|
Plagegeister aller Art und deren Bekämpfung: Verzögerte Tastatureingabe, Freezes in Spielen - Malware?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.08.2015, 00:20 | #1 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Hallo liebes Forum, ich glaube, ich habe mir irgendwas eingefangen. Tastatureingabe reagiert oftmals stark verzögert, mein Bildschirm friert während Spielen in unregelmäßigen Abständen kurz ein und auch hier erfolgen Befehle verzögert. Viel mehr fällt mir dazu jetzt auch nicht mehr ein. Ich habe noch nichts groß unternommen, außer ein scan mit Malwarebytes Anti-Malware, aber da kam nach einer Stunde eine Fehlermeldung, worauf der Scan abgebrochen wurde. Darum hoffe ich hier Hilfe zu finden. Ich bedanke mich schonmal im Voraus für Unterstützung. Liebe Grüße! |
03.08.2015, 06:05 | #2 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
03.08.2015, 15:33 | #3 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Hi schrauber, danke für die schnelle Antwort!
__________________FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:02-08-2015 01 durchgeführt von Tobi (Administrator) auf HP.com (03-08-2015 16:21:58) Gestartet von C:\Users\Tobi\Downloads Geladene Profile: Tobi & UpdatusUser (Verfügbare Profile: Tobi & UpdatusUser & DefaultAppPool) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (AMD) C:\Windows\System32\atieclxx.exe (Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe () C:\Program Files (x86)\puush\puush.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe (Akamai Technologies, Inc.) C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe () C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe (Akamai Technologies, Inc.) C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe (Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\mqtgsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe (Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.153\deploy\LolClient.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-27] (IDT, Inc.) HKLM\...\Run: [MsmqIntCert] => regsvr32 /s mqrt.dll HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc) HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [558944 2012-11-30] (ROCCAT GmbH) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-24] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc) HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [KPeerNexonEU] => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-07-19] (NEXON Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] () HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-31] (Electronic Arts) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [LOLReplay Recorder] => C:\Program Files (x86)\LOLReplay\LOLRecorder.exe [521216 2014-07-18] (LOL Replay) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [GoogleChromeAutoLaunch_9ED998646215A7B2837127291A244E96] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-07-25] (Google Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2017848 2015-07-25] (Spotify Ltd) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify] => C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe [7574584 2015-07-25] (Spotify Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-04-04] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3NYnTOqpuAS3I9zzHB7osEXiEti4UVInLRg0TQK0-aizhplySMmc9G5au8EmlOV HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3NYnTOqpuAS3I9zzHB7osEXiEti4UVInLRg0TQK0-aizhplySMmc9G5au8EmlOV HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPDSK/4 HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4 HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} SearchScopes: HKLM -> {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3131910065-3854824008-1126967849-1006 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2013-12-30] (IObit) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-04-04] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-04-04] (Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-05-10] (EasyBits Software Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6EC19656-95C2-4E0F-A281-76703E387EF0}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{73792F98-20CE-4F31-9E8D-D3A3BA0827D5}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{8F20DED7-DC87-40B5-B4E3-B4D50980FEB9}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{92ED9E0A-06C3-48E2-8E07-3AA0D44922B3}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{CE661347-BC36-496E-A052-910C237C275A}: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default FF DefaultSearchEngine,S: FF DefaultSearchUrl: FF SearchEngineOrder.1: FF SearchEngineOrder.1,S: FF SelectedSearchEngine,S: FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @java.com/DTPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-04-04] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-04-04] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-07-19] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Extension: Avira Browser Safety - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default\Extensions\abs@avira.com [2014-09-12] FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{652f37d2-5d36-2a41-489e-6bc2164ee11e} [2014-07-08] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-08] FF HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff Chrome: ======= CHR Profile: C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-12-26] CHR Extension: (BetterTTV) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2015-07-05] CHR Extension: (AdBlock) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-12] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13] CHR Extension: (Chrome Web Store Payments) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5525328 2015-07-27] (Emsisoft Ltd) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-24] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-24] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-24] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [2231616 2010-07-19] () S2 Ds3Service; C:\Controller PS3\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Datei ist nicht signiert] S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-03-12] (Hi-Rez Studios) [Datei ist nicht signiert] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation) R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-11-22] (Hewlett-Packard Company) [Datei ist nicht signiert] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-31] (IObit) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation) R2 MSMQTriggers; C:\Windows\system32\mqtgsvc.exe [189440 2010-11-20] (Microsoft Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-26] () S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 otshot; C:\program files\otshot\ZalmanUpdateService.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-24] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-04] (Avira Operations GmbH & Co. KG) R1 epp64; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys [137992 2015-07-27] (Emsisoft GmbH) S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] () R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-03 16:20 - 2015-08-03 16:20 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion 2015-07-31 23:55 - 2015-07-31 23:55 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3 (1).sdt 2015-07-31 23:54 - 2015-07-31 23:54 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3.sdt 2015-07-31 14:21 - 2015-07-31 14:21 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\ProductData 2015-07-28 21:58 - 2015-07-28 21:58 - 01076244 _____ C:\Users\Tobi\Downloads\s9.php 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (2).exe 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (1).exe 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-27 22:12 - 2015-07-27 22:12 - 00000000 ____D C:\ProgramData\Emsisoft 2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Users\Tobi\AppData\Local\CEF 2015-07-21 18:17 - 2015-07-21 18:17 - 00000000 ____D C:\Users\Tobi\Desktop\Tor Browser 2015-07-21 18:12 - 2015-07-21 18:12 - 01259808 _____ C:\Users\Tobi\Downloads\Tor Browser Paket - CHIP-Installer.exe 2015-07-21 18:10 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 18:10 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 18:10 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-20 21:02 - 2015-07-22 21:29 - 00000000 ____D C:\Users\Tobi\AppData\Local\Windows Live 2015-07-18 18:29 - 2015-07-18 18:29 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507181829120294.log 2015-07-18 18:29 - 2015-07-18 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-07-18 18:29 - 2015-07-18 18:29 - 00000000 ____D C:\ProgramData\ATI 2015-07-18 18:28 - 2015-07-18 18:28 - 00000000 ____D C:\Program Files (x86)\AMD 2015-07-16 16:09 - 2015-07-16 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-07-16 16:08 - 2015-07-16 16:10 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2015-07-16 16:05 - 2015-07-16 16:07 - 82596072 _____ (Logitech Inc.) C:\Users\Tobi\Downloads\LGS_8.70.315_x64_Logitech.exe 2015-07-16 15:21 - 2015-07-16 15:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2015-07-16 15:18 - 2015-07-16 15:18 - 10571443 _____ C:\Users\Tobi\Downloads\SCP-DS-Driver-Package-1.2.0.160.7z 2015-07-16 15:18 - 2013-05-19 09:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys 2015-07-16 15:18 - 2013-01-07 16:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2015-07-16 15:18 - 2013-01-07 16:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2015-07-16 15:17 - 2015-07-16 15:18 - 00000000 ____D C:\Controller PS3 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2015-07-16 15:15 - 2015-07-16 15:15 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu (1).exe 2015-07-16 15:14 - 2015-07-16 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2015-07-16 15:13 - 2015-07-16 15:13 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2015-07-16 15:12 - 2015-07-16 15:13 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu.exe 2015-07-16 14:33 - 2015-07-16 14:33 - 04117346 _____ C:\Users\Tobi\Downloads\MotioninJoy_071001_signed.zip 2015-07-16 14:33 - 2015-07-16 14:33 - 00000925 _____ C:\Users\Public\Desktop\DS3 Tool.lnk 2015-07-16 14:31 - 2015-07-16 14:31 - 01198368 _____ C:\Users\Tobi\Downloads\MotioninJoy - CHIP-Installer.exe 2015-07-16 14:05 - 2015-07-16 14:05 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2015-07-16 13:42 - 2015-07-16 13:42 - 00000222 _____ C:\Users\Tobi\Desktop\Rocket League.url 2015-07-14 23:36 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-14 23:36 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-14 23:36 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-14 23:36 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-14 23:36 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-14 23:36 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-14 23:36 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-14 23:36 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-14 23:36 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-14 23:36 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-14 23:36 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-14 23:36 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-14 23:36 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-14 23:36 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-14 23:36 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-14 23:36 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-14 23:36 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-14 23:35 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-14 23:35 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-14 23:35 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-14 23:35 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-14 23:35 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-14 23:35 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-14 23:35 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-14 23:35 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-14 23:35 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-14 23:35 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-14 23:35 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-14 23:35 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-14 23:35 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-14 23:35 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-14 23:35 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-14 23:35 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-14 23:35 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-14 23:35 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-14 23:35 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-14 23:35 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-14 23:35 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-14 23:35 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-14 23:35 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-14 23:35 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-14 23:35 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-14 23:35 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-14 23:35 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-14 23:35 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-14 23:35 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-14 23:34 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-14 23:34 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-14 23:34 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-14 23:34 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-14 23:34 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-14 23:34 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-14 23:34 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-14 23:34 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-14 23:34 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-10 21:34 - 2015-07-10 21:34 - 00000000 _____ C:\Windows\SysWOW64\shoBED7.tmp ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-03 16:23 - 2015-04-07 01:16 - 00028331 _____ C:\Users\Tobi\Downloads\FRST.txt 2015-08-03 16:22 - 2015-04-07 01:16 - 00000000 ____D C:\FRST 2015-08-03 16:20 - 2015-04-07 01:15 - 02169856 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe 2015-08-03 16:11 - 2013-12-28 18:35 - 00116067 _____ C:\Windows\setupact.log 2015-08-03 15:53 - 2015-04-26 15:13 - 00000390 _____ C:\Windows\Tasks\update-S-1-5-21-3131910065-3854824008-1126967849-1000.job 2015-08-03 15:36 - 2011-05-10 01:43 - 01232232 _____ C:\Windows\WindowsUpdate.log 2015-08-03 15:29 - 2015-04-30 00:25 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2015-08-03 15:29 - 2011-09-05 09:19 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-03 15:25 - 2012-10-30 17:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-03 15:25 - 2011-10-03 15:49 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Skype 2015-08-03 14:54 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-03 14:54 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-03 14:29 - 2015-05-19 14:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Raptr 2015-08-03 12:53 - 2015-04-26 15:13 - 00000390 _____ C:\Windows\Tasks\update-sys.job 2015-08-03 12:32 - 2015-06-27 20:19 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Spotify 2015-08-03 12:27 - 2015-06-27 20:20 - 00000000 ____D C:\Users\Tobi\AppData\Local\Spotify 2015-08-03 06:29 - 2011-09-05 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-02 22:14 - 2012-02-06 18:52 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForTobi 2015-08-02 22:14 - 2012-02-06 18:52 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForTobi.job 2015-08-02 14:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2015-08-02 14:27 - 2014-05-29 10:34 - 00000000 ____D C:\Program Files (x86)\Origin 2015-08-02 14:24 - 2011-05-10 01:38 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-02 14:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-02 03:07 - 2015-02-16 22:27 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2015-08-02 03:06 - 2012-02-19 15:54 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client 2015-08-01 15:50 - 2011-05-10 01:52 - 00000000 ____D C:\ProgramData\PDFC 2015-07-31 14:23 - 2014-09-12 13:53 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-31 14:21 - 2013-12-30 13:23 - 00000000 ____D C:\ProgramData\IObit 2015-07-30 20:19 - 2015-06-11 05:50 - 00001122 _____ C:\Users\Public\Desktop\Avira.lnk 2015-07-30 20:19 - 2014-09-12 13:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-07-30 11:44 - 2015-05-19 14:53 - 00000000 ____D C:\Program Files (x86)\Raptr 2015-07-30 11:35 - 2011-09-05 09:19 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-07-30 02:18 - 2014-08-09 18:25 - 01118208 ___SH C:\Users\Tobi\Downloads\Thumbs.db 2015-07-28 21:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-07-28 21:27 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-07-28 21:26 - 2013-12-30 13:23 - 00000000 ____D C:\ProgramData\ProductData 2015-07-28 21:02 - 2014-05-09 22:15 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-27 22:16 - 2014-09-01 03:12 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-07-27 22:15 - 2014-09-01 03:12 - 00001108 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-07-27 22:15 - 2014-09-01 03:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-07-27 22:15 - 2014-09-01 03:11 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-07-25 23:25 - 2013-07-13 14:40 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-25 12:26 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-24 01:28 - 2014-09-12 13:52 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-07-24 01:28 - 2014-09-12 13:52 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-07-22 21:37 - 2015-06-13 17:11 - 00569856 ___SH C:\Users\Tobi\Documents\Thumbs.db 2015-07-22 17:24 - 2009-07-14 06:45 - 00472008 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-18 23:18 - 2011-09-05 04:25 - 00000000 ____D C:\Users\Tobi\AppData\Local\CrashDumps 2015-07-18 18:29 - 2015-02-16 22:20 - 00000000 ____D C:\Program Files\AMD 2015-07-18 18:18 - 2015-02-16 22:24 - 00000000 ____D C:\AMD 2015-07-18 12:00 - 2013-12-28 18:34 - 01479824 _____ C:\Windows\PFRO.log 2015-07-17 20:02 - 2011-10-04 12:39 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForHP.com$ 2015-07-17 20:02 - 2011-10-04 12:39 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForHP.com$.job 2015-07-17 03:01 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-07-16 16:07 - 2013-02-06 21:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Logishrd 2015-07-16 15:16 - 2014-06-08 00:12 - 00131537 _____ C:\Windows\DirectX.log 2015-07-16 15:14 - 2013-03-30 17:35 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\Program Files\MotioninJoy 2015-07-16 14:05 - 2013-09-04 17:24 - 00000000 ____D C:\Users\Tobi\Documents\My Games 2015-07-16 14:05 - 2011-05-10 01:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-07-16 06:24 - 2011-09-05 09:19 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 06:24 - 2011-09-05 09:19 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 16:25 - 2012-10-30 17:44 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 16:25 - 2012-10-30 17:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 16:25 - 2011-09-05 09:23 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 12:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-15 03:52 - 2014-12-14 12:11 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 03:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 03:29 - 2013-07-13 18:34 - 00000000 ____D C:\Windows\system32\MRT 2015-07-09 15:14 - 2013-10-30 13:07 - 00000000 ____D C:\Users\Tobi\AppData\Local\Battle.net 2015-07-07 08:29 - 2015-05-25 00:26 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\YGOPro DevPro 2015-07-07 00:04 - 2014-09-12 13:52 - 00000000 ____D C:\Program Files (x86)\Avira 2015-07-05 01:25 - 2015-03-30 00:44 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2015-07-05 00:31 - 2013-10-30 13:07 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-07-05 00:28 - 2013-10-30 13:08 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-07-04 20:49 - 2011-05-10 02:20 - 00750982 _____ C:\Windows\system32\perfh007.dat 2015-07-04 20:49 - 2011-05-10 02:20 - 00166162 _____ C:\Windows\system32\perfc007.dat 2015-07-04 20:49 - 2009-07-14 07:13 - 01748010 _____ C:\Windows\system32\PerfStringBackup.INI ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-20 15:19 - 2015-02-19 03:19 - 0000044 ____H () C:\Program Files (x86)\7c6e32c6.tmp 2014-06-19 13:16 - 2014-06-19 13:16 - 0000024 _____ () C:\Users\Tobi\AppData\Roaming\temp.ini 2013-12-18 20:05 - 2013-12-18 20:05 - 0000030 _____ () C:\Users\Tobi\AppData\Roaming\WB.CFG 2012-08-25 13:19 - 2012-08-25 13:25 - 0004608 _____ () C:\Users\Tobi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-08-30 22:34 - 2012-08-30 22:34 - 0000094 _____ () C:\Users\Tobi\AppData\Local\fusioncache.dat 2014-08-31 23:50 - 2014-08-31 23:50 - 0000017 _____ () C:\Users\Tobi\AppData\Local\resmon.resmoncfg 2015-04-26 15:13 - 2015-04-26 15:13 - 0000003 _____ () C:\Users\Tobi\AppData\Local\updater.log 2015-04-26 15:13 - 2015-04-26 15:13 - 0000424 _____ () C:\Users\Tobi\AppData\Local\UserProducts.xml 2011-11-25 19:02 - 2011-11-25 19:02 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F3E71781-4549-49E1-B591-9E13E32BBFE6} 2011-11-27 20:04 - 2011-11-27 20:04 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F98C5B73-8232-4300-BE5E-AD6FFF1F8CB1} Einige Dateien in TEMP: ==================== C:\Users\Tobi\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe C:\Users\Tobi\AppData\Local\Temp\AutoDetectUtilApp.exe C:\Users\Tobi\AppData\Local\Temp\avgnt.exe C:\Users\Tobi\AppData\Local\Temp\d4f5d244a0909d75573750c06e9db24d.dll C:\Users\Tobi\AppData\Local\Temp\e78e59c3cd4f7bc6e97fe0edb1857ed6.dll C:\Users\Tobi\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe C:\Users\Tobi\AppData\Local\Temp\HiRezLauncherControls.dll C:\Users\Tobi\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll C:\Users\Tobi\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe C:\Users\Tobi\AppData\Local\Temp\raptrpatch.exe C:\Users\Tobi\AppData\Local\Temp\raptr_stub.exe C:\Users\Tobi\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tobi\AppData\Local\Temp\sqlite3.dll C:\Users\Tobi\AppData\Local\Temp\tmpF305.exe C:\Users\Tobi\AppData\Local\Temp\YgoUpdater.exe ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 15:15 ==================== Ende von log ============================ |
03.08.2015, 15:34 | #4 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:02-08-2015 01 durchgeführt von Tobi (2015-08-03 16:24:00) Gestartet von C:\Users\Tobi\Downloads Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-3131910065-3854824008-1126967849-500 - Administrator - Disabled) ASPNET (S-1-5-21-3131910065-3854824008-1126967849-1004 - Limited - Enabled) Gast (S-1-5-21-3131910065-3854824008-1126967849-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3131910065-3854824008-1126967849-1002 - Limited - Enabled) UpdatusUser (S-1-5-21-3131910065-3854824008-1126967849-1006 - Limited - Enabled) => C:\Users\UpdatusUser Tobi (S-1-5-21-3131910065-3854824008-1126967849-1000 - Administrator - Enabled) => C:\Users\Tobi ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) ACP Application (Version: 2.15.30.0019 - Advanced Micro Devices, Inc.) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated) Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.) Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden Akamai NetSession Interface (HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly) Allods Online 4.0.02.43 (HKLM-x32\...\AstrumNival Allods) (Version: 4.0.02.43 - gPotato) AMD Catalyst Install Manager (HKLM\...\{14D58A97-B60E-A858-34D8-95469C02F7EC}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team) Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95 - WildTangent) Hidden Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden CCleaner (HKLM\...\CCleaner) (Version: 3.16 - Piriform) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden CPUID CPU-Z 1.67.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3210 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Der Herr der Ringe Online v03.07.00.8037 (HKLM-x32\...\12bbe590-c890-11d9-9669-0800200c9a66_is1) (Version: 03.07.00.8037 - Turbine, Inc.) devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 1.0 - devolo AG) Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden dLAN Cockpit (x32 Version: 1.19.07 - devolo AG) Hidden DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.2.4412 - Hewlett-Packard) DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.2.4412 - Hewlett-Packard) Hidden Echo of Soul (HKLM-x32\...\Echo of Soul) (Version: - ) EdenEternal-DE (HKLM-x32\...\EdenEternal-DE) (Version: - ) Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.) Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden Feudalism 2 (HKLM-x32\...\Feudalism 2_is1) (Version: - Vitaly Zaborov) Final Exam Early Access (HKLM-x32\...\Steam App 237130) (Version: - ) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free YouTube Download version 3.2.48.1015 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.48.1015 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.44.910 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.44.910 - DVDVideoSoft Ltd.) Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.125 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North) Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 1.00.0000 - Hama) HAWKEN (HKLM-x32\...\Steam App 271290) (Version: - Adhesive Games) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HEX (HKLM-x32\...\{E31B651A-B48C-423C-8D0D-855756C8B7E8}_is1) (Version: - HEX Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version: - IO Interactive) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent) HP MAINSTREAM KEYBOARD (HKLM-x32\...