11 GB) (Free:414.61 GB) NTFS

Drive d: (INTENSO) (Removable) (Total:14.44 GB) (Free:14.43 GB) FAT32

Drive f: () (Fixed) (Total:492.06 GB) (Free:491.69 GB) NTFS

Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS

Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 25C1CE29)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=439.1 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=492.1 GB) - (Type=07 NTFS)
 

========================================================

Disk: 4 (Size: 14.5 GB) (Disk ID: C3D5E2B2)

Partition 1: (Not Active) - (Size=14.5 GB) - (Type=0B)
 
 

LastRegBack: 2015-02-10 16:58
 

==================== End Of Log ============================

--- --- ---
[/CO

viele Grüße
Baeby010

Zitat:

Attention: Could not load system hive.

Immer noch. Lösche bitte FRST udn lade es neu auf den Stick, versuch es nochmal.

Hi Schrauber,
habe alles noch einmal ganz neu gemacht, leider gleiche Meldung.
Habe beschlossen, System neu zu laden, ein paar Tage abzuwarten und dann mit FRST zu scannen. Kann ich mich dann noch einmal melden?
Vielen lieben Dank erst einmal. Bewundere diese Art der Hilfeleistung.
Gruß
Baeby010