\{B40D7926-AE5F-41EA-8AC6-56C0E2F00E9D}) (Version: 1.4.3.0 - Hewlett-Packard) HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.2.4725 - Hewlett-Packard) HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.2.4517 - Hewlett-Packard) HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.2.4513 - Hewlett-Packard) HP MediaSmart SmartMenu (HKLM\...\{A40F60B1-F1E1-452E-96A5-FF97F9A2D102}) (Version: 3.1.2.4 - Hewlett-Packard) HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.2.4522 - Hewlett-Packard) HP Setup (HKLM-x32\...\{53469506-A37E-4314-A9D9-38724EC23A75}) (Version: 8.4.4400.3525 - Hewlett-Packard Company) HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.0.12844.3519 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{DE77FE3F-A33D-499A-87AD-5FC406617B40}) (Version: 5.002.003.003 - Hewlett-Packard) HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.6.0 - Hewlett-Packard) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6302.0 - IDT) Infestation: Survivor Stories (HKLM-x32\...\Steam App 226700) (Version: - Hammerpoint Interactive) Infinity Wars - Animated Trading Card Game (HKLM-x32\...\Steam App 257730) (Version: - Lightmare Studios) Insaniquarium Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.0.4.922 - IObit) Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle) Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation) Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle) Jewel Quest II (x32 Version: 2.2.0.95 - WildTangent) Hidden Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3130 - CyberLink Corp.) LabelPrint (x32 Version: 2.5.3130 - CyberLink Corp.) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden LightScribe System Software (HKLM-x32\...\{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}) (Version: 1.18.20.1 - LightScribe) Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains) Loadout (HKLM-x32\...\Steam App 208090) (Version: - Edge of Reality) Logitech Gaming Software 8.70 (HKLM\...\Logitech Gaming Software) (Version: 8.70.315 - Logitech Inc.) LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.9 - www.leaguereplays.com) Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS) Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SkyDrive (HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\SkyDriveSetup.exe) (Version: 17.0.2015.0811 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) Moorhuhn Kart 2 XXL (HKLM-x32\...\{7A2FD295-38D2-4AAF-BF41-2C95EBB96126}) (Version: - ) Moorhuhn Kart Extra XXL (HKLM-x32\...\{DE60CAE2-4CA8-4A6A-A557-0668004FE889}) (Version: - ) MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com) Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.2.4412 - Hewlett-Packard) Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.2.4412 - Hewlett-Packard) Hidden Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MusicStation (HKLM-x32\...\MusicStationNetstaller) (Version: 1.0.1.5 - Hewlett-Packard) NC Launcher (GameForge) (HKLM-x32\...\NCLauncher_GameForge) (Version: - NCsoft) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.52.3 - Black Tree Gaming) Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.23 - NVIDIA Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5936 - NVIDIA Corporation) NVIDIA GeForce Experience 1.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7 - NVIDIA Corporation) NVIDIA Grafiktreiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) NVIDIA Virtual Audio 1.2.9 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.9 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.0.3.30295 - Grinding Gear Games) Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r4600) (Version: - ) PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.9 - PDF Complete, Inc) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.) PhotoNow! (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden PictureMover (HKLM-x32\...\{264FE20A-757B-492a-B0C3-4009E2997D8A}) (Version: 3.5.0.33 - Hewlett-Packard Company) PingPlotter Standard 3.42.3s (HKLM-x32\...\{1C1D0A2C-C8B4-4C2C-9877-884F8FC082B5}) (Version: 3.42.3.6 - Nessoft, LLC) PlanetSide 2 (HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\soe-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment) Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4329 - CyberLink Corp.) Power2Go (x32 Version: 6.1.4329 - CyberLink Corp.) Hidden PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3129 - CyberLink Corp.) PowerDirector (x32 Version: 8.0.3129 - CyberLink Corp.) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert) RaiderZ (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219436}_is1) (Version: 1.0.0.36787 - Gameforge) Raptr (HKLM-x32\...\Raptr) (Version: - ) Recovery Manager (x32 Version: 5.5.3219 - CyberLink Corp.) Hidden Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder) ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version: - Roccat GmbH) Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix) <==== ACHTUNG Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games) Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios) SecondLifeViewer (remove only) (HKLM-x32\...\SecondLifeViewer) (Version: - ) Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) SHIELD Streaming (Version: 1.6.34 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.8.2808.0 - Hi-Rez Studios) SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.02.0000 - Electronic Arts) SPORE™ Süß & Schrecklich Ergänzungs-Pack (HKLM-x32\...\{C07F8D75-7A8D-400E-A8F9-A3F396B49BB1}) (Version: 1.00.0000 - Electronic Arts) Spotify (HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Spotify) (Version: 1.0.10.107.gd0dfca3a - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) SWF Opener (HKLM-x32\...\{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1) (Version: 1.3 - UnH Solutions) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.27614 - TeamViewer) TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version: - CD PROJEKT RED) TmUnitedForever (HKLM-x32\...\TmUnitedForever_is1) (Version: - Nadeo) TrackMania United 0.2.0.8 (HKLM-x32\...\TmUnited_is1) (Version: - Nadeo) Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton) Vindictus EU (HKLM-x32\...\Vindictus EU) (Version: - ) Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - ) Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) War Thunder Launcher 1.0.1.335 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment) War Thunder Launcher 1.0.1.336 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8b72e9}}_is1) (Version: - Gaijin Entertainment) Warframe (HKLM-x32\...\{4265EC65-8B00-47C9-8688-24FD0FD8ED3D}) (Version: 1.0.0 - Digital Extremes) Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1) (Version: - Wargaming.net) YGOPro DevPro (HKLM-x32\...\{A115F80F-2B26-464E-97A3-8B13EC533C3D}) (Version: 2.1.2 - DevPro, LLC) Zinio Reader 4 (HKLM-x32\...\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1) (Version: 4.0.3184 - Zinio LLC) Zinio Reader 4 (x32 Version: 4.0.3184 - Zinio LLC) Hidden Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Wiederherstellungspunkte ========================= 28-07-2015 21:01:11 Windows Update 02-08-2015 19:00:03 Windows-Sicherung ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2014-03-29 23:21 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0483A424-0F23-475F-A338-37BF6BFDF6C7} - System32\Tasks\{53D2F1B6-F1F9-4134-9969-05F6150A4ADA} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{C07F8D75-7A8D-400E-A8F9-A3F396B49BB1}\SPORE_BP1Setup.exe" -c -runfromtemp -l0x0007 -removeonly Task: {0CAD45D0-E17F-4F9D-B80F-3B490B9AC96B} - System32\Tasks\{A78B7451-432A-47DA-B0D5-C9B6455858E9} => pcalua.exe -a C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {1214D927-1596-4D56-AEF2-57B83DD69C7B} - System32\Tasks\{A19C5D0F-9D2B-4A0E-B7F7-6996A2A0CF7C} => pcalua.exe -a C:\Users\Tobi\Downloads\Shockwave_Installer_Slim.exe -d C:\Users\Tobi\Downloads Task: {1509FEFE-0A45-4F3C-9252-C44181C00DE3} - System32\Tasks\{78300E04-CBCE-4EF0-97ED-ECF6D66B480B} => Chrome.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsMain Task: {1A0EB7A0-470A-4CD0-88A9-078AB079D993} - System32\Tasks\HPCeeScheduleForSPEEDLINE_HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {2367F94F-9B9A-411E-9A77-3D1DB192095E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated) Task: {2ED4330A-0AA1-443A-BCA9-311F14F6F79E} - System32\Tasks\{750FB4C1-238A-4BEF-A580-9BD5BD32DFD7} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller" Task: {33D2DABE-E8CD-43E5-B2BF-EE27C76453F6} - System32\Tasks\{10233D4A-6C0E-483A-8961-6016B4863411} => C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe Task: {42443F18-B580-43D6-84B2-02C8BFC75D2E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {44F9F9E5-0213-4D90-A8FA-76EB686363F2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {50205732-64CF-476E-BA69-B123C0E65352} - System32\Tasks\{A20D444F-C731-4240-8068-0F8A3D858849} => Firefox.exe hxxp://ui.skype.com/ui/0/5.5.0.119.259/de/abandoninstall?source=lightinstaller&page=tsInstall&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;systemlevelpresent Task: {5042F4AB-3A32-4B23-AD92-03A1E79C6B05} - System32\Tasks\{6EA205EA-12EC-4557-980D-B384DDD3C9E6} => C:\Users\Tobi\Desktop\SecurityCheck.exe Task: {5F6E069B-0156-4C71-BE86-66B01899FCC7} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {5F97CB27-1B6D-48E6-8A1F-2C2636930E85} - System32\Tasks\Hewlett-Packard\HP Support Assistant\First Boot => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2013-11-04] (Hewlett-Packard Company) Task: {6221C8D7-ECB9-4A96-981E-7FD20A699416} - System32\Tasks\HPCeeScheduleForTobi => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {649880F4-DF85-4525-8329-23012269E261} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {71766A8F-4794-4304-A51D-468666614AE1} - System32\Tasks\{879C0237-06D7-47FD-9D49-F9AE1907D0D8} => C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe Task: {778AA86E-F490-45FE-B248-7E56260EA13D} - System32\Tasks\update-S-1-5-21-3131910065-3854824008-1126967849-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] () Task: {886B6309-171F-4A68-826F-744307074E0F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {8BA52B87-3FD5-4A77-9510-8EBCBAB3F5AE} - System32\Tasks\{F31DF2AC-2DC2-4DC5-821D-F9113530F7B8} => pcalua.exe -a "C:\Users\Tobi\Downloads\dotnetfx35 (1).exe" -d C:\Users\Tobi\Downloads Task: {8C94F4D5-126F-45A4-9493-45F09A853A29} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] () Task: {92410B85-965B-49E4-AE0E-60F3CD35E5CA} - System32\Tasks\{61A57D28-DB9E-42EB-B716-BF2AD9807DD9} => pcalua.exe -a C:\Users\Tobi\Downloads\WoT_0.6.7_eu_setup.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {9DBEF991-8AAD-45F8-BBE7-FBCDAAA5A97F} - System32\Tasks\{47BEF449-F31D-4557-B188-C5EBE939857C} => pcalua.exe -a C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {A2C8A573-5EBF-449C-A247-12265D0FFF13} - System32\Tasks\{420825FA-7833-4EF7-855E-3E6A147AC9F0} => pcalua.exe -a "C:\Users\Tobi\Downloads\dotNetFx35setup (1).exe" -d C:\Users\Tobi\Downloads Task: {A4142EA7-D55E-4EC5-AD57-25FE561A4D2F} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {ADA81366-62F0-4D13-B4FA-A5A0E3D91623} - System32\Tasks\HPOSIAPP64 => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [2009-02-28] () Task: {B10E19AB-A117-49B8-A87C-D4DE151D23F8} - System32\Tasks\AnVir Task Manager => C:\Program Files (x86)\AnVir Task Manager Free\anvir.exe Task: {B5132B36-E386-46C8-9836-61B55368F4B0} - System32\Tasks\{5F9B925C-8521-47EB-A62B-9A625E42F8A6} => C:\Riot Games\League of Legends\lol.launcher.exe [2013-06-12] () Task: {B5FABB95-707A-429E-B849-DC6CA7AD4CFC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.) Task: {B80837C6-09FE-4E7D-9BC2-F99CCC912F0F} - System32\Tasks\{B98D5539-E401-43F7-98FD-5EAFAD90C715} => C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe Task: {B87A16B6-377D-4E98-97BE-37DC0277CB0D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-07-21] (Hewlett-Packard) Task: {B9F481CB-0D74-487C-BAD2-F161C53D8709} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {C6E01C82-8C37-41FD-9646-B48E723A7417} - System32\Tasks\{99521F94-364C-49ED-A8F3-0C800F9186CD} => C:\Riot Games\League of Legends\lol.launcher.exe [2013-06-12] () Task: {CC6EA153-F85B-4221-A41C-341525FEC68D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) Task: {D1436E42-872B-4243-A9EA-F74D43F9C453} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.) Task: {D184898B-0809-42C1-99F5-67165654C54B} - System32\Tasks\{83A2DD81-ADA2-4672-8B50-84C8192D7D17} => C:\Users\Tobi\Downloads\dotNetFx35setup.exe Task: {D7F8E428-AB3D-4750-9CAD-8CA7182195C3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-07-21] (Hewlett-Packard) Task: {D91FAF33-BB18-433D-A1E6-1C10B53075AA} - System32\Tasks\{060A3662-234E-48AC-96A6-E1C861CB370C} => C:\Users\Tobi\Downloads\setup_FluidSIM_MecLab_19.exe Task: {E3FA7199-1E6C-457D-8071-EFA1450F6260} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2013-11-04] (Hewlett-Packard Company) Task: {E5CFD553-FDBC-406A-BF8C-6165587C3C2B} - System32\Tasks\{D2216B41-3EE4-4E48-BB5C-D0EF5C948749} => C:\Riot Games\League of Legends\lol.launcher.exe [2013-06-12] () Task: {E90375FF-DB8E-4D0E-B18A-F5B94B4675EA} - System32\Tasks\{C4F2FB12-156B-4100-9B03-2F0F981B8BB2} => pcalua.exe -a C:\Users\Tobi\Downloads\dotnetfx35.exe Task: {FB38BEF5-32B7-4393-8309-CC0EF8797432} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-27] () Task: {FF2FABCD-1EF6-4D5C-A880-3FFB315DD4B1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForSPEEDLINE_HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\Windows\Tasks\HPCeeScheduleForTobi.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\Windows\Tasks\update-S-1-5-21-3131910065-3854824008-1126967849-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-09-04 22:55 - 2013-09-12 09:25 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2015-07-02 02:28 - 2015-07-02 02:28 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2015-07-02 02:28 - 2015-07-02 02:28 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2012-01-10 15:41 - 2015-03-30 15:03 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe 2013-07-19 13:10 - 2013-07-19 13:10 - 01992328 _____ () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe 2010-07-19 20:57 - 2010-07-19 20:57 - 02231616 _____ () C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe 2011-05-10 01:52 - 2009-02-28 04:13 - 00053248 _____ () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe 2011-12-19 01:26 - 2015-03-26 21:28 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2013-06-12 18:11 - 2013-10-09 16:36 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe 2015-07-22 18:13 - 2015-07-22 18:13 - 02354168 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe 2015-07-22 18:13 - 2015-07-22 18:14 - 03985912 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe 2013-10-09 16:52 - 2013-10-09 16:52 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.153\deploy\LolClient.exe 2013-03-31 13:13 - 2012-06-17 11:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll 2015-04-30 01:01 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-04-30 01:01 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-04-30 01:01 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd 2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd 2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd 2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd 2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd 2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll 2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd 2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd 2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd 2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll 2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd 2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd 2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll 2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll 2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll 2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd 2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll 2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd 2015-07-27 21:32 - 2015-07-27 21:32 - 02551040 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL 2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd 2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd 2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll 2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll 2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll 2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll 2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll 2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll 2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll 2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll 2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll 2015-07-22 18:14 - 2015-07-22 18:14 - 01715704 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\RiotLauncher.dll 2013-10-09 16:51 - 2013-10-09 16:51 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.153\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll 2013-10-09 16:51 - 2013-10-09 16:51 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.153\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll 2015-06-27 20:20 - 2015-07-25 01:02 - 41287224 _____ () C:\Users\Tobi\AppData\Roaming\Spotify\libcef.dll 2015-06-27 20:20 - 2015-07-25 01:02 - 01488440 _____ () C:\Users\Tobi\AppData\Roaming\Spotify\libglesv2.dll 2015-06-27 20:20 - 2015-07-25 01:02 - 00079928 _____ () C:\Users\Tobi\AppData\Roaming\Spotify\libegl.dll 2015-07-30 11:35 - 2015-07-25 10:46 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libglesv2.dll 2015-07-30 11:35 - 2015-07-25 10:46 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libegl.dll 2015-07-30 11:35 - 2015-07-25 10:46 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\Temp:AD022376 ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer trusted/restricted =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Hama Wireless LAN Utility.lnk => C:\Windows\pss\Hama Wireless LAN Utility.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snapfish PictureMover.lnk => C:\Windows\pss\Snapfish PictureMover.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Tobi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent MSCONFIG\startupreg: AVG_UI => "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY MSCONFIG\startupreg: BATINDICATOR => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe MSCONFIG\startupreg: BeatsOSDApp => C:\Program Files\IDT\WDM\beats64.exe MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe MSCONFIG\startupreg: GoogleChromeAutoLaunch_9ED998646215A7B2837127291A244E96 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window MSCONFIG\startupreg: HP Software Update => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe MSCONFIG\startupreg: Launch LCore => C:\Program Files\Logitech Gaming Software\LCore.exe /minimized MSCONFIG\startupreg: LaunchHPOSIAPP => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe MSCONFIG\startupreg: Nvtmru => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: SmartMenu => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{A10BE361-9615-45CB-B01C-7EE3486635EF}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [{22AC2738-FBC8-469E-BD87-F32256B4DA2A}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe FirewallRules: [{AEF130A6-13A1-4304-8744-3028AF324817}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe FirewallRules: [{491EC35C-446E-4287-9E65-6ABB0C7E4313}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe FirewallRules: [{A7A3104E-DA67-4316-90A0-FB728BBF6917}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe FirewallRules: [{3E583019-218B-4826-B435-DA8A847C20E4}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe FirewallRules: [{7281B32C-524D-4882-A814-AE4DC2E4BF6F}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe FirewallRules: [{CE556C2E-0EA1-431B-AB0F-5A2942D8DB45}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{65EB9355-2C68-4E6E-ACBB-AFC1A94E299A}] => (Allow) LPort=2869 FirewallRules: [{772940E3-8CE8-4DC0-A3E5-52FAE20123ED}] => (Allow) LPort=1900 FirewallRules: [{B3C59B56-A637-47E8-93E0-B65B2E11D25B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [{93128033-AFA8-4776-9CEE-E4A28DCC0340}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{DE015C7B-4F4F-4B36-A1C3-32C70C2FBBE3}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{21F394DF-C270-4CEE-AD6C-7E91E79966F3}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{0D281AA5-C575-42C1-A0D6-4F891F4D1C1E}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{7A561836-B39F-49BA-8E14-CB31F1CC33EA}] => (Allow) C:\Windows\SysWOW64\msiexec.exe FirewallRules: [{C9D483B6-B31E-4DB9-9603-0C07BF5D3E4B}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{99FDD687-5EE1-4B69-8BFE-AE9D66BDB9E5}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe FirewallRules: [{B8EB9492-69DB-467B-9F81-037AB6251821}] => (Allow) %SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe FirewallRules: [TCP Query User{7AB10C88-F4B4-4E21-9CDA-01AAD1E71A14}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [UDP Query User{F35AA6DF-F8D8-4ADA-83A9-2F41BBC9B812}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [TCP Query User{82C81159-3B62-405F-96A6-E8BD1E262B90}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{FC4C130B-A783-46F7-AFD8-348E10A6A6E5}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{23A59669-968C-41D8-BC9D-A918570A9DC9}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{E1A4E801-D9E7-4E41-982A-BBC47D0E42C2}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [TCP Query User{FCB83924-BA64-49D8-898A-65F66DDD0ADA}C:\users\public\sony online entertainment\installed games\planetside 2 psg\planetside2.exe] => (Allow) C:\users\public\sony online entertainment\installed games\planetside 2 psg\planetside2.exe FirewallRules: [UDP Query User{C81777F0-423C-4600-AE94-E12C83DA78A4}C:\users\public\sony online entertainment\installed games\planetside 2 psg\planetside2.exe] => (Allow) C:\users\public\sony online entertainment\installed games\planetside 2 psg\planetside2.exe FirewallRules: [TCP Query User{0CBA7F20-EE90-4400-B2C7-FCFB8DD5845E}C:\program files (x86)\trackmania united\tmunited.exe] => (Allow) C:\program files (x86)\trackmania united\tmunited.exe FirewallRules: [UDP Query User{706C0436-221A-408E-9CF7-2A938B3ADE1A}C:\program files (x86)\trackmania united\tmunited.exe] => (Allow) C:\program files (x86)\trackmania united\tmunited.exe FirewallRules: [TCP Query User{6B03722A-A442-43CB-875F-58D7532A562C}C:\games\ygopro devpro online\devpro.dll] => (Allow) C:\games\ygopro devpro online\devpro.dll FirewallRules: [UDP Query User{A4C7F94D-BE62-4CB1-9826-3C391C5130B2}C:\games\ygopro devpro online\devpro.dll] => (Allow) C:\games\ygopro devpro online\devpro.dll FirewallRules: [TCP Query User{6C7A7D6F-651A-48C3-BE8D-34B58685BB36}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe FirewallRules: [UDP Query User{6B79765B-7745-4F02-9978-024463B1194D}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe FirewallRules: [{1BF041E6-DD2E-4B97-A18F-58235CB8E8B5}] => (Allow) C:\gPotato.eu\Allods Online\bin\launcher.exe FirewallRules: [TCP Query User{9E3D03E8-EE71-4B44-9533-C4AF17B7A004}C:\gpotato.eu\allods online\bin\gamecenterlight\gamecenter@mail.ru.exe] => (Allow) C:\gpotato.eu\allods online\bin\gamecenterlight\gamecenter@mail.ru.exe FirewallRules: [UDP Query User{67F8220A-866C-4E21-812A-8C10FC6906FB}C:\gpotato.eu\allods online\bin\gamecenterlight\gamecenter@mail.ru.exe] => (Allow) C:\gpotato.eu\allods online\bin\gamecenterlight\gamecenter@mail.ru.exe FirewallRules: [{E71903CC-4BBC-49CD-A9DF-818870933659}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{10D80D33-8AAF-4FB7-B819-1B47A6345F0C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [TCP Query User{6F9A5D59-D2C0-4F14-8422-81BA59BB63A8}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe] => (Allow) C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe FirewallRules: [UDP Query User{FECFDAA6-67B9-4C04-9776-9A7D2D14D567}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe] => (Allow) C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe FirewallRules: [{A2C86E91-22FA-434C-8CC0-CD035CB92277}] => (Block) C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe FirewallRules: [{773D6516-628B-417B-826E-63AE46EB91D8}] => (Block) C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe FirewallRules: [{979BA2F5-D265-4BF8-A11B-6590D6E08AB0}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe FirewallRules: [{1E9CDBD2-01AD-4754-B0C7-65624EB425BF}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe FirewallRules: [{25ADE271-85B5-43A8-A983-7DF273C6AA80}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe FirewallRules: [{9822B2D4-B2B3-49E1-B2DF-BFC3E6460621}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe FirewallRules: [{9B84A91F-EA22-4DE3-A371-9B4D5CECD514}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe FirewallRules: [{8CD8582E-F156-46DF-BC79-405F9E9FDE48}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe FirewallRules: [{DAC45CE4-090E-43F4-94AD-F4173535D59F}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [{AC9C5C28-9ADB-41F8-BE5F-F477FC70AEB9}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [{B40B25FD-893F-4E75-B48C-216D9C512FD0}] => (Block) C:\program files (x86)\warthunder\aces.exe FirewallRules: [{773EA0D1-9265-49A3-854A-1F5194A16C18}] => (Block) C:\program files (x86)\warthunder\aces.exe FirewallRules: [{258FA23D-998F-482D-853D-24ECD99FC1A7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{FC650540-C821-4D87-84C7-85EFD9FBA87E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{C3DA281B-7375-46CA-9483-CEEF9A8F6384}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{04CBDD45-7FBA-4AC8-B424-4018A33D552A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{4F9EC7DC-A687-4126-8129-C49D6FC54608}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe FirewallRules: [{BCA736C1-3055-4ADD-AFB9-5AFB0EB2BE7A}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe FirewallRules: [{7EB2AA4C-3603-4A20-BC90-18835D85DE6D}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe FirewallRules: [{5E73A1E3-C341-4735-AE92-6525CE588169}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe FirewallRules: [{02A76012-4BAA-40C6-A927-3261823568EB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{6AC94DB1-CED3-4E7C-B0CD-4F378648DB20}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{FBCAECCA-F45A-4CFA-9298-24FE0096FCE6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{2A50742E-0B17-4A23-B7F1-DDECC7B1E508}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{567BCB69-CC8F-46DE-96ED-D94420079094}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{F80D74C1-C0FC-44BC-A01D-8B5063328F55}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{ADE9D14F-6DCF-4BD9-8612-6CB54A78F2F4}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{B68C30B9-74B4-4728-BF2B-1CE33305A5A4}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{232E7478-3632-4B09-916A-CDD099AC5B2B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{381C91B0-5CCF-4469-B336-BB8F5755A041}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{71375097-2BDF-4F55-A62C-FEF5FF446E39}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Final Exam Demo\final_exam.exe FirewallRules: [{D9AC6A4A-1FAD-4CAE-A870-9ADEC9D1DE96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Final Exam Demo\final_exam.exe FirewallRules: [{7318B4CA-2A1E-4689-AEF1-B50918F71B3A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{B673F306-9279-4B03-922A-352BD0E44460}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{63386E38-6573-498F-ABD2-763274C74FAB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Final Exam Demo\final_exam.exe FirewallRules: [{914A871D-7C52-4DB0-BB55-4A179FEB8A35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Final Exam Demo\final_exam.exe FirewallRules: [{5ED8F9DE-63A7-4700-BBF4-3B79123AFC5C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [{930C005B-4FDB-4D5A-965D-6CA2E325F9FF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe FirewallRules: [TCP Query User{06217EDF-5F41-4AB3-883D-97AD693F5200}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe FirewallRules: [UDP Query User{69CAAE34-E54C-463B-832D-584CD3501E55}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe FirewallRules: [{4A939445-4A14-4F62-B125-9771649AB95F}] => (Allow) C:\Users\Tobi\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{D3D839FD-974C-4EC9-9EBD-00A01C232045}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [{0805E943-C486-42D7-905C-DE3286B9E420}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe FirewallRules: [TCP Query User{B5B5AD94-115B-4070-97CC-1D5765E0AECE}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe FirewallRules: [UDP Query User{BF550CBE-2862-4FC0-8E72-C89561B4E289}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe FirewallRules: [{4FEF302B-5281-4AF8-84D0-A6D44EDC17F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The War Z\WarZlauncher.exe FirewallRules: [{42300BB9-DE7C-4B54-985A-320FA37A3C4B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The War Z\WarZlauncher.exe FirewallRules: [{A69CF43F-8A68-4D6E-B575-841C47527116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{E17BAE5E-A5EE-4878-B260-3F433351E80B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe FirewallRules: [{3C68827F-9BF6-4EBB-99EF-881A10D5E46E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{D7F2578B-8E8B-4EE7-B1AB-521CA5F21BD8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{3A23515C-E86C-4A43-BA63-C6562C4E00EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{C34E3473-97D4-43F1-A053-DD9E79C426B9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{E024D5B7-593D-4384-9C31-1E09CC82BD1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{135D9463-BAFB-4223-BECE-F529E1A1B758}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{73A01026-6B5F-4F31-B754-568EB50260F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{4CFEBDFE-E542-4585-A2CB-4862C88DB5A6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{A0C8C111-6BE1-48B9-BAE9-7D51C08DB931}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{3D123011-0F56-4821-9974-F6105D0EACFA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{933CD336-EE1C-43F7-AB3A-469FCFA3E346}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [{52276018-E5E3-43AC-8072-304304C892FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe FirewallRules: [{9A3B59B7-024B-4D5B-851C-8EE8856F750E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{7F7A3AE5-8B2D-4565-B213-26F24F8C367C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe FirewallRules: [{39C976BE-FBFC-4443-928B-489E848D5571}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [{8F5D5278-EA84-41BF-AB4B-45156BFC041E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe FirewallRules: [{A62F64D5-DC33-44F2-99C6-EC99456742BC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{9293EC1C-41BE-4664-BF0C-9A32DF53714F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe FirewallRules: [{1084A816-B635-431B-8F33-1B88351640D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{1EAF6F65-79D0-4997-A28D-30303FE247BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe FirewallRules: [{511F4D4C-1EEF-442A-8AE4-6C431EBEC518}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{EA6EE084-B646-492C-970E-2619AF25E315}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe FirewallRules: [{2F46F8C4-181A-463B-8154-17F4EB238126}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [{A2BE5B9B-B7ED-433C-8E9C-FF8376EC34F1}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe FirewallRules: [TCP Query User{8304E2DF-283F-4C41-8DF1-AAC67B60AE70}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe FirewallRules: [UDP Query User{59323082-EF79-4CFB-96D0-0EE499F88092}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe FirewallRules: [{513EBA78-F010-49C6-9E9E-B51066FD10BA}] => (Allow) C:\Program Files (x86)\WarThunder_Nightly\launcher.exe FirewallRules: [{675D71CA-3785-4017-B637-BFA56AF8B070}] => (Allow) C:\Program Files (x86)\WarThunder_Nightly\launcher.exe FirewallRules: [TCP Query User{6D06068A-1D19-44A9-868F-6A00606B0C9D}C:\program files (x86)\warthunder_nightly\aces.exe] => (Block) C:\program files (x86)\warthunder_nightly\aces.exe FirewallRules: [UDP Query User{6CDB0827-EC85-42E4-97F7-08FDE5DDA3F4}C:\program files (x86)\warthunder_nightly\aces.exe] => (Block) C:\program files (x86)\warthunder_nightly\aces.exe FirewallRules: [{E3257B1D-C73B-4AC1-BA73-88EB40D24255}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe FirewallRules: [{A150D8A9-DE13-4841-80DB-CD3CB1E78C1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe FirewallRules: [TCP Query User{AD8C768E-591B-4950-AFBD-983936F5407C}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [UDP Query User{4E6E8A6A-1429-4D29-9ED9-848CBEC5ABD3}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe FirewallRules: [{8CFA0249-47F0-4F6F-95CD-0C9F34CD1646}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{C5FBBB10-4A69-4015-B90D-AA9605EEF786}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{9D7D37DC-83AA-44A8-90B1-93F7C1C6B6A3}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [{237B576E-DE83-4479-8B76-2FE60A743979}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [TCP Query User{505031DB-D7A5-415B-BB61-77154B20CDD6}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe FirewallRules: [UDP Query User{8E4D1DB4-769D-4DD4-A864-A9B2220E044A}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe FirewallRules: [TCP Query User{1C599E72-5B89-465F-AB83-AF0DC0109676}C:\program files\java\jre8\bin\java.exe] => (Allow) C:\program files\java\jre8\bin\java.exe FirewallRules: [UDP Query User{86C10DE7-9F80-4268-9DC2-9BDCB0AC9440}C:\program files\java\jre8\bin\java.exe] => (Allow) C:\program files\java\jre8\bin\java.exe FirewallRules: [{EC037EBA-929C-4E96-8F71-720242334EB3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{4F4EA35C-24DF-4A3C-8236-73292B6FBF69}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{63E4476D-4FA6-4461-8C3D-D70782DC8845}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{EBCD40C9-824B-402F-B83D-D8FC75632C57}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe FirewallRules: [{ED14F750-F67A-4082-86AB-2A11E082A4D4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{2B851BDF-E88C-42C4-B23C-C2B4C19AF1BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [TCP Query User{AD326130-B13A-4E3B-989D-8BDB3B0CA90E}C:\program files\java\jre8\bin\java.exe] => (Allow) C:\program files\java\jre8\bin\java.exe FirewallRules: [UDP Query User{15BD8E0A-FAFC-47E0-8D13-88BBDE67D63E}C:\program files\java\jre8\bin\java.exe] => (Allow) C:\program files\java\jre8\bin\java.exe FirewallRules: [TCP Query User{386CB66F-9F09-45C2-9697-D88A334C352A}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{E645603D-4D67-4459-B609-09A54257B07F}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{0FC70C88-E029-4232-8DD9-5418E3A53205}] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{7B4B6189-F3A4-4C7D-A2D8-556A4797925F}] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{E51C5A2F-B6B7-4928-BE81-B6FFF8A06814}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{AC8CE4FC-088E-488B-B42E-A5FDE85D9EC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{593EFE93-C747-45A3-8E72-B7D23D6239FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{AB515141-942A-494C-9B24-CAEE2C7BC284}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe FirewallRules: [{DBD2B8C7-9167-4105-BB26-EA5C7B493D13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{E507C21F-08DF-46D0-BD7B-0780085930DB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe FirewallRules: [{3A3128E8-227B-4B0B-9D6B-E22E7F40118E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe FirewallRules: [{15E21BA3-7DA7-4E9A-9470-D9B895294504}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe FirewallRules: [{863CEBE7-190D-4EDA-8E1A-040CFA088E88}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{77236D23-BA54-45AC-AFB0-F48A4DCD6374}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{C457473F-6F42-453B-804C-2B81E034DC95}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.exe FirewallRules: [{13C2AD57-BD6B-4C49-938B-6DF6453B56A6}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe FirewallRules: [{CDD60A5A-0B54-435C-8DF2-8C28EFF1BFA2}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.exe FirewallRules: [{02215C80-7B17-40E2-B94C-A0FC45F0D7EE}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe FirewallRules: [{C719533D-FC72-4EE7-B96F-0BA80A901F30}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.exe FirewallRules: [{3C710F63-46C5-4B34-AF54-D2B6C805C17E}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe FirewallRules: [{5BAD357A-7348-4ED9-9446-B93F173CDC1E}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe FirewallRules: [{299C9267-C07A-4747-B865-EE3DFB0B5C09}] => (Allow) C:\Users\Tobi\AppData\Local\Warframe\Downloaded\Public\Tools\RemoteCrashSender.exe FirewallRules: [TCP Query User{3DA6C75D-FB00-427F-9196-4AF698AA4E1C}C:\users\Tobi\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\Tobi\appdata\local\warframe\downloaded\public\warframe.x64.exe FirewallRules: [UDP Query User{26829C42-BB40-49D3-BCA1-F40718C3A492}C:\users\Tobi\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\Tobi\appdata\local\warframe\downloaded\public\warframe.x64.exe FirewallRules: [{9125D3EA-A232-4EF8-AE0F-A30E630116D4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{6BBC6994-9CCE-46A9-9E41-D455CF64F19B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe FirewallRules: [{7F09D3E3-7AD8-415C-A3D4-451CB6E73E01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [{62EEF411-4076-475A-8526-38D7F4387C7A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe FirewallRules: [TCP Query User{5B01B54C-7CF2-4151-9C7B-F568DD55AFEA}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe FirewallRules: [UDP Query User{F63EBAA7-B1E0-4496-9ECA-98C8C46F9428}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe FirewallRules: [{9E183B0D-C667-4E7B-B1EA-25D90DCA28EE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{ECED4193-FE94-41ED-A8FE-54B886D47805}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{F7704CAD-4737-4D6E-A10F-2BF77E35DCC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe FirewallRules: [{B69236AC-2FF7-4524-91DD-A17FD1D3CA78}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe FirewallRules: [TCP Query User{98397A39-2745-4FCE-B443-CAD84BD1235A}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [UDP Query User{E8EF7BB6-8C63-4994-BACF-0002886D54BA}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [TCP Query User{263C5199-B681-41AD-ADBB-D395C72D4E50}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe FirewallRules: [UDP Query User{9765D5F7-9FFF-473E-9460-7CECEB9E7B18}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe FirewallRules: [{69BCFD2C-1A11-4F00-9DB5-D5E5EA7841D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe FirewallRules: [{59D9E674-FEF0-4A8E-9C40-112E217C7E0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe FirewallRules: [{0A0B1FD7-9BBF-4517-AFCD-C578D40FB80B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{E1EBA657-291A-4691-B6B7-A6D5A6D6CC88}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [TCP Query User{B97874F6-F3C9-4C20-AF02-CC88F8AF2B9C}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe FirewallRules: [UDP Query User{68B9A306-639F-43A7-9FC2-795C7B65071E}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe FirewallRules: [TCP Query User{3E923443-DBE8-4CBF-918E-346EEEA23C4F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe FirewallRules: [UDP Query User{3B84D6EE-7834-440E-93CC-BF3914F44F7A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe FirewallRules: [{3C3BD27E-D694-4502-87A4-109360D9A79D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{79629778-2BE1-4BB7-9E52-85EB3F626152}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [TCP Query User{CF4C1CF5-95D9-401F-959D-EB817A8AEB32}C:\programdata\battle.net\agent\agent.3634\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3634\agent.exe FirewallRules: [UDP Query User{6E7DAB4C-AA09-4C71-993B-F037BEBE5B5A}C:\programdata\battle.net\agent\agent.3634\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3634\agent.exe FirewallRules: [{AA680274-1E9E-4892-8588-00869E4FAB9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{14B23843-0699-4B08-B2C4-9FD51B3C2D1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{6E21B9D7-D912-45B4-A1A8-F87F433484D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hawken\Binaries\Win32\HawkenGame-Win32-Shipping.exe FirewallRules: [{4F65A4CD-D4C9-49DE-82BF-6FEDB5163D8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hawken\Binaries\Win32\HawkenGame-Win32-Shipping.exe FirewallRules: [{B8452156-DAC6-4FA8-A8A2-AD5EDC3604CB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe FirewallRules: [{01B4BA87-9BE3-4BCD-9F30-C11505B2C141}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe FirewallRules: [{FD32379E-1286-479F-A043-1B3E9CAF0A7F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{CE38DB6D-CADB-4A3A-98D2-DCB34304BFFA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{C31AE681-2A64-485F-A74C-E72302FDAF7F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{1470DF47-3B45-4870-9291-A547580CEBEB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{D38A9EB8-E7E4-49BB-A6DF-75D8A8A9A285}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{AB5B6CFD-4ABE-4D6C-9998-C906D5427773}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{12807420-26A0-4794-A8CF-59909F68D59F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{4C5ADD46-2E14-4B87-A520-73016B2D2273}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [TCP Query User{2188594A-561E-466F-8BA0-9BC2080E24F2}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{77394116-6927-4234-B229-E1EBD662E283}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe FirewallRules: [{0ECB453D-1F4F-4BBD-B422-05F0919028F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{918F8032-17DD-4A28-8E9C-7B2B7FF6828B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [TCP Query User{D7C20423-A7E9-4C8A-BD46-F7CBF82F0708}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{C2FD2AB4-038E-49F8-9081-CE919F338D03}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{D68316EC-9E85-4CB1-8DDB-2D3BB60327D3}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{F47F6044-BD59-4490-9FE7-B39E169D28A1}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{6D35758D-410D-42F0-8B74-3917F94CBC5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\InfinityWars\Infinity Wars TCG.exe FirewallRules: [{0CBF7295-1C54-461C-BA36-F1320EC70EA4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\InfinityWars\Infinity Wars TCG.exe FirewallRules: [{62333BF0-192C-46F9-B2E2-AAD4010275CD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe FirewallRules: [{BAA6C15E-3EA6-44A9-8911-B642C0D5EB59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe FirewallRules: [TCP Query User{3AC4C7C6-B3CD-4AA2-A387-DE1031236DF0}C:\users\Tobi\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\Tobi\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{AEB9398F-E783-4F04-BB07-F1787F842FEF}C:\users\Tobi\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\Tobi\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{21C67A9D-25C4-4FD3-AE81-48BA29AEDD90}C:\users\Tobi\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\Tobi\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{99B65FE6-097B-4911-A139-D69B19ED81DF}C:\users\Tobi\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\Tobi\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{9BA17C8D-54D8-4F37-AA9C-79B06720E16F}C:\users\Tobi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\Tobi\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7B624F3A-0BC2-4AE2-A88D-D6FA61CF1052}C:\users\Tobi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\Tobi\appdata\roaming\spotify\spotify.exe FirewallRules: [{197F89E1-F19E-4D5C-ADE8-656EB95BADD8}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe FirewallRules: [{DB8C2E25-01F1-4DF8-A4C2-C57AABE99D0E}] => (Allow) C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe FirewallRules: [{436C5B6B-5465-45C9-854F-006A6760BC91}] => (Allow) C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe FirewallRules: [{0CFDF3B8-9671-4744-BCD8-7B3F7F2DBAAC}] => (Allow) C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe FirewallRules: [{16262A34-6DD2-45C3-A2DA-DD9CD975483E}] => (Allow) C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe FirewallRules: [TCP Query User{3FB07778-0602-4213-916E-8D2EEA41548A}C:\users\Tobi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\Tobi\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{E595DD11-5054-43E8-9F77-B1399A823524}C:\users\Tobi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\Tobi\appdata\roaming\spotify\spotify.exe FirewallRules: [{295475C1-AD69-4C9E-9B74-45FB12F303DB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{4F174651-27E5-4105-B403-A325D5F4697E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [TCP Query User{5B1524DA-DD2E-4674-8B76-3278ADA90E31}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{11A61EAD-DA57-4FAE-9093-AA0BC2EB54AA}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [TCP Query User{6523C9F5-A525-4BEA-8E0D-67EC513B9119}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{3D3F9D91-B2A2-431F-8CFC-79940C5E0AA9}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [TCP Query User{65C6A0AA-EB66-42AB-8D2D-B897141A6CAD}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe FirewallRules: [UDP Query User{8F956E9C-589D-46CE-ABE3-CDFFE0DA2835}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe FirewallRules: [{48C44D43-87D6-4CAC-A75D-03B9FBBDF6BE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{792B28DB-3C5D-466D-8E87-E916157F7C2B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{29C74905-4236-420B-8392-5B6357537B32}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{171470AF-727C-443C-A18A-40FC2859C3B3}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{F823E981-62C2-453B-9386-961601121827}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{FEABBEC8-2AA1-4B6A-8700-ABA3DC167B2D}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/02/2015 02:26:07 PM) (Source: LiveUpdate.exe) (EventID: 0) (User: ) Description: Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen Error: (07/28/2015 09:27:06 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe_LanmanServer, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1 Name des fehlerhaften Moduls: SSCORE.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9ec Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000000146d ID des fehlerhaften Prozesses: 0x2bc Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_LanmanServer0 Pfad der fehlerhaften Anwendung: svchost.exe_LanmanServer1 Pfad des fehlerhaften Moduls: svchost.exe_LanmanServer2 Berichtskennung: svchost.exe_LanmanServer3 Error: (07/23/2015 12:54:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00200114 ID des fehlerhaften Prozesses: 0x21e0 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Error: (07/23/2015 12:07:18 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00091cc9 ID des fehlerhaften Prozesses: 0x24e0 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Error: (07/22/2015 11:37:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00aaa409 ID des fehlerhaften Prozesses: 0xec8 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Error: (07/22/2015 09:31:20 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (07/19/2015 02:32:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00091cc9 ID des fehlerhaften Prozesses: 0xd28 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Error: (07/19/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000001 ID des fehlerhaften Prozesses: 0x15c0 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Error: (07/19/2015 11:46:34 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm hh.exe, Version 6.1.7600.16385 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1f6c Startzeit: 01d0c207c262c1c8 Endzeit: 1 Anwendungspfad: C:\Windows\hh.exe Berichts-ID: 071b348c-2dfb-11e5-8500-e0699582c158 Error: (07/19/2015 01:10:41 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Name des fehlerhaften Moduls: RocketLeague.exe, Version: 1.0.10897.0, Zeitstempel: 0x559cc35b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00aaa409 ID des fehlerhaften Prozesses: 0x4e0 Startzeit der fehlerhaften Anwendung: 0xRocketLeague.exe0 Pfad der fehlerhaften Anwendung: RocketLeague.exe1 Pfad des fehlerhaften Moduls: RocketLeague.exe2 Berichtskennung: RocketLeague.exe3 Systemfehler: ============= Error: (08/02/2015 02:29:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/02/2015 02:29:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (08/02/2015 02:28:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "HP Client Services" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/02/2015 02:28:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/02/2015 02:28:30 PM) (Source: HTTP) (EventID: 15005) (User: ) Description: \Device\Http\ReqQueue[::]:80 Error: (08/02/2015 02:28:30 PM) (Source: W3SVC) (EventID: 1004) (User: ) Description: Der WWW-Publishingdienst (WWW-Dienst) konnte das URL-Präfix "hxxp://*:80/" für die Website "1" nicht registrieren. Die Website wurde deaktiviert. Das Datenfeld enthält die Fehlernummer. Error: (08/02/2015 02:27:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/02/2015 02:27:30 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (08/02/2015 02:26:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "otshot" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/02/2015 02:25:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht. Microsoft Office: ========================= Error: (08/02/2015 02:26:07 PM) (Source: LiveUpdate.exe) (EventID: 0) (User: ) Description: Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen Error: (07/28/2015 09:27:06 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: svchost.exe_LanmanServer6.1.7600.163854a5bc3c1SSCORE.DLL6.1.7601.175144ce7c9ecc0000005000000000000146d2bc01d0c96ad43b6ae3C:\Windows\system32\svchost.exeC:\Windows\system32\SSCORE.DLLa186824d-355e-11e5-9d83-801f0205be0c Error: (07/23/2015 12:54:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bRocketLeague.exe1.0.10897.0559cc35bc00000050020011421e001d0c4cb22e92baeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exea6a69806-30c4-11e5-8d51-e0699582c158 Error: (07/23/2015 12:07:18 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bRocketLeague.exe1.0.10897.0559cc35bc000000500091cc924e001d0c4c8d309bb43C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe04408edc-30be-11e5-8d51-e0699582c158 Error: (07/22/2015 11:37:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bRocketLeague.exe1.0.10897.0559cc35bc000000500aaa409ec801d0c4a90172a2c8C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exee5387a62-30b9-11e5-8d51-e0699582c158 Error: (07/22/2015 09:31:20 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\Tobi\Downloads\esetsmartinstaller_deu.exe Error: (07/19/2015 02:32:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bRocketLeague.exe1.0.10897.0559cc35bc000000500091cc9d2801d0c21d27d346f9C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe3ca8fa91-2e12-11e5-8500-e0699582c158 Error: (07/19/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bunknown0.0.0.000000000c00000050000000115c001d0c20674eed5caC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeunknowna1ab2942-2e0f-11e5-8500-e0699582c158 Error: (07/19/2015 11:46:34 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: hh.exe6.1.7600.163851f6c01d0c207c262c1c81C:\Windows\hh.exe071b348c-2dfb-11e5-8500-e0699582c158 Error: (07/19/2015 01:10:41 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: RocketLeague.exe1.0.10897.0559cc35bRocketLeague.exe1.0.10897.0559cc35bc000000500aaa4094e001d0c19f4d1930ecC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exeC:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe3518aecf-2da2-11e5-9e81-e0699582c158 ==================== Speicherinformationen =========================== Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz Percentage of memory in use: 62% Total physical RAM: 6126.53 MB Available physical RAM: 2323.34 MB Total Virtual: 12251.27 MB Available Virtual: 6110.18 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:917.57 GB) (Free:225.25 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:13.84 GB) (Free:1.68 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 5AC84F54) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=917.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=13.8 GB) - (Type=07 NTFS) ==================== Ende von log ============================ |
04.08.2015, 06:58 | #5 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.08.2015, 13:41 | #6 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Sorry, dass ich jetzt erst antworte. Ich kam die letzten Tage nicht an meinen PC. Der Malwarebytes Anti-Rootkit Scan funktioniert nicht. "Error during scan has occured. Scan can't continue. Habe es jetzt mehrmals probiert, aber ständig die selbe Fehlermeldung. TDDSKillerLog: Code:
ATTFilter 15:07:26.0325 0x2660 TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57 15:07:29.0921 0x2660 ============================================================ 15:07:29.0921 0x2660 Current date / time: 2015/08/08 15:07:29.0921 15:07:29.0921 0x2660 SystemInfo: 15:07:29.0921 0x2660 15:07:29.0921 0x2660 OS Version: 6.1.7601 ServicePack: 1.0 15:07:29.0921 0x2660 Product type: Workstation 15:07:29.0921 0x2660 ComputerName: SPEEDLINE_HP 15:07:29.0921 0x2660 UserName: Tobi 15:07:29.0921 0x2660 Windows directory: C:\Windows 15:07:29.0921 0x2660 System windows directory: C:\Windows 15:07:29.0921 0x2660 Running under WOW64 15:07:29.0921 0x2660 Processor architecture: Intel x64 15:07:29.0921 0x2660 Number of processors: 8 15:07:29.0921 0x2660 Page size: 0x1000 15:07:29.0921 0x2660 Boot type: Normal boot 15:07:29.0921 0x2660 ============================================================ 15:07:30.0227 0x2660 KLMD registered as C:\Windows\system32\drivers\38142565.sys 15:07:30.0877 0x2660 System UUID: {813849C5-6A92-F784-46F4-527FE474EEF3} 15:07:31.0692 0x2660 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:07:31.0696 0x2660 ============================================================ 15:07:31.0696 0x2660 \Device\Harddisk0\DR0: 15:07:31.0696 0x2660 MBR partitions: 15:07:31.0696 0x2660 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 15:07:31.0696 0x2660 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x72B23800 15:07:31.0696 0x2660 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x72B56000, BlocksNum 0x1BB0000 15:07:31.0696 0x2660 ============================================================ 15:07:31.0725 0x2660 C: <-> \Device\Harddisk0\DR0\Partition2 15:07:32.0231 0x2660 D: <-> \Device\Harddisk0\DR0\Partition3 15:07:32.0231 0x2660 ============================================================ 15:07:32.0231 0x2660 Initialize success 15:07:32.0231 0x2660 ============================================================ 15:08:00.0808 0x20e8 ============================================================ 15:08:00.0808 0x20e8 Scan started 15:08:00.0808 0x20e8 Mode: Manual; SigCheck; TDLFS; 15:08:00.0808 0x20e8 ============================================================ 15:08:00.0808 0x20e8 KSN ping started 15:08:14.0209 0x20e8 KSN ping finished: true 15:08:16.0473 0x20e8 ================ Scan system memory ======================== 15:08:16.0473 0x20e8 System memory - ok 15:08:16.0474 0x20e8 ================ Scan services ============================= 15:08:16.0781 0x20e8 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 15:08:17.0010 0x20e8 1394ohci - ok 15:08:17.0304 0x20e8 [ 134C00B35A5501EBFAD297BCC5600C38, D05C143E850D3315142375260E0FA865C9BD75445F52029BD98A29B9C9FFEDCF ] a2AntiMalware C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe 15:08:17.0486 0x20e8 a2AntiMalware - ok 15:08:17.0576 0x20e8 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys 15:08:17.0597 0x20e8 ACPI - ok 15:08:17.0621 0x20e8 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 15:08:17.0699 0x20e8 AcpiPmi - ok 15:08:17.0818 0x20e8 [ 9B3355B29942AF67F014EA90CE1EA960, FBB155F72984045BCD99CC2059B9EDAABD3A52104C3864A290D8A355991F94D3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 15:08:17.0839 0x20e8 AdobeFlashPlayerUpdateSvc - ok 15:08:17.0871 0x20e8 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 15:08:17.0896 0x20e8 adp94xx - ok 15:08:17.0929 0x20e8 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 15:08:17.0951 0x20e8 adpahci - ok 15:08:17.0962 0x20e8 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 15:08:17.0981 0x20e8 adpu320 - ok 15:08:18.0043 0x20e8 [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 15:08:18.0134 0x20e8 AeLookupSvc - ok 15:08:18.0197 0x20e8 [ A6FB9DB8F1A86861D955FD6975977AE0, 788C6EE50719227D7A9B7F08C8D5E1289FCD0E8AC23A1021A5093D2E8368F696 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe 15:08:18.0276 0x20e8 AESTFilters - ok 15:08:18.0351 0x20e8 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys 15:08:18.0418 0x20e8 AFD - ok 15:08:18.0481 0x20e8 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys 15:08:18.0496 0x20e8 agp440 - ok 15:08:18.0510 0x20e8 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe 15:08:18.0573 0x20e8 ALG - ok 15:08:18.0641 0x20e8 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys 15:08:18.0656 0x20e8 aliide - ok 15:08:18.0731 0x20e8 [ E8E046DB17671161DE74D1BB4E42D4B5, 49E0989DBA83AD0E6343FF85183C272C3DDDFF46A82D4F03C96E1EF84732020B ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 15:08:18.0821 0x20e8 AMD External Events Utility - ok 15:08:18.0834 0x20e8 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys 15:08:18.0854 0x20e8 amdide - ok 15:08:18.0917 0x20e8 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 15:08:18.0959 0x20e8 AmdK8 - ok 15:08:19.0001 0x20e8 amdkmdag - ok 15:08:19.0106 0x20e8 [ D3714915E9DFE9ED65AC8AFA7BC2AC19, 1DCDACE2F6A1237BFA8CEE5ECDE33BD32F8CD94DC8E566174E2A16E092740D37 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 15:08:19.0158 0x20e8 amdkmdap - ok 15:08:19.0195 0x20e8 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 15:08:19.0214 0x20e8 AmdPPM - ok 15:08:19.0290 0x20e8 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys 15:08:19.0306 0x20e8 amdsata - ok 15:08:19.0322 0x20e8 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 15:08:19.0341 0x20e8 amdsbs - ok 15:08:19.0357 0x20e8 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys 15:08:19.0372 0x20e8 amdxata - ok 15:08:19.0524 0x20e8 [ 9FE1AC875A7AD7B7FF28FEC8B754968D, EEE04D4073E49332C85028B62E8A035EAA2284526A3F3820133492C8F8CBA3D5 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe 15:08:19.0559 0x20e8 AntiVirMailService - ok 15:08:19.0678 0x20e8 [ 58FB167B287CAA05F7DD5AA1018FD52C, D9EB68E1C2B99E5F59A0DA4C9FA46E15C6E470F7445E232C03C82790F546A6AA ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 15:08:19.0700 0x20e8 AntiVirSchedulerService - ok 15:08:19.0755 0x20e8 [ 58FB167B287CAA05F7DD5AA1018FD52C, D9EB68E1C2B99E5F59A0DA4C9FA46E15C6E470F7445E232C03C82790F546A6AA ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 15:08:19.0778 0x20e8 AntiVirService - ok 15:08:19.0822 0x20e8 [ F857D22CEC14854D310C5596C8CE6006, 67448C506D3171D327A6CE3952E41BDC65587FEB45F510160A1DAFCA9491711E ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe 15:08:19.0863 0x20e8 AntiVirWebService - ok 15:08:19.0965 0x20e8 [ 59D01FA91962C9C1E9B4022B2D3B46DB, 3A111588538B77F010B5C900FB8425DDE55A08DBAC308CA7FB7BD9FCCCDEC69F ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll 15:08:20.0032 0x20e8 AppHostSvc - ok 15:08:20.0087 0x20e8 [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID C:\Windows\system32\drivers\appid.sys 15:08:20.0180 0x20e8 AppID - ok 15:08:20.0188 0x20e8 [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc C:\Windows\System32\appidsvc.dll 15:08:20.0227 0x20e8 AppIDSvc - ok 15:08:20.0305 0x20e8 [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo C:\Windows\System32\appinfo.dll 15:08:20.0332 0x20e8 Appinfo - ok 15:08:20.0384 0x20e8 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys 15:08:20.0400 0x20e8 arc - ok 15:08:20.0418 0x20e8 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 15:08:20.0434 0x20e8 arcsas - ok 15:08:20.0599 0x20e8 [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 15:08:20.0712 0x20e8 aspnet_state - ok 15:08:20.0738 0x20e8 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 15:08:20.0855 0x20e8 AsyncMac - ok 15:08:20.0950 0x20e8 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys 15:08:20.0972 0x20e8 atapi - ok 15:08:21.0100 0x20e8 [ 4EB5F2611381CB79DDDD627F3F1503CB, 53584998C32B1D2AD6B898CBDBEAC72100B8FAC25B5BCFDA88E0C3588244F335 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 15:08:21.0152 0x20e8 AtiHDAudioService - ok 15:08:21.0234 0x20e8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 15:08:21.0310 0x20e8 AudioEndpointBuilder - ok 15:08:21.0326 0x20e8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv C:\Windows\System32\Audiosrv.dll 15:08:21.0353 0x20e8 AudioSrv - ok 15:08:21.0453 0x20e8 [ 24843902369DC82B4691F816F08F2938, 330E22C6007B10FE9C232BBCA2F388ADA17DEDBAA11BEC2A70377A4466DFB6FA ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 15:08:21.0472 0x20e8 avgntflt - ok 15:08:21.0537 0x20e8 [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 15:08:21.0556 0x20e8 avipbb - ok 15:08:21.0692 0x20e8 [ 4B3DBF1CEBE1B2346BF2F8D2251F641A, CDC5BCA35BE658007E29E94E7FBFAA499B50929E738A12904397D16268C6FBAE ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe 15:08:21.0714 0x20e8 Avira.ServiceHost - ok 15:08:21.0768 0x20e8 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 15:08:21.0783 0x20e8 avkmgr - ok 15:08:21.0849 0x20e8 [ 13253E5E3B6BDF945B63B336A8C9489B, 671C716E43F89D4BDDAA2BE045CDEBBB569C85BC2BA334E1F550187B79A7740D ] avnetflt C:\Windows\system32\DRIVERS\avnetflt.sys 15:08:21.0868 0x20e8 avnetflt - ok 15:08:21.0931 0x20e8 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll 15:08:22.0027 0x20e8 AxInstSV - ok 15:08:22.0080 0x20e8 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 15:08:22.0148 0x20e8 b06bdrv - ok 15:08:22.0174 0x20e8 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 15:08:22.0218 0x20e8 b57nd60a - ok 15:08:22.0269 0x20e8 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll 15:08:22.0339 0x20e8 BDESVC - ok 15:08:22.0353 0x20e8 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys 15:08:22.0404 0x20e8 Beep - ok 15:08:22.0501 0x20e8 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll 15:08:22.0552 0x20e8 BFE - ok 15:08:22.0632 0x20e8 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll 15:08:22.0787 0x20e8 BITS - ok 15:08:22.0828 0x20e8 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 15:08:22.0846 0x20e8 blbdrive - ok 15:08:22.0870 0x20e8 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 15:08:22.0944 0x20e8 bowser - ok 15:08:22.0962 0x20e8 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 15:08:23.0000 0x20e8 BrFiltLo - ok 15:08:23.0019 0x20e8 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 15:08:23.0053 0x20e8 BrFiltUp - ok 15:08:23.0096 0x20e8 [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 15:08:23.0129 0x20e8 BridgeMP - ok 15:08:23.0151 0x20e8 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll 15:08:23.0187 0x20e8 Browser - ok 15:08:23.0206 0x20e8 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys 15:08:23.0237 0x20e8 Brserid - ok 15:08:23.0252 0x20e8 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 15:08:23.0271 0x20e8 BrSerWdm - ok 15:08:23.0283 0x20e8 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 15:08:23.0301 0x20e8 BrUsbMdm - ok 15:08:23.0308 0x20e8 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 15:08:23.0343 0x20e8 BrUsbSer - ok 15:08:23.0376 0x20e8 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 15:08:23.0414 0x20e8 BTHMODEM - ok 15:08:23.0454 0x20e8 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll 15:08:23.0486 0x20e8 bthserv - ok 15:08:23.0580 0x20e8 catchme - ok 15:08:23.0611 0x20e8 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 15:08:23.0661 0x20e8 cdfs - ok 15:08:23.0744 0x20e8 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 15:08:23.0790 0x20e8 cdrom - ok 15:08:23.0856 0x20e8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll 15:08:23.0892 0x20e8 CertPropSvc - ok 15:08:23.0908 0x20e8 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys 15:08:23.0927 0x20e8 circlass - ok 15:08:23.0994 0x20e8 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS C:\Windows\system32\CLFS.sys 15:08:24.0017 0x20e8 CLFS - ok 15:08:24.0107 0x20e8 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 15:08:24.0123 0x20e8 clr_optimization_v2.0.50727_32 - ok 15:08:24.0179 0x20e8 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 15:08:24.0197 0x20e8 clr_optimization_v2.0.50727_64 - ok 15:08:24.0327 0x20e8 [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 15:08:24.0487 0x20e8 clr_optimization_v4.0.30319_32 - ok 15:08:24.0516 0x20e8 [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 15:08:24.0593 0x20e8 clr_optimization_v4.0.30319_64 - ok 15:08:24.0621 0x20e8 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 15:08:24.0657 0x20e8 CmBatt - ok 15:08:24.0704 0x20e8 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys 15:08:24.0719 0x20e8 cmdide - ok 15:08:24.0793 0x20e8 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG C:\Windows\system32\Drivers\cng.sys 15:08:24.0821 0x20e8 CNG - ok 15:08:24.0847 0x20e8 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 15:08:24.0862 0x20e8 Compbatt - ok 15:08:24.0925 0x20e8 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 15:08:24.0943 0x20e8 CompositeBus - ok 15:08:24.0946 0x20e8 COMSysApp - ok 15:08:24.0950 0x20e8 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 15:08:24.0964 0x20e8 crcdisk - ok 15:08:25.0025 0x20e8 [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc C:\Windows\system32\cryptsvc.dll 15:08:25.0110 0x20e8 CryptSvc - ok 15:08:25.0265 0x20e8 [ B4D1D62A09F09CB2DFD55628350CDAFB, 7DD3CE77D88B5AFAC4B6187F4CA6D50B7BD3398207163B2A1E4C76467801FF28 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 15:08:25.0294 0x20e8 cvhsvc - ok 15:08:25.0383 0x20e8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll 15:08:25.0441 0x20e8 DcomLaunch - ok 15:08:25.0476 0x20e8 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll 15:08:25.0529 0x20e8 defragsvc - ok 15:08:25.0638 0x20e8 [ D2600494C45B98ADFDAE290205AD7CD3, 12BF5B52F71753B3C009D8401C22CF31411234922282223C95203ADCE3102575 ] DevoloNetworkService C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe 15:08:25.0698 0x20e8 DevoloNetworkService - ok 15:08:25.0763 0x20e8 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys 15:08:25.0795 0x20e8 DfsC - ok 15:08:25.0862 0x20e8 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll 15:08:25.0926 0x20e8 Dhcp - ok 15:08:26.0049 0x20e8 [ AA5319FA8602676B5D3A2B4A1355896D, 57532E16FF0DDE3D62B6B6DC35E2598DD453140E9277247965A1E835645E588A ] DiagTrack C:\Windows\system32\diagtrack.dll 15:08:26.0157 0x20e8 DiagTrack - ok 15:08:26.0175 0x20e8 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys 15:08:26.0245 0x20e8 discache - ok 15:08:26.0284 0x20e8 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys 15:08:26.0300 0x20e8 Disk - ok 15:08:26.0323 0x20e8 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll 15:08:26.0351 0x20e8 Dnscache - ok 15:08:26.0415 0x20e8 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll 15:08:26.0450 0x20e8 dot3svc - ok 15:08:26.0507 0x20e8 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll 15:08:26.0560 0x20e8 DPS - ok 15:08:26.0644 0x20e8 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 15:08:26.0706 0x20e8 drmkaud - ok 15:08:26.0862 0x20e8 [ CC8C8479B0C9FC6803B6905D99158FE4, 9D701773C8BDEAB044FF98D16D530B8402837D0CAAF848F9CCFB96A2931B58E9 ] Ds3Service C:\Controller PS3\ScpServer\bin\ScpService.exe 15:08:26.0874 0x20e8 Ds3Service - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:29.0590 0x20e8 Ds3Service ( UnsignedFile.Multi.Generic ) - warning 15:08:32.0429 0x20e8 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 15:08:32.0464 0x20e8 DXGKrnl - ok 15:08:32.0487 0x20e8 EagleX64 - ok 15:08:32.0522 0x20e8 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll 15:08:32.0555 0x20e8 EapHost - ok 15:08:32.0640 0x20e8 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 15:08:32.0741 0x20e8 ebdrv - ok 15:08:32.0821 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] EFS C:\Windows\System32\lsass.exe 15:08:32.0854 0x20e8 EFS - ok 15:08:32.0936 0x20e8 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 15:08:33.0020 0x20e8 ehRecvr - ok 15:08:33.0049 0x20e8 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe 15:08:33.0084 0x20e8 ehSched - ok 15:08:33.0131 0x20e8 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 15:08:33.0157 0x20e8 elxstor - ok 15:08:33.0288 0x20e8 [ FBEFE3D8DFEBAA85A81897B0B0EB4E1E, 67ADE442E68DE986C10BBCC4A38F76955A6DCBBE9608CB1F7F0C155C8AF0B9E3 ] epp64 C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys 15:08:33.0305 0x20e8 epp64 - ok 15:08:33.0358 0x20e8 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys 15:08:33.0392 0x20e8 ErrDev - ok 15:08:33.0478 0x20e8 [ 932C05033053ADA2404FD836C9AB2C70, 39E3C40DDDCA475F55CD6A044E8CF35A1C25A776B79204CBF76D0DD5D89568D8 ] EuMusDesignVirtualAudioCableWdm C:\Windows\system32\DRIVERS\vrtaucbl.sys 15:08:33.0494 0x20e8 EuMusDesignVirtualAudioCableWdm - ok 15:08:33.0532 0x20e8 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll 15:08:33.0589 0x20e8 EventSystem - ok 15:08:33.0624 0x20e8 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys 15:08:33.0658 0x20e8 exfat - ok 15:08:33.0671 0x20e8 ezSharedSvc - ok 15:08:33.0686 0x20e8 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys 15:08:33.0738 0x20e8 fastfat - ok 15:08:33.0770 0x20e8 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys 15:08:33.0788 0x20e8 fdc - ok 15:08:33.0805 0x20e8 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll 15:08:33.0857 0x20e8 fdPHost - ok 15:08:33.0877 0x20e8 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll 15:08:33.0928 0x20e8 FDResPub - ok 15:08:33.0950 0x20e8 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 15:08:33.0966 0x20e8 FileInfo - ok 15:08:33.0977 0x20e8 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 15:08:34.0008 0x20e8 Filetrace - ok 15:08:34.0026 0x20e8 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 15:08:34.0063 0x20e8 flpydisk - ok 15:08:34.0116 0x20e8 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 15:08:34.0137 0x20e8 FltMgr - ok 15:08:34.0226 0x20e8 [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache C:\Windows\system32\FntCache.dll 15:08:34.0322 0x20e8 FontCache - ok 15:08:34.0411 0x20e8 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 15:08:34.0426 0x20e8 FontCache3.0.0.0 - ok 15:08:34.0448 0x20e8 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 15:08:34.0464 0x20e8 FsDepends - ok 15:08:34.0534 0x20e8 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 15:08:34.0550 0x20e8 Fs_Rec - ok 15:08:34.0612 0x20e8 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 15:08:34.0633 0x20e8 fvevol - ok 15:08:34.0650 0x20e8 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 15:08:34.0672 0x20e8 gagp30kx - ok 15:08:34.0716 0x20e8 [ D154305DE6090E6E84E525F84BB08A06, 7B235178C3F26043AB7DB9EAD9A2185CEAF3C07BC48D63CA0EB6D56BCFEDF41A ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe 15:08:34.0733 0x20e8 GameConsoleService - ok 15:08:34.0801 0x20e8 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll 15:08:34.0865 0x20e8 gpsvc - ok 15:08:34.0961 0x20e8 [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:08:34.0977 0x20e8 gupdate - ok 15:08:34.0990 0x20e8 [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:08:35.0006 0x20e8 gupdatem - ok 15:08:35.0073 0x20e8 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 15:08:35.0089 0x20e8 hamachi - ok 15:08:35.0122 0x20e8 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 15:08:35.0184 0x20e8 hcw85cir - ok 15:08:35.0255 0x20e8 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 15:08:35.0302 0x20e8 HdAudAddService - ok 15:08:35.0354 0x20e8 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 15:08:35.0389 0x20e8 HDAudBus - ok 15:08:35.0410 0x20e8 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 15:08:35.0442 0x20e8 HidBatt - ok 15:08:35.0476 0x20e8 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 15:08:35.0496 0x20e8 HidBth - ok 15:08:35.0513 0x20e8 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 15:08:35.0549 0x20e8 HidIr - ok 15:08:35.0576 0x20e8 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\System32\hidserv.dll 15:08:35.0607 0x20e8 hidserv - ok 15:08:35.0685 0x20e8 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 15:08:35.0718 0x20e8 HidUsb - ok 15:08:35.0810 0x20e8 [ 1A650CBAC8C5A90791B45FF7B9F72572, F7DA9744A3A4637D07C5AFBA1D53C0AE1CC501877D5E0B920AF74735F7544339 ] HiPatchService C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe 15:08:35.0814 0x20e8 HiPatchService - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:38.0798 0x20e8 Detect skipped due to KSN trusted 15:08:38.0798 0x20e8 HiPatchService - ok 15:08:38.0863 0x20e8 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll 15:08:38.0914 0x20e8 hkmsvc - ok 15:08:38.0989 0x20e8 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 15:08:39.0066 0x20e8 HomeGroupListener - ok 15:08:39.0131 0x20e8 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 15:08:39.0169 0x20e8 HomeGroupProvider - ok 15:08:39.0240 0x20e8 [ 2A8B93A01621E100A578E83C768AFA2C, 6637D260AF180D1F200D219796FCE6D524FC6BF57C0CEEF9E1B3616E85865AD1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 15:08:39.0268 0x20e8 HP Support Assistant Service - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:42.0012 0x20e8 Detect skipped due to KSN trusted 15:08:42.0012 0x20e8 HP Support Assistant Service - ok 15:08:42.0076 0x20e8 [ 3DC11A802353401332D49C3CBFBBE5FC, E812E8A4ED64FEC346BE6B175CE651CFC553A23F31B0ABC5D50E6995A7F130DF ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 15:08:42.0096 0x20e8 HPClientSvc - ok 15:08:42.0169 0x20e8 [ D2946D9F020AE76E9CEF9B4A6DF838C0, C29CE594879385DA12B8EAA90B258905827B613839CCD820DE49215B68676995 ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe 15:08:42.0206 0x20e8 hpqwmiex - ok 15:08:42.0278 0x20e8 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 15:08:42.0294 0x20e8 HpSAMD - ok 15:08:42.0370 0x20e8 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\Windows\system32\drivers\HTTP.sys 15:08:42.0446 0x20e8 HTTP - ok 15:08:42.0511 0x20e8 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 15:08:42.0526 0x20e8 hwpolicy - ok 15:08:42.0544 0x20e8 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 15:08:42.0562 0x20e8 i8042prt - ok 15:08:42.0588 0x20e8 [ F7CE9BE72EDAC499B713ECA6DAE5D26F, AF158C8ADF0815C406435AB051C8D8DD0ECBDBA8644CB75D7611980D70662193 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 15:08:42.0609 0x20e8 iaStor - ok 15:08:42.0688 0x20e8 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 15:08:42.0711 0x20e8 iaStorV - ok 15:08:42.0835 0x20e8 [ 1CF03C69B49ACB70C722DF92755C0C8C, C227850C133F29BB9DED91A26A22AE077FD69629CEF35B67D305F016C4BDAA81 ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 15:08:42.0841 0x20e8 IDriverT - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:45.0610 0x20e8 Detect skipped due to KSN trusted 15:08:45.0610 0x20e8 IDriverT - ok 15:08:45.0732 0x20e8 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 15:08:45.0765 0x20e8 idsvc - ok 15:08:45.0804 0x20e8 IEEtwCollectorService - ok 15:08:45.0837 0x20e8 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 15:08:45.0852 0x20e8 iirsp - ok 15:08:45.0908 0x20e8 [ AB55B8A9B13130F638546881CE4425F8, 8427E67BE02ECABAA3F0C48BD4205BCBD4C978B48AE4E7336DA5821DFC49029E ] IISADMIN C:\Windows\system32\inetsrv\inetinfo.exe 15:08:45.0975 0x20e8 IISADMIN - ok 15:08:46.0051 0x20e8 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll 15:08:46.0104 0x20e8 IKEEXT - ok 15:08:46.0154 0x20e8 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys 15:08:46.0169 0x20e8 intelide - ok 15:08:46.0202 0x20e8 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 15:08:46.0235 0x20e8 intelppm - ok 15:08:46.0272 0x20e8 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll 15:08:46.0327 0x20e8 IPBusEnum - ok 15:08:46.0413 0x20e8 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 15:08:46.0446 0x20e8 IpFilterDriver - ok 15:08:46.0527 0x20e8 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 15:08:46.0603 0x20e8 iphlpsvc - ok 15:08:46.0664 0x20e8 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 15:08:46.0705 0x20e8 IPMIDRV - ok 15:08:46.0960 0x20e8 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys 15:08:46.0992 0x20e8 IPNAT - ok 15:08:47.0013 0x20e8 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys 15:08:47.0048 0x20e8 IRENUM - ok 15:08:47.0116 0x20e8 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys 15:08:47.0132 0x20e8 isapnp - ok 15:08:47.0170 0x20e8 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 15:08:47.0191 0x20e8 iScsiPrt - ok 15:08:47.0212 0x20e8 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 15:08:47.0228 0x20e8 kbdclass - ok 15:08:47.0248 0x20e8 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 15:08:47.0282 0x20e8 kbdhid - ok 15:08:47.0286 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] KeyIso C:\Windows\system32\lsass.exe 15:08:47.0302 0x20e8 KeyIso - ok 15:08:47.0351 0x20e8 [ C0A6C3D6E02B61B5D100FE17306C276F, F57C7BCC39B30F1DF739D07B76BA18EB68D12D8D1BD13B6AC8DC712C29119495 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 15:08:47.0367 0x20e8 KSecDD - ok 15:08:47.0378 0x20e8 [ 7A7328E427694CC7244235C3BC299F80, 7FC2E1F3F93B3334C3A8961CA58B4F38524650F6D8DA9FFA1FB43E1A2B86B710 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 15:08:47.0396 0x20e8 KSecPkg - ok 15:08:47.0422 0x20e8 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 15:08:47.0453 0x20e8 ksthunk - ok 15:08:47.0482 0x20e8 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll 15:08:47.0538 0x20e8 KtmRm - ok 15:08:47.0588 0x20e8 [ 305BB2AC00D46542E0A653AB63F4ABB1, E3BE57A0EBB1194656D20C11688863A7864B06223419F688D82881F9F49604B6 ] LADF_CaptureOnly C:\Windows\system32\DRIVERS\ladfGSCamd64.sys 15:08:47.0613 0x20e8 LADF_CaptureOnly - ok 15:08:47.0652 0x20e8 [ 86DCBF8A41C78561A1DA07AB5E7B1CCC, 5AF276893B8752B5F8DE58491D54A338EE449091F06113EA07580F4461CAEA4E ] LADF_DHP2 C:\Windows\system32\DRIVERS\ladfDHP2amd64.sys 15:08:47.0666 0x20e8 LADF_DHP2 - ok 15:08:47.0677 0x20e8 [ 28CDDC7D478A6313F55077416DCBD0DE, EE4174FC9444856DF0693D1A5F16EB88352A3B012AA82D49C462980703981A7A ] LADF_RenderOnly C:\Windows\system32\DRIVERS\ladfGSRamd64.sys 15:08:47.0692 0x20e8 LADF_RenderOnly - ok 15:08:47.0715 0x20e8 [ 175C04C7813CE64616B5CB046E5E1383, 20D7BA76FCFDAD785DBFCEAB7069CEF74E142C4F6FE797C38B5BF759173CE32B ] LADF_SBVM C:\Windows\system32\DRIVERS\ladfSBVMamd64.sys 15:08:47.0736 0x20e8 LADF_SBVM - ok 15:08:47.0820 0x20e8 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\System32\srvsvc.dll 15:08:47.0856 0x20e8 LanmanServer - ok 15:08:47.0912 0x20e8 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 15:08:47.0969 0x20e8 LanmanWorkstation - ok 15:08:48.0052 0x20e8 [ 17325C9B9ADB2BB99049936D0C9812C8, 70ADDC85FD5757BC9C4B97F382B25A19851FF8275021FFC04A81E208A604F83E ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys 15:08:48.0073 0x20e8 LGBusEnum - ok 15:08:48.0164 0x20e8 [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys 15:08:48.0180 0x20e8 LGCoreTemp - ok 15:08:48.0232 0x20e8 [ C7AF05942E041D4B1F345ACF79993BB3, E8FAAE356C99A11F6CF17640FD9C67F87AFBFEFB70C458CB85178F2AD94DF848 ] LGJoyXlCore C:\Windows\system32\drivers\LGJoyXlCore.sys 15:08:48.0252 0x20e8 LGJoyXlCore - ok 15:08:48.0301 0x20e8 [ 1DDB8DE3D6EEF31EDCF4977B2D2FAACC, 24291B522A596E2D9A1CDAC192DB1C7422D5DD0E87E5C8A5F5E2CAA90296BF23 ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys 15:08:48.0319 0x20e8 LGVirHid - ok 15:08:48.0357 0x20e8 [ FA4A45C179AB0E0F1A31B9751D4B18D7, 4356777C2608A65185C9CB8243F071EC9E11BCD152E0C0ACDE25B6BCFD75A7F4 ] LightScribeService c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 15:08:48.0379 0x20e8 LightScribeService - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:51.0153 0x20e8 Detect skipped due to KSN trusted 15:08:51.0153 0x20e8 LightScribeService - ok 15:08:51.0327 0x20e8 [ 337FA50FFDED5E2BC94B36BF625AB681, BC77CCED8F2B52D26C7A2D7960FB5C1690F5D7E41013644C9226A85C9FF4FA2C ] LiveUpdateSvc C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe 15:08:51.0400 0x20e8 LiveUpdateSvc - ok 15:08:51.0435 0x20e8 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 15:08:51.0482 0x20e8 lltdio - ok 15:08:51.0519 0x20e8 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll 15:08:51.0575 0x20e8 lltdsvc - ok 15:08:51.0606 0x20e8 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll 15:08:51.0637 0x20e8 lmhosts - ok 15:08:51.0677 0x20e8 [ 926EBA26A8B49D1597751CED06B50862, 886FC610E379BD77146ADDC376D77437D88B593C7F1C3FEE2B93D934A67310F8 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 15:08:51.0697 0x20e8 LMS - ok 15:08:51.0729 0x20e8 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 15:08:51.0746 0x20e8 LSI_FC - ok 15:08:51.0773 0x20e8 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 15:08:51.0791 0x20e8 LSI_SAS - ok 15:08:51.0804 0x20e8 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 15:08:51.0820 0x20e8 LSI_SAS2 - ok 15:08:51.0836 0x20e8 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 15:08:51.0852 0x20e8 LSI_SCSI - ok 15:08:51.0869 0x20e8 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys 15:08:51.0922 0x20e8 luafv - ok 15:08:52.0054 0x20e8 [ A8D28D5B3E2A528D1EF0E338E44F2820, 40D1EFDD253BC0A0D984A5AD8A2721C3E83B15F14D538204714E6D5B00D92CEB ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 15:08:52.0069 0x20e8 MBAMProtector - ok 15:08:52.0181 0x20e8 [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe 15:08:52.0218 0x20e8 MBAMService - ok 15:08:52.0244 0x20e8 [ AE757332EA130E94E646621CC695B52A, E688CF34A4206F32B5C7301119D8459C3456FC178FA1DAA6215CE15F2C824C43 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys 15:08:52.0260 0x20e8 MBAMWebAccessControl - ok 15:08:52.0321 0x20e8 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 15:08:52.0340 0x20e8 Mcx2Svc - ok 15:08:52.0359 0x20e8 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 15:08:52.0374 0x20e8 megasas - ok 15:08:52.0405 0x20e8 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 15:08:52.0425 0x20e8 MegaSR - ok 15:08:52.0447 0x20e8 [ 1C6E73FC46B509EFF9D0086AA37132DF, B4FB5512D75112C553FC22593F6123A7C9B9B7825D40148F604CCEFEB149FD97 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys 15:08:52.0463 0x20e8 MEIx64 - ok 15:08:52.0479 0x20e8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll 15:08:52.0527 0x20e8 MMCSS - ok 15:08:52.0548 0x20e8 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys 15:08:52.0579 0x20e8 Modem - ok 15:08:52.0640 0x20e8 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 15:08:52.0680 0x20e8 monitor - ok 15:08:52.0764 0x20e8 [ C030F9E822A057C1A7A9BB4EA3E8877E, 2CCEC87DEB972B6B0196A08D3781002929E9107137FE3A61F1626D3BEE26630A ] MotioninJoyXFilter C:\Windows\system32\DRIVERS\MijXfilt.sys 15:08:52.0819 0x20e8 MotioninJoyXFilter - detected UnsignedFile.Multi.Generic ( 1 ) 15:08:55.0660 0x20e8 Detect skipped due to KSN trusted 15:08:55.0660 0x20e8 MotioninJoyXFilter - ok 15:08:55.0679 0x20e8 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 15:08:55.0695 0x20e8 mouclass - ok 15:08:55.0733 0x20e8 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 15:08:55.0750 0x20e8 mouhid - ok 15:08:55.0817 0x20e8 [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 15:08:55.0834 0x20e8 mountmgr - ok 15:08:55.0886 0x20e8 [ E1B6FCAE82474FC071155263E2841D54, 341E2CEB1A86586730130311C4FAF86851151D5F08EF915A5F89B6C4094AE1F4 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 15:08:55.0903 0x20e8 MozillaMaintenance - ok 15:08:55.0921 0x20e8 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys 15:08:55.0939 0x20e8 mpio - ok 15:08:55.0951 0x20e8 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 15:08:55.0983 0x20e8 mpsdrv - ok 15:08:56.0055 0x20e8 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll 15:08:56.0123 0x20e8 MpsSvc - ok 15:08:56.0162 0x20e8 [ CD22D2563039DDA6793F7624719363A7, 82C91467EDCB61B1DD086A1D25925E4D89E43EF6EFAE3C59AFF3D73280119AF6 ] MQAC C:\Windows\system32\drivers\mqac.sys 15:08:56.0230 0x20e8 MQAC - ok 15:08:56.0296 0x20e8 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 15:08:56.0334 0x20e8 MRxDAV - ok 15:08:56.0395 0x20e8 [ 1877EB1495CFBDAB27D6A32F6DDF3818, 3818055C66AB12A335A905CFFE5D05347F15AE488861C5C183E62E8E0881DA86 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 15:08:56.0478 0x20e8 mrxsmb - ok 15:08:56.0497 0x20e8 [ 21AF322605D8C7F2A627C22634D1C9C9, 6B783F95D093FEFB260EA9568926BBB3CB8ED0783184DB3A18733E211933BADD ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 15:08:56.0542 0x20e8 mrxsmb10 - ok 15:08:56.0571 0x20e8 [ 45A03A0B6461EFBEE77E0A6AC2816EDA, CFB0C11387F2EC49FD6B69EF747962114EBA6F8B4B4DEC3627E9E969775C4D7E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 15:08:56.0610 0x20e8 mrxsmb20 - ok 15:08:56.0663 0x20e8 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys 15:08:56.0678 0x20e8 msahci - ok 15:08:56.0741 0x20e8 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys 15:08:56.0759 0x20e8 msdsm - ok 15:08:56.0777 0x20e8 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe 15:08:56.0818 0x20e8 MSDTC - ok 15:08:56.0857 0x20e8 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys 15:08:56.0888 0x20e8 Msfs - ok 15:08:56.0910 0x20e8 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 15:08:56.0957 0x20e8 mshidkmdf - ok 15:08:57.0013 0x20e8 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 15:08:57.0028 0x20e8 msisadrv - ok 15:08:57.0057 0x20e8 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 15:08:57.0106 0x20e8 MSiSCSI - ok 15:08:57.0111 0x20e8 msiserver - ok 15:08:57.0146 0x20e8 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 15:08:57.0177 0x20e8 MSKSSRV - ok 15:08:57.0191 0x20e8 [ FAAEAEF99E53561BEEE58F946CA56F0D, 78AC692C4B80616E4C44ED20954B8D2FCE2215056C2ED3522123E5B50A7CE67A ] MSMQ C:\Windows\system32\mqsvc.exe 15:08:57.0208 0x20e8 MSMQ - ok 15:08:57.0268 0x20e8 [ 59ED174FD4314B0218DC91F9BFA6CD3D, 13B95FA9892D09341CE46FA7EEB01FF9C88AA9DCB8FBF0A73FFAE567AAA4E02A ] MSMQTriggers C:\Windows\system32\mqtgsvc.exe 15:08:57.0289 0x20e8 MSMQTriggers - ok 15:08:57.0306 0x20e8 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 15:08:57.0353 0x20e8 MSPCLOCK - ok 15:08:57.0383 0x20e8 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 15:08:57.0436 0x20e8 MSPQM - ok 15:08:57.0493 0x20e8 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 15:08:57.0516 0x20e8 MsRPC - ok 15:08:57.0574 0x20e8 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 15:08:57.0589 0x20e8 mssmbios - ok 15:08:57.0613 0x20e8 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 15:08:57.0643 0x20e8 MSTEE - ok 15:08:57.0657 0x20e8 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 15:08:57.0689 0x20e8 MTConfig - ok 15:08:57.0710 0x20e8 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys 15:08:57.0726 0x20e8 Mup - ok 15:08:57.0791 0x20e8 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll 15:08:57.0847 0x20e8 napagent - ok 15:08:57.0893 0x20e8 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 15:08:57.0918 0x20e8 NativeWifiP - ok 15:08:57.0958 0x20e8 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys 15:08:57.0992 0x20e8 NDIS - ok 15:08:58.0008 0x20e8 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 15:08:58.0061 0x20e8 NdisCap - ok 15:08:58.0091 0x20e8 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 15:08:58.0139 0x20e8 NdisTapi - ok 15:08:58.0225 0x20e8 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 15:08:58.0274 0x20e8 Ndisuio - ok 15:08:58.0330 0x20e8 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 15:08:58.0386 0x20e8 NdisWan - ok 15:08:58.0436 0x20e8 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 15:08:58.0489 0x20e8 NDProxy - ok 15:08:58.0525 0x20e8 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 15:08:58.0556 0x20e8 NetBIOS - ok 15:08:58.0620 0x20e8 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 15:08:58.0674 0x20e8 NetBT - ok 15:08:58.0694 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] Netlogon C:\Windows\system32\lsass.exe 15:08:58.0710 0x20e8 Netlogon - ok 15:08:58.0739 0x20e8 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll 15:08:58.0798 0x20e8 Netman - ok 15:08:58.0892 0x20e8 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:08:58.0938 0x20e8 NetMsmqActivator - ok 15:08:58.0952 0x20e8 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:08:58.0969 0x20e8 NetPipeActivator - ok 15:08:58.0988 0x20e8 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll 15:08:59.0043 0x20e8 netprofm - ok 15:08:59.0090 0x20e8 [ 618C55B392238B9467F9113E13525C49, 304A77EF3E1E7A1738E5A4F6A911B4DF736CEF4867C6F07CA71E227048E90370 ] netr28ux C:\Windows\system32\DRIVERS\netr28ux.sys 15:08:59.0127 0x20e8 netr28ux - ok 15:08:59.0150 0x20e8 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:08:59.0168 0x20e8 NetTcpActivator - ok 15:08:59.0174 0x20e8 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:08:59.0191 0x20e8 NetTcpPortSharing - ok 15:08:59.0233 0x20e8 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 15:08:59.0249 0x20e8 nfrd960 - ok 15:08:59.0311 0x20e8 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll 15:08:59.0355 0x20e8 NlaSvc - ok 15:08:59.0441 0x20e8 [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 15:08:59.0513 0x20e8 NOBU - ok 15:08:59.0523 0x20e8 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys 15:08:59.0570 0x20e8 Npfs - ok 15:08:59.0678 0x20e8 [ 49697C2C761ACB5C0DE99CC8FE93E95B, 02EEA7FB21D28B235A05FE0A6061170F366470EF6E45C9B21D7C8C0E7C728FC5 ] NPF_devolo C:\Windows\sysWOW64\drivers\npf_devolo.sys 15:08:59.0694 0x20e8 NPF_devolo - ok 15:08:59.0717 0x20e8 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll 15:08:59.0748 0x20e8 nsi - ok 15:08:59.0761 0x20e8 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 15:08:59.0811 0x20e8 nsiproxy - ok 15:08:59.0879 0x20e8 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 15:08:59.0929 0x20e8 Ntfs - ok 15:08:59.0944 0x20e8 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys 15:08:59.0991 0x20e8 Null - ok 15:09:00.0031 0x20e8 [ 8EBCB9165EE7F1571842F4D9D624A74C, 115F46B8391866762AD41B299F0670D8735D124BD518A53EC73DCDBFCA9C28F9 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys 15:09:00.0090 0x20e8 nusb3hub - ok 15:09:00.0111 0x20e8 [ 5D54DBB12BBFE07CC283FD39F2CD6D63, 3DC3F9121F8892EDABD07ACDE45DB025BA2FC4245A8D3EE343F1FDF7189B391F ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys 15:09:00.0151 0x20e8 nusb3xhc - ok 15:09:00.0204 0x20e8 [ 554964B900AE2954B8B589B6287034AC, C6C9EA3ADAFEBBF2AF944E4A0656BD795AD37706008CC0CA3F2150BD709476E7 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys 15:09:00.0223 0x20e8 NVHDA - ok 15:09:00.0485 0x20e8 [ CE1B54F1ED2080B15DAF9044EC92075A, DD8557B0E159C09DF3195EC01545CCE2BD580DC2557CCC4F90D3B7C02D07FC36 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys 15:09:00.0741 0x20e8 nvlddmkm - ok 15:09:00.0827 0x20e8 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys 15:09:00.0844 0x20e8 nvraid - ok 15:09:00.0858 0x20e8 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys 15:09:00.0876 0x20e8 nvstor - ok 15:09:01.0315 0x20e8 [ 449872BF91DF89D85D892AB2D2AD3A14, A42EA81703553F980D813531B3E8B07B84541D372C6138396D076FC75579D9A6 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe 15:09:01.0675 0x20e8 NvStreamSvc - ok 15:09:01.0738 0x20e8 [ 67E9F641C1B5387F298F3063FAFA022B, F9C9974828632349E426C5375D2FD63744350D3D6FD693071231370D52E76DE7 ] nvsvc C:\Windows\system32\nvvsvc.exe 15:09:01.0772 0x20e8 nvsvc - ok 15:09:01.0892 0x20e8 [ C98F28448B8A2488B499657C396EF3A0, EC5D97F5E8E2B9BC675F74CA3F626A1C88A038D708D3119F9089C778BB44E8F5 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe 15:09:01.0947 0x20e8 nvUpdatusService - ok 15:09:02.0023 0x20e8 [ 31B16657118E439B77B0A527F7EA66CB, 8C375D2AFF56125E08587DDDCE6AD31DE6D2DEEDC9AD95ADE95B7499F79A5B56 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys 15:09:02.0039 0x20e8 nvvad_WaveExtensible - ok 15:09:02.0111 0x20e8 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 15:09:02.0128 0x20e8 nv_agp - ok 15:09:02.0136 0x20e8 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 15:09:02.0172 0x20e8 ohci1394 - ok 15:09:02.0368 0x20e8 [ 29B093BA6759118DB14AF41026385E03, 660176D122344A79E52FFD9FE3D32D1967D9B22BC4AD76549D839B09693D0713 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe 15:09:02.0419 0x20e8 Origin Client Service - ok 15:09:02.0528 0x20e8 [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 15:09:02.0545 0x20e8 ose - ok 15:09:02.0736 0x20e8 [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 15:09:02.0860 0x20e8 osppsvc - ok 15:09:02.0903 0x20e8 otshot - ok 15:09:02.0933 0x20e8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 15:09:03.0007 0x20e8 p2pimsvc - ok 15:09:03.0030 0x20e8 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll 15:09:03.0073 0x20e8 p2psvc - ok 15:09:03.0102 0x20e8 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys 15:09:03.0138 0x20e8 Parport - ok 15:09:03.0201 0x20e8 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys 15:09:03.0217 0x20e8 partmgr - ok 15:09:03.0288 0x20e8 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc C:\Windows\System32\pcasvc.dll 15:09:03.0399 0x20e8 PcaSvc - ok 15:09:03.0462 0x20e8 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys 15:09:03.0480 0x20e8 pci - ok 15:09:03.0547 0x20e8 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys 15:09:03.0562 0x20e8 pciide - ok 15:09:03.0578 0x20e8 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 15:09:03.0597 0x20e8 pcmcia - ok 15:09:03.0615 0x20e8 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys 15:09:03.0630 0x20e8 pcw - ok 15:09:03.0658 0x20e8 pdfcDispatcher - ok 15:09:03.0726 0x20e8 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH C:\Windows\system32\drivers\peauth.sys 15:09:03.0769 0x20e8 PEAUTH - ok 15:09:03.0811 0x20e8 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe 15:09:03.0850 0x20e8 PerfHost - ok 15:09:03.0938 0x20e8 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll 15:09:03.0997 0x20e8 pla - ok 15:09:04.0033 0x20e8 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 15:09:04.0073 0x20e8 PlugPlay - ok 15:09:04.0078 0x20e8 PnkBstrA - ok 15:09:04.0096 0x20e8 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 15:09:04.0134 0x20e8 PNRPAutoReg - ok 15:09:04.0166 0x20e8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 15:09:04.0187 0x20e8 PNRPsvc - ok 15:09:04.0206 0x20e8 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 15:09:04.0247 0x20e8 PolicyAgent - ok 15:09:04.0284 0x20e8 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll 15:09:04.0319 0x20e8 Power - ok 15:09:04.0394 0x20e8 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 15:09:04.0440 0x20e8 PptpMiniport - ok 15:09:04.0471 0x20e8 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys 15:09:04.0506 0x20e8 Processor - ok 15:09:04.0569 0x20e8 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll 15:09:04.0612 0x20e8 ProfSvc - ok 15:09:04.0628 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] ProtectedStorage C:\Windows\system32\lsass.exe 15:09:04.0644 0x20e8 ProtectedStorage - ok 15:09:04.0715 0x20e8 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 15:09:04.0768 0x20e8 Psched - ok 15:09:04.0816 0x20e8 [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI C:\Windows\system32\DRIVERS\psi_mf_amd64.sys 15:09:04.0831 0x20e8 PSI - ok 15:09:04.0893 0x20e8 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 15:09:04.0940 0x20e8 ql2300 - ok 15:09:04.0958 0x20e8 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 15:09:04.0975 0x20e8 ql40xx - ok 15:09:05.0006 0x20e8 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll 15:09:05.0030 0x20e8 QWAVE - ok 15:09:05.0047 0x20e8 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 15:09:05.0090 0x20e8 QWAVEdrv - ok 15:09:05.0116 0x20e8 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 15:09:05.0169 0x20e8 RasAcd - ok 15:09:05.0211 0x20e8 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 15:09:05.0265 0x20e8 RasAgileVpn - ok 15:09:05.0303 0x20e8 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll 15:09:05.0335 0x20e8 RasAuto - ok 15:09:05.0399 0x20e8 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 15:09:05.0449 0x20e8 Rasl2tp - ok 15:09:05.0511 0x20e8 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll 15:09:05.0548 0x20e8 RasMan - ok 15:09:05.0564 0x20e8 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 15:09:05.0594 0x20e8 RasPppoe - ok 15:09:05.0604 0x20e8 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 15:09:05.0657 0x20e8 RasSstp - ok 15:09:05.0790 0x20e8 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 15:09:05.0826 0x20e8 rdbss - ok 15:09:05.0853 0x20e8 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 15:09:05.0887 0x20e8 rdpbus - ok 15:09:05.0914 0x20e8 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 15:09:05.0964 0x20e8 RDPCDD - ok 15:09:05.0990 0x20e8 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 15:09:06.0041 0x20e8 RDPENCDD - ok 15:09:06.0056 0x20e8 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 15:09:06.0086 0x20e8 RDPREFMP - ok 15:09:06.0144 0x20e8 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 15:09:06.0187 0x20e8 RDPWD - ok 15:09:06.0267 0x20e8 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 15:09:06.0286 0x20e8 rdyboost - ok 15:09:06.0308 0x20e8 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll 15:09:06.0357 0x20e8 RemoteAccess - ok 15:09:06.0393 0x20e8 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll 15:09:06.0449 0x20e8 RemoteRegistry - ok 15:09:06.0500 0x20e8 [ CAF88D6573D21CD2AA27001DDBFDC74D, 8256B93E586953F1B594BFFA1F005DB08325CAF1729A93820B09F60DAA998C97 ] RMCAST C:\Windows\system32\DRIVERS\RMCAST.sys 15:09:06.0533 0x20e8 RMCAST - ok 15:09:06.0549 0x20e8 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 15:09:06.0580 0x20e8 RpcEptMapper - ok 15:09:06.0590 0x20e8 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe 15:09:06.0607 0x20e8 RpcLocator - ok 15:09:06.0674 0x20e8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll 15:09:06.0712 0x20e8 RpcSs - ok 15:09:06.0741 0x20e8 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 15:09:06.0772 0x20e8 rspndr - ok 15:09:06.0854 0x20e8 [ 0D992B69029D1F23A872FF5A3352FB5B, 0ACA4447EE54D635F76B941F6100B829DC8B2E0DF27BDF584ACB90F15F12FBDA ] RTCore64 C:\Program Files (x86)\MSI Afterburner\RTCore64.sys 15:09:06.0870 0x20e8 RTCore64 - ok 15:09:06.0910 0x20e8 [ B15C021C2C9BB217A799D9532E8F04D4, 62DC365676829465CFE58EB8CD0851A37B03ACE3E3980A6A1D8C4F7C2010B9EB ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 15:09:06.0931 0x20e8 RTL8167 - ok 15:09:06.0946 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] SamSs C:\Windows\system32\lsass.exe 15:09:06.0962 0x20e8 SamSs - ok 15:09:07.0021 0x20e8 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 15:09:07.0038 0x20e8 sbp2port - ok 15:09:07.0064 0x20e8 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll 15:09:07.0098 0x20e8 SCardSvr - ok 15:09:07.0149 0x20e8 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 15:09:07.0178 0x20e8 scfilter - ok 15:09:07.0264 0x20e8 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll 15:09:07.0318 0x20e8 Schedule - ok 15:09:07.0381 0x20e8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll 15:09:07.0411 0x20e8 SCPolicySvc - ok 15:09:07.0486 0x20e8 [ 0447065A6E10774EFCECFDD0EB970A79, 384A9AC72E756F96D43EE4B144A466564476AFD8778092C979116BB29A514433 ] ScpVBus C:\Windows\system32\DRIVERS\ScpVBus.sys 15:09:07.0502 0x20e8 ScpVBus - ok 15:09:07.0518 0x20e8 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 15:09:07.0552 0x20e8 SDRSVC - ok 15:09:07.0711 0x20e8 [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe 15:09:07.0762 0x20e8 SDScannerService - ok 15:09:07.0831 0x20e8 [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe 15:09:07.0886 0x20e8 SDUpdateService - ok 15:09:07.0906 0x20e8 [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe 15:09:07.0923 0x20e8 SDWSCService - ok 15:09:07.0948 0x20e8 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 15:09:07.0995 0x20e8 secdrv - ok 15:09:08.0050 0x20e8 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll 15:09:08.0108 0x20e8 seclogon - ok 15:09:08.0176 0x20e8 [ 398A81D590424441B2F5C5C08073CADB, 1E064DFCC49EB0D8A4150276BF796B9DFA030C451570A170EC940F8CBAAD80F3 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe 15:09:08.0216 0x20e8 Secunia PSI Agent - ok 15:09:08.0269 0x20e8 [ 8C2D3A80FC90A860F0F24DEB67471481, CE4D17B63149C44B4CD5CB7776FD4705DC675F6D2D077D53BE15578294EBC9D4 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe 15:09:08.0297 0x20e8 Secunia Update Agent - ok 15:09:08.0318 0x20e8 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\system32\sens.dll 15:09:08.0370 0x20e8 SENS - ok 15:09:08.0393 0x20e8 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll 15:09:08.0448 0x20e8 SensrSvc - ok 15:09:08.0481 0x20e8 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 15:09:08.0514 0x20e8 Serenum - ok 15:09:08.0547 0x20e8 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys 15:09:08.0588 0x20e8 Serial - ok 15:09:08.0672 0x20e8 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 15:09:08.0704 0x20e8 sermouse - ok 15:09:08.0775 0x20e8 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll 15:09:08.0830 0x20e8 SessionEnv - ok 15:09:08.0855 0x20e8 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 15:09:08.0893 0x20e8 sffdisk - ok 15:09:08.0916 0x20e8 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 15:09:08.0934 0x20e8 sffp_mmc - ok 15:09:08.0943 0x20e8 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 15:09:08.0961 0x20e8 sffp_sd - ok 15:09:08.0984 0x20e8 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 15:09:09.0016 0x20e8 sfloppy - ok 15:09:09.0105 0x20e8 [ 21AB491BBCC8C1B26FDC402A374AB196, DD973C9963C840200D153A15078152D499639730D065BB8122C6BE65D4372300 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys 15:09:09.0137 0x20e8 Sftfs - ok 15:09:09.0269 0x20e8 [ 4E1BB8A9CCDB4BAF41F7F9A930EB121D, D994B20DACEB187BEB6530309E2185040B58105E4FD5AC1DA435712F9DE027D0 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 15:09:09.0294 0x20e8 sftlist - ok 15:09:09.0323 0x20e8 [ 3B8D43FEEFF7A187534DDDFD675FE123, 9308D5C552FE3AF1121A3F7B7595547C6B892FF500377953F3B623511D84698C ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys 15:09:09.0343 0x20e8 Sftplay - ok 15:09:09.0368 0x20e8 [ F1D1B1DC7A8765A09D7640FBF8D20970, 72E59B04BC44DAFFB88987C16CF3F9DC35438B15879E102FD83013673E0DB66F ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys 15:09:09.0383 0x20e8 Sftredir - ok 15:09:09.0393 0x20e8 [ B3B9ADE7F8C4AF0C20E712E040588543, 9A6BB11DA046BF6F0239952871263E148FAE91FB21065613645114B5FA054EC5 ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys 15:09:09.0414 0x20e8 Sftvol - ok 15:09:09.0447 0x20e8 [ CECFDE5D3701B2D914862F5E6C3DFE18, E7627F90630C306324A39DC3C652B37D255F90636AC19D3302EE5B85BD504BD5 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 15:09:09.0466 0x20e8 sftvsa - ok 15:09:09.0511 0x20e8 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll 15:09:09.0565 0x20e8 SharedAccess - ok 15:09:09.0625 0x20e8 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 15:09:09.0663 0x20e8 ShellHWDetection - ok 15:09:09.0697 0x20e8 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 15:09:09.0712 0x20e8 SiSRaid2 - ok 15:09:09.0728 0x20e8 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 15:09:09.0744 0x20e8 SiSRaid4 - ok 15:09:09.0847 0x20e8 [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 15:09:09.0869 0x20e8 SkypeUpdate - ok 15:09:09.0897 0x20e8 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys 15:09:09.0929 0x20e8 Smb - ok 15:09:09.0977 0x20e8 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 15:09:10.0013 0x20e8 SNMPTRAP - ok 15:09:10.0035 0x20e8 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys 15:09:10.0050 0x20e8 spldr - ok 15:09:10.0097 0x20e8 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe 15:09:10.0143 0x20e8 Spooler - ok 15:09:10.0275 0x20e8 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe 15:09:10.0389 0x20e8 sppsvc - ok 15:09:10.0429 0x20e8 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll 15:09:10.0461 0x20e8 sppuinotify - ok 15:09:10.0488 0x20e8 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys 15:09:10.0525 0x20e8 srv - ok 15:09:10.0546 0x20e8 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 15:09:10.0570 0x20e8 srv2 - ok 15:09:10.0582 0x20e8 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 15:09:10.0623 0x20e8 srvnet - ok 15:09:10.0673 0x20e8 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 15:09:10.0728 0x20e8 SSDPSRV - ok 15:09:10.0751 0x20e8 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll 15:09:10.0798 0x20e8 SstpSvc - ok 15:09:10.0853 0x20e8 [ BACF09A6426AA666F9BDB7D1A7BD1BA7, F316F0DAA4266AD3592B7AA13120E398224FED95824E8EC4DCAD3ADBDC70A953 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe 15:09:10.0875 0x20e8 STacSV - ok 15:09:10.0959 0x20e8 [ 914CE17FE3E542ACFE5ACD6646E2DFDB, B2F443C07686E75A06DD49645C544D792F438EEC8ACE715818775E60FFEFA720 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe 15:09:10.0990 0x20e8 Steam Client Service - ok 15:09:11.0074 0x20e8 [ 4F08BE2C2AC568EE9867A9B0F4F09540, 2EACD391B66D649BA458955257912B302270AB883B13FD4034B069B7CECE75FD ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 15:09:11.0097 0x20e8 Stereo Service - ok 15:09:11.0117 0x20e8 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 15:09:11.0133 0x20e8 stexstor - ok 15:09:11.0169 0x20e8 [ 84311D693857D5AE2E397B43C91F7B41, 01445DF25540D7A9765292CF1BBBF92A02A4C314E0F58EBBEFDA2ECB62C8F020 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 15:09:11.0211 0x20e8 STHDA - ok 15:09:11.0299 0x20e8 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll 15:09:11.0331 0x20e8 stisvc - ok 15:09:11.0391 0x20e8 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys 15:09:11.0405 0x20e8 swenum - ok 15:09:11.0438 0x20e8 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll 15:09:11.0479 0x20e8 swprv - ok 15:09:11.0576 0x20e8 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll 15:09:11.0649 0x20e8 SysMain - ok 15:09:11.0704 0x20e8 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll 15:09:11.0726 0x20e8 TabletInputService - ok 15:09:11.0745 0x20e8 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll 15:09:11.0804 0x20e8 TapiSrv - ok 15:09:11.0837 0x20e8 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll 15:09:11.0885 0x20e8 TBS - ok 15:09:11.0974 0x20e8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 15:09:12.0028 0x20e8 Tcpip - ok 15:09:12.0072 0x20e8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 15:09:12.0117 0x20e8 TCPIP6 - ok 15:09:12.0179 0x20e8 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 15:09:12.0213 0x20e8 tcpipreg - ok 15:09:12.0253 0x20e8 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 15:09:12.0285 0x20e8 TDPIPE - ok 15:09:12.0340 0x20e8 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 15:09:12.0378 0x20e8 TDTCP - ok 15:09:12.0426 0x20e8 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys 15:09:12.0454 0x20e8 tdx - ok 15:09:12.0607 0x20e8 [ CC907C2FB839D3F92690A25FF8E463BE, 3CEE9BEA1ACB1086389AA4817D996431716EFEB4432EC4D59EEF1BA710C15B8C ] TeamViewer9 C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe 15:09:12.0727 0x20e8 TeamViewer9 - ok 15:09:12.0791 0x20e8 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys 15:09:12.0806 0x20e8 TermDD - ok 15:09:12.0875 0x20e8 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll 15:09:12.0942 0x20e8 TermService - ok 15:09:12.0964 0x20e8 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll 15:09:12.0984 0x20e8 Themes - ok 15:09:13.0004 0x20e8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll 15:09:13.0035 0x20e8 THREADORDER - ok 15:09:13.0049 0x20e8 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll 15:09:13.0082 0x20e8 TrkWks - ok 15:09:13.0155 0x20e8 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 15:09:13.0209 0x20e8 TrustedInstaller - ok 15:09:13.0266 0x20e8 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 15:09:13.0283 0x20e8 tssecsrv - ok 15:09:13.0354 0x20e8 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 15:09:13.0382 0x20e8 TsUsbFlt - ok 15:09:13.0450 0x20e8 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 15:09:13.0505 0x20e8 tunnel - ok 15:09:13.0577 0x20e8 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 15:09:13.0593 0x20e8 uagp35 - ok 15:09:13.0663 0x20e8 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 15:09:13.0699 0x20e8 udfs - ok 15:09:13.0732 0x20e8 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe 15:09:13.0767 0x20e8 UI0Detect - ok 15:09:13.0799 0x20e8 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 15:09:13.0815 0x20e8 uliagpkx - ok 15:09:13.0883 0x20e8 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\drivers\umbus.sys 15:09:13.0920 0x20e8 umbus - ok 15:09:13.0952 0x20e8 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 15:09:13.0984 0x20e8 UmPass - ok 15:09:14.0105 0x20e8 [ FDF92EC84FECEE834FB10A2A0A19BCDA, F81FCA3BEC10C84335DBAD9D2CDAB98C62252A864F23BDD482F97F86D5FA0B15 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 15:09:14.0171 0x20e8 UNS - ok 15:09:14.0212 0x20e8 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll 15:09:14.0268 0x20e8 upnphost - ok 15:09:14.0346 0x20e8 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 15:09:14.0388 0x20e8 usbaudio - ok 15:09:14.0458 0x20e8 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 15:09:14.0517 0x20e8 usbccgp - ok 15:09:14.0586 0x20e8 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys 15:09:14.0612 0x20e8 usbcir - ok 15:09:14.0678 0x20e8 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\drivers\usbehci.sys 15:09:14.0710 0x20e8 usbehci - ok 15:09:14.0748 0x20e8 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 15:09:14.0771 0x20e8 usbhub - ok 15:09:14.0791 0x20e8 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys 15:09:14.0808 0x20e8 usbohci - ok 15:09:14.0833 0x20e8 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 15:09:14.0870 0x20e8 usbprint - ok 15:09:14.0925 0x20e8 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 15:09:14.0959 0x20e8 USBSTOR - ok 15:09:15.0020 0x20e8 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 15:09:15.0052 0x20e8 usbuhci - ok 15:09:15.0087 0x20e8 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll 15:09:15.0119 0x20e8 UxSms - ok 15:09:15.0128 0x20e8 [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] VaultSvc C:\Windows\system32\lsass.exe 15:09:15.0144 0x20e8 VaultSvc - ok 15:09:15.0157 0x20e8 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 15:09:15.0173 0x20e8 vdrvroot - ok 15:09:15.0249 0x20e8 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe 15:09:15.0304 0x20e8 vds - ok 15:09:15.0344 0x20e8 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 15:09:15.0362 0x20e8 vga - ok 15:09:15.0378 0x20e8 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys 15:09:15.0432 0x20e8 VgaSave - ok 15:09:15.0483 0x20e8 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 15:09:15.0502 0x20e8 vhdmp - ok 15:09:15.0591 0x20e8 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys 15:09:15.0606 0x20e8 viaide - ok 15:09:15.0628 0x20e8 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys 15:09:15.0643 0x20e8 volmgr - ok 15:09:15.0712 0x20e8 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 15:09:15.0734 0x20e8 volmgrx - ok 15:09:15.0750 0x20e8 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys 15:09:15.0771 0x20e8 volsnap - ok 15:09:15.0802 0x20e8 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 15:09:15.0820 0x20e8 vsmraid - ok 15:09:15.0910 0x20e8 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe 15:09:15.0995 0x20e8 VSS - ok 15:09:16.0018 0x20e8 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 15:09:16.0036 0x20e8 vwifibus - ok 15:09:16.0057 0x20e8 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 15:09:16.0100 0x20e8 vwififlt - ok 15:09:16.0109 0x20e8 [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 15:09:16.0129 0x20e8 vwifimp - ok 15:09:16.0164 0x20e8 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll 15:09:16.0218 0x20e8 W32Time - ok 15:09:16.0334 0x20e8 [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll 15:09:16.0360 0x20e8 W3SVC - ok 15:09:16.0397 0x20e8 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 15:09:16.0415 0x20e8 WacomPen - ok 15:09:16.0504 0x20e8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 15:09:16.0536 0x20e8 WANARP - ok 15:09:16.0544 0x20e8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 15:09:16.0574 0x20e8 Wanarpv6 - ok 15:09:16.0611 0x20e8 [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll 15:09:16.0635 0x20e8 WAS - ok 15:09:16.0722 0x20e8 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 15:09:16.0763 0x20e8 WatAdminSvc - ok 15:09:16.0854 0x20e8 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe 15:09:16.0926 0x20e8 wbengine - ok 15:09:16.0965 0x20e8 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 15:09:16.0990 0x20e8 WbioSrvc - ok 15:09:17.0067 0x20e8 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll 15:09:17.0104 0x20e8 wcncsvc - ok 15:09:17.0126 0x20e8 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 15:09:17.0166 0x20e8 WcsPlugInService - ok 15:09:17.0197 0x20e8 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys 15:09:17.0212 0x20e8 Wd - ok 15:09:17.0297 0x20e8 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 15:09:17.0329 0x20e8 Wdf01000 - ok 15:09:17.0367 0x20e8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll 15:09:17.0492 0x20e8 WdiServiceHost - ok 15:09:17.0500 0x20e8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll 15:09:17.0518 0x20e8 WdiSystemHost - ok 15:09:17.0574 0x20e8 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll 15:09:17.0606 0x20e8 WebClient - ok 15:09:17.0633 0x20e8 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll 15:09:17.0688 0x20e8 Wecsvc - ok 15:09:17.0716 0x20e8 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll 15:09:17.0748 0x20e8 wercplsupport - ok 15:09:17.0773 0x20e8 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll 15:09:17.0826 0x20e8 WerSvc - ok 15:09:17.0865 0x20e8 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 15:09:17.0896 0x20e8 WfpLwf - ok 15:09:17.0922 0x20e8 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys 15:09:17.0937 0x20e8 WIMMount - ok 15:09:17.0972 0x20e8 WinDefend - ok 15:09:17.0997 0x20e8 WinHttpAutoProxySvc - ok 15:09:18.0045 0x20e8 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 15:09:18.0080 0x20e8 Winmgmt - ok 15:09:18.0180 0x20e8 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll 15:09:18.0258 0x20e8 WinRM - ok 15:09:18.0330 0x20e8 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 15:09:18.0349 0x20e8 WinUsb - ok 15:09:18.0397 0x20e8 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll 15:09:18.0436 0x20e8 Wlansvc - ok 15:09:18.0522 0x20e8 [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 15:09:18.0585 0x20e8 wlidsvc - ok 15:09:18.0631 0x20e8 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 15:09:18.0664 0x20e8 WmiAcpi - ok 15:09:18.0716 0x20e8 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 15:09:18.0737 0x20e8 wmiApSrv - ok 15:09:18.0759 0x20e8 WMPNetworkSvc - ok 15:09:18.0790 0x20e8 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll 15:09:18.0841 0x20e8 WPCSvc - ok 15:09:18.0911 0x20e8 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 15:09:18.0949 0x20e8 WPDBusEnum - ok 15:09:18.0978 0x20e8 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 15:09:19.0027 0x20e8 ws2ifsl - ok 15:09:19.0054 0x20e8 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\system32\wscsvc.dll 15:09:19.0075 0x20e8 wscsvc - ok 15:09:19.0083 0x20e8 WSearch - ok 15:09:19.0200 0x20e8 [ AA3E844A2595B1AA5825C70CA50D963E, F9C7D64D9563CA5167EC9B0D957473B55C02E9456E041AE2CDA6ABFA9641D176 ] wuauserv C:\Windows\system32\wuaueng.dll 15:09:19.0334 0x20e8 wuauserv - ok 15:09:19.0401 0x20e8 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 15:09:19.0472 0x20e8 WudfPf - ok 15:09:19.0505 0x20e8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 15:09:19.0560 0x20e8 WUDFRd - ok 15:09:19.0616 0x20e8 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 15:09:19.0634 0x20e8 wudfsvc - ok 15:09:19.0670 0x20e8 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll 15:09:19.0731 0x20e8 WwanSvc - ok 15:09:19.0758 0x20e8 xhunter1 - ok 15:09:19.0833 0x20e8 [ 2C6BC21B2D5B58D8B1D638C1704CB494, 0AABCEB627E274E338DDD9BA664BAA128D7C00AF04C95C776C2AFFA6BB17F680 ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys 15:09:19.0848 0x20e8 xusb21 - ok 15:09:20.0017 0x20e8 ================ Scan global =============================== 15:09:20.0039 0x20e8 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll 15:09:20.0101 0x20e8 [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll 15:09:20.0111 0x20e8 [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll 15:09:20.0135 0x20e8 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll 15:09:20.0197 0x20e8 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe 15:09:20.0204 0x20e8 [ Global ] - ok 15:09:20.0204 0x20e8 ================ Scan MBR ================================== 15:09:20.0213 0x20e8 [ 345DF486420B29F9200D0C3F227E312F ] \Device\Harddisk0\DR0 15:09:20.0582 0x20e8 \Device\Harddisk0\DR0 - ok 15:09:20.0583 0x20e8 ================ Scan VBR ================================== 15:09:20.0584 0x20e8 [ 4A75B48E76F797FE8EC725D74B44B398 ] \Device\Harddisk0\DR0\Partition1 15:09:20.0622 0x20e8 \Device\Harddisk0\DR0\Partition1 - ok 15:09:20.0624 0x20e8 [ B338EA21910CA8F9E88E8C2636926384 ] \Device\Harddisk0\DR0\Partition2 15:09:20.0664 0x20e8 \Device\Harddisk0\DR0\Partition2 - ok 15:09:20.0666 0x20e8 [ 4C2E177E3BC24E09AC82C9AF8EB75C95 ] \Device\Harddisk0\DR0\Partition3 15:09:20.0667 0x20e8 \Device\Harddisk0\DR0\Partition3 - ok 15:09:20.0668 0x20e8 ================ Scan generic autorun ====================== 15:09:20.0710 0x20e8 [ ACC9868D82ECEB59C2054FE60F42F8E1, 7AA2E13D59DFC259F318A0CAB61A164F1C06E0D581361DA76882E16DB81D1540 ] C:\Program Files\IDT\WDM\sttray64.exe 15:09:20.0756 0x20e8 SysTrayApp - ok 15:09:20.0757 0x20e8 MsmqIntCert - ok 15:09:20.0827 0x20e8 [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe 15:09:20.0857 0x20e8 XboxStat - ok 15:09:21.0227 0x20e8 [ 4914D5FCBE8C478DCCDCB58945EEFAFC, A59B49114429A4DB8789AD7DE35C44B8EED0BF5B39A1814512DD91DB2F94FCCB ] C:\Program Files\Logitech Gaming Software\LCore.exe 15:09:21.0559 0x20e8 Launch LCore - ok 15:09:21.0618 0x20e8 [ 954703C65A83E2E66EE31678A30A57C3, 9519379AD7E10790C6CC9E58289727FD7A8DF5D71AE62E7F851460068E755B0E ] C:\Program Files (x86)\PDF Complete\pdfsty.exe 15:09:21.0645 0x20e8 PDF Complete - ok 15:09:21.0711 0x20e8 [ 63E0C11E1CEBA6CC05443E98041BB1E0, 3C52E5F7191519A0DF545DFA42B140F55426D01E0CEF6212CEE263E0D7BFD9EC ] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE 15:09:21.0736 0x20e8 RoccatKoneXTD - ok 15:09:21.0875 0x20e8 [ 28DEF0EFB36D172EAA5A08EB09CF75DF, 62D07A28167AEBFB9511830BFBBEAAB17CC24D57FF8D07F1414D921135BC9024 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 15:09:21.0905 0x20e8 avgnt - ok 15:09:22.0004 0x20e8 [ 53C6C41356D532FEFD8056AB2906D129, C5E54C571FA44AF7FD1974464CC5D5DD30BA0D31ED20CF6B3DBB5A49FC5F0AC7 ] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe 15:09:22.0022 0x20e8 Lightshot - ok 15:09:22.0160 0x20e8 [ 7EE68A122ED08E4AAD8DA551E34D2515, B3C9AB270AF595D3DBAFBF4A312B96CBF00C16F0A03CCC86BE56825CD1EB7143 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe 15:09:22.0249 0x20e8 SDTray - ok 15:09:22.0367 0x20e8 [ 299EDE8BBC229B7FA0BC0369BAE8CA2E, 788C06C7EDDDC0687A4137BDA00D320146425768960066FCBE0391BE7DBC2280 ] C:\Program Files (x86)\Raptr\raptrstub.exe 15:09:22.0382 0x20e8 Raptr - ok 15:09:22.0480 0x20e8 [ 80086ED442941DE2CA18CB6DAE8C1422, F7BE958F2E8E17970C238E3806F4A742B12DA09EB21093BD6371CF4B580C5BE4 ] C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe 15:09:22.0530 0x20e8 Aeria Ignite - ok 15:09:22.0643 0x20e8 [ F2BC40E35AB242AA27BCD8FBA9D0B5CB, 4F89E1F57E8E4897D1614DAA852B0CBF7C1FD705641895E874C52377DC3F3403 ] C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe 15:09:22.0660 0x20e8 Avira Systray - ok 15:09:22.0821 0x20e8 [ D9F25B1C673DEEF18A45AD2080DC9A5E, 76C4E520099F0CF3556158B6C154B68E4F954D4CA6A1851FB08979207F482200 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe 15:09:22.0852 0x20e8 StartCCC - ok 15:09:22.0931 0x20e8 [ A53882D3DD03456EF1193F43709BFB57, 2C3842C3CE799144D113FF61200021E58AF7D10FDE11847A4A65EAB4BE960808 ] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe 15:09:22.0945 0x20e8 KPeerNexonEU - detected UnsignedFile.Multi.Generic ( 1 ) 15:09:32.0946 0x20e8 KPeerNexonEU ( UnsignedFile.Multi.Generic ) - warning 15:09:37.0746 0x20e8 [ 42CD0245D2BE7184E774BC89DAA4F6C2, EDF4942E9A27478241CB33ECC8F75239AD0E294D1CD2202DB9F707BD6873B2FC ] C:\Program Files (x86)\puush\puush.exe 15:09:37.0770 0x20e8 puush - ok 15:09:37.0807 0x20e8 Skype - ok 15:09:37.0967 0x20e8 [ F2B4338E54D09E15E28E170B3EB2B430, 6B7008C4D58806D8D67F0E860138A1660BAC3000CE239C34480E40379F792B6F ] C:\Program Files (x86)\Origin\Origin.exe 15:09:38.0040 0x20e8 EADM - ok 15:09:38.0113 0x20e8 [ CE90EE085794116AD1ED46A458950024, 5A19C6147F007319329911B0CC7BB9994DA3673BC930D819888DD27A98E6F540 ] C:\Program Files (x86)\LOLReplay\LOLRecorder.exe 15:09:38.0144 0x20e8 LOLReplay Recorder - detected UnsignedFile.Multi.Generic ( 1 ) 15:09:40.0899 0x20e8 LOLReplay Recorder ( UnsignedFile.Multi.Generic ) - warning 15:09:43.0792 0x20e8 [ DFAE85572A4565A0B04B34F872EC58DB, 32311C48BC7C174626EF0FE27444956954B5985A787A2D4069E679243B3E62B6 ] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 15:09:43.0818 0x20e8 GoogleChromeAutoLaunch_9ED998646215A7B2837127291A244E96 - ok 15:09:44.0023 0x20e8 [ D6E2ED7F1F7BE7CCB8676491BF950B57, CBF07EE746F2C27ACC532E83ADC43FBE954DC3C598C4333F13B1A7615AEA9AD5 ] C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe 15:09:44.0135 0x20e8 Akamai NetSession Interface - ok 15:09:44.0287 0x20e8 [ 005B2B63719E6B3E8E2E1446A9278F8E, 0A34046B0205A2FEEE5E2867765D171D7BA420A1527E49472A35B484219BD377 ] C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe 15:09:44.0342 0x20e8 Spotify Web Helper - ok 15:09:44.0554 0x20e8 [ 1714D2B9D03CD71541AFD1FA0ED23759, B8CA2496B250A5257BEF290445FC998560317D9851A0D75CE9BBA4243D002CD5 ] C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe 15:09:44.0731 0x20e8 Spotify - ok 15:09:44.0827 0x20e8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:09:44.0911 0x20e8 Sidebar - ok 15:09:44.0942 0x20e8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:09:44.0965 0x20e8 mctadmin - ok 15:09:44.0989 0x20e8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:09:45.0024 0x20e8 Sidebar - ok 15:09:45.0029 0x20e8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:09:45.0050 0x20e8 mctadmin - ok 15:09:45.0074 0x20e8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:09:45.0108 0x20e8 Sidebar - ok 15:09:45.0116 0x20e8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:09:45.0136 0x20e8 mctadmin - ok 15:09:45.0136 0x20e8 Waiting for KSN requests completion. In queue: 10 15:09:46.0136 0x20e8 Waiting for KSN requests completion. In queue: 10 15:09:47.0136 0x20e8 Waiting for KSN requests completion. In queue: 10 15:09:48.0377 0x20e8 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.12.402 ), 0x41000 ( enabled : updated ) 15:09:48.0433 0x20e8 Win FW state via NFP2: enabled ( trusted ) 15:09:51.0268 0x20e8 ============================================================ 15:09:51.0268 0x20e8 Scan finished 15:09:51.0268 0x20e8 ============================================================ 15:09:51.0274 0x0468 Detected object count: 3 15:09:51.0274 0x0468 Actual detected object count: 3 15:10:13.0145 0x0468 Ds3Service ( UnsignedFile.Multi.Generic ) - skipped by user 15:10:13.0145 0x0468 Ds3Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 15:10:13.0146 0x0468 KPeerNexonEU ( UnsignedFile.Multi.Generic ) - skipped by user 15:10:13.0146 0x0468 KPeerNexonEU ( UnsignedFile.Multi.Generic ) - User select action: Skip 15:10:13.0147 0x0468 LOLReplay Recorder ( UnsignedFile.Multi.Generic ) - skipped by user 15:10:13.0147 0x0468 LOLReplay Recorder ( UnsignedFile.Multi.Generic ) - User select action: Skip Geändert von TheFuneral (08.08.2015 um 14:11 Uhr) |
09.08.2015, 07:16 | #7 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware? hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.08.2015, 19:52 | #8 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Hi, Combofix arbeitet nach Stufe_50 nicht mehr weiter. Habe es jetzt seit 3 Stunden laufen, aber es tut sich nicht mehr und logfile wurde auch keins erstellt. Denke nicht, dass das normal ist, oder? |
10.08.2015, 12:30 | #9 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Nee. Abbrechen, rebooten, frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.08.2015, 16:42 | #10 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware?Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015 durchgeführt von Tobi (Administrator) auf HP.com (10-08-2015 17:38:17) Gestartet von C:\Users\Tobi\Downloads Geladene Profile: Tobi & UpdatusUser (Verfügbare Profile: Tobi & UpdatusUser & DefaultAppPool) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe () C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Scarlet.Crush Productions) C:\Controller PS3\ScpServer\bin\ScpService.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe () C:\Program Files (x86)\puush\puush.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe (LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe (Akamai Technologies, Inc.) C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Akamai Technologies, Inc.) C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe (Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Spotify Ltd) C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Windows\System32\mqtgsvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe (Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-27] (IDT, Inc.) HKLM\...\Run: [MsmqIntCert] => regsvr32 /s mqrt.dll HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc) HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [558944 2012-11-30] (ROCCAT GmbH) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc) HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [KPeerNexonEU] => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-07-19] (NEXON Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] () HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632112 2015-08-08] (Electronic Arts) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [LOLReplay Recorder] => C:\Program Files (x86)\LOLReplay\LOLRecorder.exe [521216 2014-07-18] (LOL Replay) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [GoogleChromeAutoLaunch_9ED998646215A7B2837127291A244E96] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-07-31] (Google Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-07] (Spotify Ltd) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify] => C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-07] (Spotify Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-04-04] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3NYnTOqpuAS3I9zzHB7osEXiEti4UVInLRg0TQK0-aizhplySMmc9G5au8EmlOV HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3NYnTOqpuAS3I9zzHB7osEXiEti4UVInLRg0TQK0-aizhplySMmc9G5au8EmlOV HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPDSK/4 HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4 HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\S-1-5-21-3131910065-3854824008-1126967849-1006\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} SearchScopes: HKLM -> {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3131910065-3854824008-1126967849-1006 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2013-12-30] (IObit) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-04-04] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-04-04] (Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-05-10] (EasyBits Software Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6EC19656-95C2-4E0F-A281-76703E387EF0}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{73792F98-20CE-4F31-9E8D-D3A3BA0827D5}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{8F20DED7-DC87-40B5-B4E3-B4D50980FEB9}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{92ED9E0A-06C3-48E2-8E07-3AA0D44922B3}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{CE661347-BC36-496E-A052-910C237C275A}: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default FF DefaultSearchEngine,S: FF DefaultSearchUrl: FF SearchEngineOrder.1: FF SearchEngineOrder.1,S: FF SelectedSearchEngine,S: FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-04-04] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-04-04] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-07-19] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Extension: Avira Browser Safety - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default\Extensions\abs@avira.com [2014-09-12] FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{652f37d2-5d36-2a41-489e-6bc2164ee11e} [2014-07-08] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-08] FF HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff Chrome: ======= CHR Profile: C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-12-26] CHR Extension: (BetterTTV) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2015-07-05] CHR Extension: (AdBlock) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-12] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13] CHR Extension: (Chrome Web Store Payments) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5525328 2015-07-27] (Emsisoft Ltd) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [2231616 2010-07-19] () R2 Ds3Service; C:\Controller PS3\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Datei ist nicht signiert] S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-03-12] (Hi-Rez Studios) [Datei ist nicht signiert] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation) R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-11-22] (Hewlett-Packard Company) [Datei ist nicht signiert] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-31] (IObit) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation) R2 MSMQTriggers; C:\Windows\system32\mqtgsvc.exe [189440 2010-11-20] (Microsoft Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-08] (Electronic Arts) R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-26] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 otshot; C:\program files\otshot\ZalmanUpdateService.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 epp64; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys [138504 2015-08-06] (Emsisoft GmbH) S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] () R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-09 20:17 - 2015-08-09 20:33 - 00000000 ___SD C:\ComboFix 2015-08-09 20:17 - 2015-08-09 20:17 - 00013371 _____ C:\Users\Tobi\Desktop\ComboFix.exe - Verknüpfung (2).lnk 2015-08-08 15:22 - 2015-08-08 15:22 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004 (2).exe 2015-08-08 15:22 - 2015-08-08 15:22 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004 (1).exe 2015-08-08 15:07 - 2015-08-08 15:07 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Tobi\Downloads\tdsskiller.exe 2015-08-08 14:48 - 2015-08-08 14:48 - 00000000 ____D C:\Users\Tobi\Documents\Battlefield 3 2015-08-08 14:47 - 2015-08-08 14:47 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESN 2015-08-08 14:46 - 2015-08-08 14:46 - 01640768 _____ C:\Users\Tobi\Downloads\battlelog-web-plugins_2.7.1_162.exe 2015-08-08 14:46 - 2015-08-08 14:46 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2015-08-08 14:45 - 2015-08-08 14:45 - 00000000 ____D C:\ProgramData\EA Core 2015-08-08 03:50 - 2015-08-08 16:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-08-08 03:49 - 2015-08-08 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\mbar 2015-08-08 03:48 - 2015-08-08 03:48 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004.exe 2015-08-03 16:20 - 2015-08-10 17:38 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion 2015-07-31 23:55 - 2015-07-31 23:55 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3 (1).sdt 2015-07-31 23:54 - 2015-07-31 23:54 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3.sdt 2015-07-31 14:21 - 2015-07-31 14:21 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\ProductData 2015-07-28 21:58 - 2015-07-28 21:58 - 01076244 _____ C:\Users\Tobi\Downloads\s9.php 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (2).exe 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (1).exe 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-27 22:12 - 2015-07-27 22:12 - 00000000 ____D C:\ProgramData\Emsisoft 2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Users\Tobi\AppData\Local\CEF 2015-07-21 18:17 - 2015-07-21 18:17 - 00000000 ____D C:\Users\Tobi\Desktop\Tor Browser 2015-07-21 18:12 - 2015-07-21 18:12 - 01259808 _____ C:\Users\Tobi\Downloads\Tor Browser Paket - CHIP-Installer.exe 2015-07-21 18:10 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 18:10 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 18:10 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-20 21:02 - 2015-07-22 21:29 - 00000000 ____D C:\Users\Tobi\AppData\Local\Windows Live 2015-07-18 18:29 - 2015-07-18 18:29 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507181829120294.log 2015-07-18 18:29 - 2015-07-18 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-07-18 18:29 - 2015-07-18 18:29 - 00000000 ____D C:\ProgramData\ATI 2015-07-18 18:28 - 2015-07-18 18:28 - 00000000 ____D C:\Program Files (x86)\AMD 2015-07-16 16:09 - 2015-07-16 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-07-16 16:08 - 2015-07-16 16:10 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2015-07-16 16:05 - 2015-07-16 16:07 - 82596072 _____ (Logitech Inc.) C:\Users\Tobi\Downloads\LGS_8.70.315_x64_Logitech.exe 2015-07-16 15:21 - 2015-07-16 15:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2015-07-16 15:18 - 2015-07-16 15:18 - 10571443 _____ C:\Users\Tobi\Downloads\SCP-DS-Driver-Package-1.2.0.160.7z 2015-07-16 15:18 - 2013-05-19 09:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys 2015-07-16 15:18 - 2013-01-07 16:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2015-07-16 15:18 - 2013-01-07 16:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2015-07-16 15:17 - 2015-07-16 15:18 - 00000000 ____D C:\Controller PS3 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2015-07-16 15:15 - 2015-07-16 15:15 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu (1).exe 2015-07-16 15:14 - 2015-07-16 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2015-07-16 15:13 - 2015-07-16 15:13 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2015-07-16 15:12 - 2015-07-16 15:13 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu.exe 2015-07-16 14:33 - 2015-07-16 14:33 - 04117346 _____ C:\Users\Tobi\Downloads\MotioninJoy_071001_signed.zip 2015-07-16 14:33 - 2015-07-16 14:33 - 00000925 _____ C:\Users\Public\Desktop\DS3 Tool.lnk 2015-07-16 14:31 - 2015-07-16 14:31 - 01198368 _____ C:\Users\Tobi\Downloads\MotioninJoy - CHIP-Installer.exe 2015-07-16 14:05 - 2015-07-16 14:05 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2015-07-16 13:42 - 2015-07-16 13:42 - 00000222 _____ C:\Users\Tobi\Desktop\Rocket League.url 2015-07-14 23:36 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-14 23:36 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-14 23:36 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-14 23:36 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-14 23:36 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-14 23:36 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-14 23:36 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-14 23:36 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-14 23:36 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-14 23:36 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-14 23:36 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-14 23:36 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-14 23:36 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-14 23:36 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-14 23:36 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-14 23:36 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-14 23:36 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-14 23:35 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-14 23:35 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-14 23:35 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-14 23:35 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-14 23:35 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-14 23:35 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-14 23:35 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-14 23:35 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-14 23:35 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-14 23:35 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-14 23:35 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-14 23:35 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-14 23:35 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-14 23:35 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-14 23:35 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-14 23:35 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-14 23:35 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-14 23:35 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-14 23:35 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-14 23:35 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-14 23:35 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-14 23:35 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-14 23:35 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-14 23:35 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-14 23:35 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-14 23:35 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-14 23:35 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-14 23:35 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-14 23:35 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-14 23:34 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-14 23:34 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-14 23:34 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-14 23:34 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-14 23:34 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-14 23:34 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-14 23:34 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-14 23:34 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-14 23:34 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-10 17:38 - 2015-06-27 20:19 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Spotify 2015-08-10 17:38 - 2015-04-07 01:16 - 00026129 _____ C:\Users\Tobi\Downloads\FRST.txt 2015-08-10 17:38 - 2015-04-07 01:16 - 00000000 ____D C:\FRST 2015-08-10 17:38 - 2015-04-07 01:15 - 02171392 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe 2015-08-10 17:38 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Origin 2015-08-10 17:36 - 2015-04-30 00:25 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2015-08-10 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2015-08-10 17:34 - 2013-12-28 18:35 - 00120043 _____ C:\Windows\setupact.log 2015-08-10 17:33 - 2015-06-27 20:20 - 00000000 ____D C:\Users\Tobi\AppData\Local\Spotify 2015-08-10 17:33 - 2015-05-19 14:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Raptr 2015-08-10 17:33 - 2011-10-03 15:49 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Skype 2015-08-10 17:32 - 2011-09-05 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-10 17:31 - 2014-09-12 13:52 - 00000000 ____D C:\ProgramData\Avira 2015-08-10 17:31 - 2013-12-28 18:34 - 01482044 _____ C:\Windows\PFRO.log 2015-08-10 17:31 - 2011-05-10 01:38 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-10 17:31 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-10 17:30 - 2015-02-16 22:27 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2015-08-10 17:29 - 2011-09-05 09:19 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-10 17:29 - 2011-05-10 01:43 - 01947734 _____ C:\Windows\WindowsUpdate.log 2015-08-10 17:25 - 2012-10-30 17:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-10 17:23 - 2013-07-13 14:40 - 00000000 ____D C:\Program Files (x86)\Steam 2015-08-10 16:53 - 2015-04-26 15:13 - 00000390 _____ C:\Windows\Tasks\update-sys.job 2015-08-10 15:53 - 2015-04-26 15:13 - 00000390 _____ C:\Windows\Tasks\update-S-1-5-21-3131910065-3854824008-1126967849-1000.job 2015-08-10 14:07 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-10 14:07 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-10 07:03 - 2012-02-19 15:54 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client 2015-08-09 20:14 - 2014-09-12 13:53 - 00000000 ____D C:\ProgramData\Package Cache 2015-08-09 20:14 - 2014-09-12 13:52 - 00000000 ____D C:\Program Files (x86)\Avira 2015-08-09 20:11 - 2015-04-07 02:27 - 05634368 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe 2015-08-08 16:20 - 2011-05-10 01:52 - 00000000 ____D C:\ProgramData\PDFC 2015-08-08 15:23 - 2014-09-01 03:12 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-08 15:23 - 2014-09-01 03:12 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-08 14:53 - 2011-12-19 15:24 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2015-08-08 14:53 - 2011-12-19 01:26 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2015-08-08 14:48 - 2011-12-19 15:24 - 00000000 ____D C:\Users\Tobi\AppData\Local\PunkBuster 2015-08-08 14:48 - 2011-12-19 01:26 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2015-08-08 14:45 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Electronic Arts 2015-08-08 14:44 - 2014-05-29 10:36 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Origin 2015-08-08 14:43 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-08-08 14:43 - 2014-05-29 10:34 - 00000000 ____D C:\Program Files (x86)\Origin 2015-08-08 02:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-08-06 22:14 - 2012-02-06 18:52 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForTobi 2015-08-06 22:14 - 2012-02-06 18:52 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForTobi.job 2015-08-06 19:11 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther 2015-08-06 19:07 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT 2015-08-05 22:36 - 2011-09-05 09:19 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-05 15:45 - 2013-12-30 13:23 - 00000000 ____D C:\ProgramData\ProductData 2015-08-03 16:26 - 2015-04-07 01:20 - 00098456 _____ C:\Users\Tobi\Downloads\Addition.txt 2015-07-31 14:21 - 2013-12-30 13:23 - 00000000 ____D C:\ProgramData\IObit 2015-07-30 11:44 - 2015-05-19 14:53 - 00000000 ____D C:\Program Files (x86)\Raptr 2015-07-30 02:18 - 2014-08-09 18:25 - 01118208 ___SH C:\Users\Tobi\Downloads\Thumbs.db 2015-07-28 21:27 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-07-28 21:02 - 2014-05-09 22:15 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-27 22:15 - 2014-09-01 03:12 - 00001108 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-07-27 22:15 - 2014-09-01 03:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-07-27 22:15 - 2014-09-01 03:11 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-07-25 12:26 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-22 21:37 - 2015-06-13 17:11 - 00569856 ___SH C:\Users\Tobi\Documents\Thumbs.db 2015-07-22 17:24 - 2009-07-14 06:45 - 00472008 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-18 23:18 - 2011-09-05 04:25 - 00000000 ____D C:\Users\Tobi\AppData\Local\CrashDumps 2015-07-18 18:29 - 2015-02-16 22:20 - 00000000 ____D C:\Program Files\AMD 2015-07-18 18:18 - 2015-02-16 22:24 - 00000000 ____D C:\AMD 2015-07-17 20:02 - 2011-10-04 12:39 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForHP.com$ 2015-07-17 20:02 - 2011-10-04 12:39 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForHP.com$.job 2015-07-17 03:01 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-07-16 16:07 - 2013-02-06 21:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Logishrd 2015-07-16 15:16 - 2014-06-08 00:12 - 00131537 _____ C:\Windows\DirectX.log 2015-07-16 15:14 - 2013-03-30 17:35 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\Program Files\MotioninJoy 2015-07-16 14:05 - 2013-09-04 17:24 - 00000000 ____D C:\Users\Tobi\Documents\My Games 2015-07-16 14:05 - 2011-05-10 01:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-07-16 06:24 - 2011-09-05 09:19 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 06:24 - 2011-09-05 09:19 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 16:25 - 2012-10-30 17:44 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 16:25 - 2012-10-30 17:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 16:25 - 2011-09-05 09:23 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 12:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-15 03:52 - 2014-12-14 12:11 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 03:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 03:29 - 2013-07-13 18:34 - 00000000 ____D C:\Windows\system32\MRT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-20 15:19 - 2015-02-19 03:19 - 0000044 ____H () C:\Program Files (x86)\7c6e32c6.tmp 2014-06-19 13:16 - 2014-06-19 13:16 - 0000024 _____ () C:\Users\Tobi\AppData\Roaming\temp.ini 2013-12-18 20:05 - 2013-12-18 20:05 - 0000030 _____ () C:\Users\Tobi\AppData\Roaming\WB.CFG 2012-08-25 13:19 - 2012-08-25 13:25 - 0004608 _____ () C:\Users\Tobi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-08-30 22:34 - 2012-08-30 22:34 - 0000094 _____ () C:\Users\Tobi\AppData\Local\fusioncache.dat 2014-08-31 23:50 - 2014-08-31 23:50 - 0000017 _____ () C:\Users\Tobi\AppData\Local\resmon.resmoncfg 2015-04-26 15:13 - 2015-04-26 15:13 - 0000003 _____ () C:\Users\Tobi\AppData\Local\updater.log 2015-04-26 15:13 - 2015-04-26 15:13 - 0000424 _____ () C:\Users\Tobi\AppData\Local\UserProducts.xml 2011-11-25 19:02 - 2011-11-25 19:02 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F3E71781-4549-49E1-B591-9E13E32BBFE6} 2011-11-27 20:04 - 2011-11-27 20:04 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F98C5B73-8232-4300-BE5E-AD6FFF1F8CB1} Einige Dateien in TEMP: ==================== C:\Users\Tobi\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 15:15 ==================== Ende von log ============================ |
11.08.2015, 10:39 | #11 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware? Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.08.2015, 14:24 | #12 |
| Verzögerte Tastatureingabe, Freezes in Spielen - Malware?Code:
ATTFilter # AdwCleaner v4.201 - Bericht erstellt 11/08/2015 um 14:52:39 # Aktualisiert 08/04/2015 von Xplode # Datenbank : 2015-08-01.1 [Server] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64) # Benutzername : Tobi - HP.com # Gestarted von : C:\Users\Tobi\Downloads\AdwCleaner_4.201.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Datei Gelöscht : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage Datei Gelöscht : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal Datei Gelöscht : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage Datei Gelöscht : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage-journal ***** [ Geplante Tasks ] ***** Task Gelöscht : update-sys Task Gelöscht : update-S-1-5-21-3131910065-3854824008-1126967849-1000 ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} Schlüssel Gelöscht : HKCU\Software\OCS Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local> ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17909 -\\ Mozilla Firefox v29.0.1 (de) -\\ Google Chrome v44.0.2403.130 -\\ Chromium v ************************* AdwCleaner[R0].txt - [2897 Bytes] - [11/04/2015 20:01:10] AdwCleaner[R1].txt - [331 Bytes] - [11/08/2015 14:49:54] AdwCleaner[R2].txt - [2253 Bytes] - [11/08/2015 14:51:17] AdwCleaner[S0].txt - [2956 Bytes] - [11/04/2015 20:02:41] AdwCleaner[S1].txt - [2091 Bytes] - [11/08/2015 14:52:39] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2150 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.5.5 (08.05.2015:1) OS: Windows 7 Home Premium x64 Ran by Tobi on 11.08.2015 at 15:08:56,25 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_9ED998646215A7B2837127291A244E96 Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer ~~~ Files Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_services.hearstmags.com_0.localstorage Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_services.hearstmags.com_0.localstorage-journal Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage Successfully deleted: [File] C:\Users\Tobi\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal Successfully deleted: [File] C:\Users\Tobi\desktop\search.lnk Successfully deleted: [File] C:\Windows\SysWOW64\sho77F3.tmp Successfully deleted: [File] C:\Windows\SysWOW64\shoBED7.tmp ~~~ Folders Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mipony Successfully deleted: [Folder] C:\ProgramData\productdata Successfully deleted: [Folder] C:\Users\Tobi\Appdata\Local\crashrpt Successfully deleted: [Folder] C:\Users\Tobi\AppData\Roaming\mipony Successfully deleted: [Folder] C:\Users\Tobi\AppData\Roaming\productdata Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin Successfully deleted: [Folder] C:\Windows\SysWOW64\amd64 ~~~ Chrome Successfully deleted: [Folder] C:\Users\Tobi\Appdata\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [C:\Users\Tobi\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Tobi\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: ajopnjidmegmdimjlfnijceegpefgped [C:\Users\Tobi\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Tobi\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [ ajopnjidmegmdimjlfnijceegpefgped ] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11.08.2015 at 15:15:06,51 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015 durchgeführt von Tobi (Administrator) auf HP.com (11-08-2015 15:23:12) Gestartet von C:\Users\Tobi\Downloads Geladene Profile: Tobi (Verfügbare Profile: Tobi & UpdatusUser & DefaultAppPool) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\System32\mqtgsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-27] (IDT, Inc.) HKLM\...\Run: [MsmqIntCert] => regsvr32 /s mqrt.dll HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc) HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [558944 2012-11-30] (ROCCAT GmbH) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc) HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-28] (Advanced Micro Devices, Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [KPeerNexonEU] => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-07-19] (NEXON Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] () HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632112 2015-08-08] (Electronic Arts) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [LOLReplay Recorder] => C:\Program Files (x86)\LOLReplay\LOLRecorder.exe [521216 2014-07-18] (LOL Replay) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Tobi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify Web Helper] => C:\Users\Tobi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-07] (Spotify Ltd) HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Run: [Spotify] => C:\Users\Tobi\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-07] (Spotify Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-04-04] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3NYnTOqpuAS3I9zzHB7osEXiEti4UVInLRg0TQK0-aizhplySMmc9G5au8EmlOV HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoSdjO3Ztb1gBxHUOyHUDHFhUfOrhwuGqBAZnyy0zr27MLQz_aL5Lab3QJrPHxMPp3_5LtV461DudoywGYogxjokoZP0acqFS1LJhX_kLWB1mP6OxLfrcg7q1Yrtr0SC&q={searchTerms} SearchScopes: HKLM -> {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-04-04] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-04-04] (Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKU\S-1-5-21-3131910065-3854824008-1126967849-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-05-10] (EasyBits Software Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{6CF30669-2FB7-4F0F-945A-9275E233673F}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{6EC19656-95C2-4E0F-A281-76703E387EF0}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{73792F98-20CE-4F31-9E8D-D3A3BA0827D5}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{8F20DED7-DC87-40B5-B4E3-B4D50980FEB9}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{92ED9E0A-06C3-48E2-8E07-3AA0D44922B3}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{CE661347-BC36-496E-A052-910C237C275A}: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default FF DefaultSearchEngine,S: FF DefaultSearchUrl: FF SearchEngineOrder.1: FF SearchEngineOrder.1,S: FF SelectedSearchEngine,S: FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-04-04] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.0.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-04-04] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-07-19] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-09-12] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Extension: Avira Browser Safety - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\ml1u9hrs.default\Extensions\abs@avira.com [2014-09-12] FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{652f37d2-5d36-2a41-489e-6bc2164ee11e} [2014-07-08] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-08] FF HKU\S-1-5-21-3131910065-3854824008-1126967849-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff Chrome: ======= CHR Profile: C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-12-26] CHR Extension: (AdBlock) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-12] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13] CHR Extension: (Chrome Web Store Payments) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5525328 2015-07-27] (Emsisoft Ltd) S2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2015-06-22] (Advanced Micro Devices) [Datei ist nicht signiert] S2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [2231616 2010-07-19] () S2 Ds3Service; C:\Controller PS3\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Datei ist nicht signiert] S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-03-12] (Hi-Rez Studios) [Datei ist nicht signiert] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation) S2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-11-22] (Hewlett-Packard Company) [Datei ist nicht signiert] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-31] (IObit) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation) R2 MSMQTriggers; C:\Windows\system32\mqtgsvc.exe [189440 2010-11-20] (Microsoft Corporation) S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-08] (Electronic Arts) S2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc) S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-26] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 otshot; C:\program files\otshot\ZalmanUpdateService.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [297672 2015-07-29] (Advanced Micro Devices) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 epp64; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys [138504 2015-08-06] (Emsisoft GmbH) S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] () R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-11 15:15 - 2015-08-11 15:15 - 00003569 _____ C:\Users\Tobi\Desktop\JRT.txt 2015-08-11 15:08 - 2015-08-11 15:08 - 01797896 _____ (Malwarebytes Corporation) C:\Users\Tobi\Downloads\JRT (1).exe 2015-08-11 15:06 - 2015-08-05 22:57 - 01797896 _____ (Malwarebytes Corporation) C:\Users\Tobi\Desktop\JRT_NEW.exe 2015-08-11 03:49 - 2015-08-11 03:49 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201508110349306145.log 2015-08-11 03:49 - 2015-08-11 03:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-08-11 03:49 - 2015-08-11 03:49 - 00000000 ____D C:\ProgramData\ATI 2015-08-11 03:48 - 2015-08-11 03:48 - 00000000 ____D C:\Program Files (x86)\AMD 2015-08-11 03:37 - 2015-08-11 03:40 - 300838856 _____ (AMD Inc.) C:\Users\Tobi\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe 2015-08-09 20:17 - 2015-08-09 20:33 - 00000000 ___SD C:\ComboFix 2015-08-09 20:17 - 2015-08-09 20:17 - 00013371 _____ C:\Users\Tobi\Desktop\ComboFix.exe - Verknüpfung (2).lnk 2015-08-08 15:22 - 2015-08-08 15:22 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004 (2).exe 2015-08-08 15:22 - 2015-08-08 15:22 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004 (1).exe 2015-08-08 15:07 - 2015-08-08 15:07 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Tobi\Downloads\tdsskiller.exe 2015-08-08 14:48 - 2015-08-08 14:48 - 00000000 ____D C:\Users\Tobi\Documents\Battlefield 3 2015-08-08 14:47 - 2015-08-08 14:47 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESN 2015-08-08 14:46 - 2015-08-08 14:46 - 01640768 _____ C:\Users\Tobi\Downloads\battlelog-web-plugins_2.7.1_162.exe 2015-08-08 14:46 - 2015-08-08 14:46 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2015-08-08 14:45 - 2015-08-08 14:45 - 00000000 ____D C:\ProgramData\EA Core 2015-08-08 03:50 - 2015-08-08 16:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-08-08 03:49 - 2015-08-08 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\mbar 2015-08-08 03:48 - 2015-08-08 03:48 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobi\Downloads\mbar-1.09.1.1004.exe 2015-08-03 16:20 - 2015-08-10 17:38 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion 2015-07-31 23:55 - 2015-07-31 23:55 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3 (1).sdt 2015-07-31 23:54 - 2015-07-31 23:54 - 00342430 _____ C:\Users\Tobi\Downloads\lolhentai-1.6.3.sdt 2015-07-29 05:44 - 2015-07-29 05:44 - 00107784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll 2015-07-29 05:43 - 2015-07-29 05:43 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll 2015-07-29 05:43 - 2015-07-29 05:43 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll 2015-07-29 05:43 - 2015-07-29 05:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll 2015-07-29 05:43 - 2015-07-29 05:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll 2015-07-29 05:42 - 2015-07-29 05:42 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2015-07-29 05:42 - 2015-07-29 05:42 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2015-07-29 05:26 - 2015-07-29 05:26 - 00297672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys 2015-07-29 05:15 - 2015-07-29 05:15 - 21622784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys 2015-07-29 05:09 - 2015-07-29 05:09 - 47785472 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2015-07-29 05:09 - 2015-07-29 05:09 - 00235008 _____ C:\Windows\system32\clinfo.exe 2015-07-29 05:07 - 2015-07-29 05:07 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-07-29 05:07 - 2015-07-29 05:07 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-07-29 05:06 - 2015-07-29 05:06 - 27535872 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll 2015-07-29 04:41 - 2015-07-29 04:41 - 06477312 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll 2015-07-29 04:41 - 2015-07-29 04:41 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll 2015-07-29 04:41 - 2015-07-29 04:41 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll 2015-07-29 04:36 - 2015-07-29 04:36 - 05068288 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll 2015-07-29 04:34 - 2015-07-29 04:34 - 30752256 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll 2015-07-29 04:34 - 2015-07-29 04:34 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll 2015-07-29 04:34 - 2015-07-29 04:34 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll 2015-07-29 04:33 - 2015-07-29 04:33 - 00093696 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll 2015-07-29 04:33 - 2015-07-29 04:33 - 00086528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll 2015-07-29 04:32 - 2015-07-29 04:32 - 03437632 _____ C:\Windows\system32\atiumd6a.cap 2015-07-29 04:30 - 2015-07-29 04:30 - 15716864 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll 2015-07-29 04:30 - 2015-07-29 04:30 - 00660928 _____ C:\Windows\SysWOW64\atiapfxx.blb 2015-07-29 04:30 - 2015-07-29 04:30 - 00660928 _____ C:\Windows\system32\atiapfxx.blb 2015-07-29 04:30 - 2015-07-29 04:30 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe 2015-07-29 04:30 - 2015-07-29 04:30 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll 2015-07-29 04:30 - 2015-07-29 04:30 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll 2015-07-29 04:30 - 2015-07-29 04:30 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2015-07-29 04:30 - 2015-07-29 04:30 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2015-07-29 04:29 - 2015-07-29 04:29 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2015-07-29 04:28 - 2015-07-29 04:28 - 25299968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll 2015-07-29 04:28 - 2015-07-29 04:28 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap 2015-07-29 04:26 - 2015-07-29 04:26 - 00672768 _____ (AMD) C:\Windows\system32\atieclxx.exe 2015-07-29 04:26 - 2015-07-29 04:26 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll 2015-07-29 04:26 - 2015-07-29 04:26 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll 2015-07-29 04:26 - 2015-07-29 04:26 - 00160256 _____ C:\Windows\system32\atieah64.exe 2015-07-29 04:26 - 2015-07-29 04:26 - 00143872 _____ C:\Windows\SysWOW64\atieah32.exe 2015-07-29 04:26 - 2015-07-29 04:26 - 00029696 _____ (AMD) C:\Windows\system32\atimuixx.dll 2015-07-29 04:25 - 2015-07-29 04:25 - 00246784 _____ (AMD) C:\Windows\system32\atiesrxx.exe 2015-07-29 04:25 - 2015-07-29 04:25 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll 2015-07-29 04:24 - 2015-07-29 04:24 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll 2015-07-29 04:24 - 2015-07-29 04:24 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll 2015-07-29 04:23 - 2015-07-29 04:23 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll 2015-07-29 04:22 - 2015-07-29 04:22 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll 2015-07-29 04:22 - 2015-07-29 04:22 - 00665088 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys 2015-07-29 04:22 - 2015-07-29 04:22 - 00156672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll 2015-07-29 04:22 - 2015-07-29 04:22 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll 2015-07-29 04:22 - 2015-07-29 04:22 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2015-07-29 04:22 - 2015-07-29 04:22 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll 2015-07-29 04:19 - 2015-07-29 04:19 - 00102912 _____ C:\Windows\system32\hsa-thunk64.dll 2015-07-29 04:19 - 2015-07-29 04:19 - 00102400 _____ C:\Windows\SysWOW64\hsa-thunk.dll 2015-07-28 21:58 - 2015-07-28 21:58 - 01076244 _____ C:\Users\Tobi\Downloads\s9.php 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (2).exe 2015-07-28 13:11 - 2015-07-28 13:11 - 05455048 _____ (Advanced Micro Devices, Inc.) C:\Users\Tobi\Downloads\autodetectutility (1).exe 2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-27 22:12 - 2015-07-27 22:12 - 00000000 ____D C:\ProgramData\Emsisoft 2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Users\Tobi\AppData\Local\CEF 2015-07-21 18:17 - 2015-07-21 18:17 - 00000000 ____D C:\Users\Tobi\Desktop\Tor Browser 2015-07-21 18:12 - 2015-07-21 18:12 - 01259808 _____ C:\Users\Tobi\Downloads\Tor Browser Paket - CHIP-Installer.exe 2015-07-21 18:10 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 18:10 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 18:10 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 18:10 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 18:10 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 18:10 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-20 21:02 - 2015-07-22 21:29 - 00000000 ____D C:\Users\Tobi\AppData\Local\Windows Live 2015-07-18 18:29 - 2015-07-18 18:29 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507181829120294.log 2015-07-16 16:09 - 2015-07-16 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-07-16 16:08 - 2015-07-16 16:10 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2015-07-16 16:05 - 2015-07-16 16:07 - 82596072 _____ (Logitech Inc.) C:\Users\Tobi\Downloads\LGS_8.70.315_x64_Logitech.exe 2015-07-16 15:21 - 2015-07-16 15:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2015-07-16 15:18 - 2015-07-16 15:18 - 10571443 _____ C:\Users\Tobi\Downloads\SCP-DS-Driver-Package-1.2.0.160.7z 2015-07-16 15:18 - 2013-05-19 09:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys 2015-07-16 15:18 - 2013-01-07 16:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2015-07-16 15:18 - 2013-01-07 16:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2015-07-16 15:17 - 2015-07-16 15:18 - 00000000 ____D C:\Controller PS3 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2015-07-16 15:16 - 2015-07-16 15:16 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2015-07-16 15:15 - 2015-07-16 15:15 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu (1).exe 2015-07-16 15:14 - 2015-07-16 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2015-07-16 15:13 - 2015-07-16 15:13 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2015-07-16 15:12 - 2015-07-16 15:13 - 07886712 _____ (Microsoft Corporation) C:\Users\Tobi\Downloads\Xbox360_64Deu.exe 2015-07-16 14:33 - 2015-07-16 14:33 - 04117346 _____ C:\Users\Tobi\Downloads\MotioninJoy_071001_signed.zip 2015-07-16 14:33 - 2015-07-16 14:33 - 00000925 _____ C:\Users\Public\Desktop\DS3 Tool.lnk 2015-07-16 14:31 - 2015-07-16 14:31 - 01198368 _____ C:\Users\Tobi\Downloads\MotioninJoy - CHIP-Installer.exe 2015-07-16 14:05 - 2015-07-16 14:05 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2015-07-16 13:42 - 2015-07-16 13:42 - 00000222 _____ C:\Users\Tobi\Desktop\Rocket League.url 2015-07-15 12:20 - 2015-07-15 12:20 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll 2015-07-15 12:20 - 2015-07-15 12:20 - 00096256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys 2015-07-14 23:36 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-14 23:36 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-14 23:36 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-14 23:36 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-14 23:36 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-14 23:36 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-14 23:36 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-14 23:36 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-14 23:36 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-14 23:36 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-14 23:36 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-14 23:36 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-14 23:36 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-14 23:36 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-14 23:36 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-14 23:36 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-14 23:36 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-14 23:36 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-14 23:36 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-14 23:36 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-14 23:36 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-14 23:36 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-14 23:36 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-14 23:35 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-14 23:35 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-14 23:35 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-14 23:35 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-14 23:35 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-14 23:35 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-14 23:35 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-14 23:35 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-14 23:35 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-14 23:35 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-14 23:35 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-14 23:35 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-14 23:35 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-14 23:35 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-14 23:35 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-14 23:35 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-14 23:35 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-14 23:35 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-14 23:35 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-14 23:35 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-14 23:35 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-14 23:35 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-14 23:35 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-14 23:35 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-14 23:35 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-14 23:35 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-14 23:35 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-14 23:35 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-14 23:35 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-14 23:35 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-14 23:35 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-14 23:35 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-14 23:35 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-14 23:35 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-14 23:35 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-14 23:35 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-14 23:35 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-14 23:35 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-14 23:35 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-14 23:34 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-14 23:34 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-14 23:34 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-14 23:34 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-14 23:34 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-14 23:34 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-14 23:34 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-14 23:34 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-14 23:34 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-14 23:34 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-14 23:34 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-14 23:34 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-14 23:34 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-14 23:34 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-14 23:34 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-14 23:34 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-14 23:34 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-14 23:34 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-14 23:34 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-13 17:19 - 2015-07-13 17:19 - 00169152 _____ C:\Windows\system32\ativce03.dat 2015-07-13 17:19 - 2015-07-13 17:19 - 00167456 _____ C:\Windows\system32\amde31a.dat ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-11 15:23 - 2015-04-07 01:16 - 00021160 _____ C:\Users\Tobi\Downloads\FRST.txt 2015-08-11 15:23 - 2015-04-07 01:16 - 00000000 ____D C:\FRST 2015-08-11 15:17 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-11 15:17 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-11 15:14 - 2015-04-30 00:25 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2015-08-11 15:13 - 2011-05-10 01:43 - 01055291 _____ C:\Windows\WindowsUpdate.log 2015-08-11 15:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2015-08-11 15:03 - 2015-06-27 20:19 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Spotify 2015-08-11 15:00 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Origin 2015-08-11 14:58 - 2015-06-27 20:20 - 00000000 ____D C:\Users\Tobi\AppData\Local\Spotify 2015-08-11 14:58 - 2013-12-28 18:35 - 00121434 _____ C:\Windows\setupact.log 2015-08-11 14:58 - 2011-10-03 15:49 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Skype 2015-08-11 14:57 - 2015-05-19 14:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Raptr 2015-08-11 14:57 - 2011-09-05 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-11 14:56 - 2011-05-10 01:38 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-11 14:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-11 14:53 - 2015-02-16 22:27 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2015-08-11 14:52 - 2015-04-11 20:01 - 00000000 ____D C:\AdwCleaner 2015-08-11 14:29 - 2011-09-05 09:19 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-11 14:25 - 2012-10-30 17:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-11 05:53 - 2012-02-19 15:54 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client 2015-08-11 03:44 - 2011-09-05 04:25 - 00000000 ____D C:\Users\Tobi\AppData\Local\CrashDumps 2015-08-11 03:43 - 2015-02-16 22:20 - 00000000 ____D C:\Program Files\AMD 2015-08-11 03:41 - 2015-02-16 22:24 - 00000000 ____D C:\AMD 2015-08-10 22:14 - 2012-02-06 18:52 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForTobi 2015-08-10 22:14 - 2012-02-06 18:52 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForTobi.job 2015-08-10 17:38 - 2015-04-07 01:15 - 02171392 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe 2015-08-10 17:31 - 2014-09-12 13:52 - 00000000 ____D C:\ProgramData\Avira 2015-08-10 17:31 - 2014-09-12 13:52 - 00000000 ____D C:\Program Files (x86)\Avira 2015-08-10 17:31 - 2013-12-28 18:34 - 01482044 _____ C:\Windows\PFRO.log 2015-08-10 17:23 - 2013-07-13 14:40 - 00000000 ____D C:\Program Files (x86)\Steam 2015-08-09 20:14 - 2014-09-12 13:53 - 00000000 ____D C:\ProgramData\Package Cache 2015-08-09 20:11 - 2015-04-07 02:27 - 05634368 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe 2015-08-08 16:20 - 2011-05-10 01:52 - 00000000 ____D C:\ProgramData\PDFC 2015-08-08 15:23 - 2014-09-01 03:12 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-08 15:23 - 2014-09-01 03:12 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-08 14:53 - 2011-12-19 15:24 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2015-08-08 14:53 - 2011-12-19 01:26 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2015-08-08 14:48 - 2011-12-19 15:24 - 00000000 ____D C:\Users\Tobi\AppData\Local\PunkBuster 2015-08-08 14:48 - 2011-12-19 01:26 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2015-08-08 14:45 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Electronic Arts 2015-08-08 14:44 - 2014-05-29 10:36 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Origin 2015-08-08 14:43 - 2014-05-29 10:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2015-08-08 14:43 - 2014-05-29 10:34 - 00000000 ____D C:\Program Files (x86)\Origin 2015-08-08 02:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-08-06 19:11 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther 2015-08-06 19:07 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT 2015-08-05 22:36 - 2011-09-05 09:19 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-03 16:26 - 2015-04-07 01:20 - 00098456 _____ C:\Users\Tobi\Downloads\Addition.txt 2015-07-31 14:21 - 2013-12-30 13:23 - 00000000 ____D C:\ProgramData\IObit 2015-07-30 11:44 - 2015-05-19 14:53 - 00000000 ____D C:\Program Files (x86)\Raptr 2015-07-30 02:18 - 2014-08-09 18:25 - 01118208 ___SH C:\Users\Tobi\Downloads\Thumbs.db 2015-07-29 05:44 - 2014-11-21 04:09 - 00100568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll 2015-07-29 05:42 - 2015-06-23 04:08 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll 2015-07-29 05:42 - 2015-06-23 04:08 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2015-07-29 05:42 - 2013-12-07 00:03 - 00120144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll 2015-07-29 05:42 - 2013-12-07 00:02 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2015-07-29 05:41 - 2015-06-23 04:08 - 11948704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll 2015-07-29 05:41 - 2013-12-07 00:01 - 01445224 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll 2015-07-29 05:41 - 2013-12-07 00:01 - 01193904 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2015-07-29 05:40 - 2015-06-23 04:08 - 10094152 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2015-07-29 05:40 - 2013-12-06 23:59 - 07929616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2015-07-29 05:40 - 2013-12-06 23:58 - 07408936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2015-07-29 05:39 - 2013-12-06 23:57 - 08893160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll 2015-07-29 05:39 - 2013-12-06 23:56 - 08779872 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll 2015-07-29 05:08 - 2014-11-21 04:32 - 39714816 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2015-07-29 05:05 - 2015-06-23 03:55 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll 2015-07-29 04:26 - 2013-12-06 22:53 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2015-07-29 04:22 - 2014-11-21 04:09 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2015-07-29 04:22 - 2014-11-21 04:08 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2015-07-29 04:22 - 2013-12-06 22:22 - 01247744 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll 2015-07-29 04:17 - 2015-06-23 03:21 - 00865792 _____ (AMD) C:\Windows\system32\coinst_15.20.dll 2015-07-28 21:27 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-07-28 21:02 - 2014-05-09 22:15 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-27 22:15 - 2014-09-01 03:12 - 00001108 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-07-27 22:15 - 2014-09-01 03:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-07-27 22:15 - 2014-09-01 03:11 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-07-25 12:26 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-22 21:37 - 2015-06-13 17:11 - 00569856 ___SH C:\Users\Tobi\Documents\Thumbs.db 2015-07-22 17:24 - 2009-07-14 06:45 - 00472008 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-17 20:02 - 2011-10-04 12:39 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForHP.com$ 2015-07-17 20:02 - 2011-10-04 12:39 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForHP.com$.job 2015-07-17 03:01 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-07-16 16:07 - 2013-02-06 21:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Logishrd 2015-07-16 15:16 - 2014-06-08 00:12 - 00131537 _____ C:\Windows\DirectX.log 2015-07-16 15:14 - 2013-03-30 17:35 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2015-07-16 15:14 - 2013-03-30 17:35 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy 2015-07-16 14:33 - 2013-03-22 23:51 - 00000000 ____D C:\Program Files\MotioninJoy 2015-07-16 14:05 - 2013-09-04 17:24 - 00000000 ____D C:\Users\Tobi\Documents\My Games 2015-07-16 14:05 - 2011-05-10 01:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-07-16 06:24 - 2011-09-05 09:19 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 06:24 - 2011-09-05 09:19 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 16:25 - 2012-10-30 17:44 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 16:25 - 2012-10-30 17:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 16:25 - 2011-09-05 09:23 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 12:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-15 03:52 - 2014-12-14 12:11 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 03:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-15 03:29 - 2013-07-13 18:34 - 00000000 ____D C:\Windows\system32\MRT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-20 15:19 - 2015-02-19 03:19 - 0000044 ____H () C:\Program Files (x86)\7c6e32c6.tmp 2014-06-19 13:16 - 2014-06-19 13:16 - 0000024 _____ () C:\Users\Tobi\AppData\Roaming\temp.ini 2013-12-18 20:05 - 2013-12-18 20:05 - 0000030 _____ () C:\Users\Tobi\AppData\Roaming\WB.CFG 2012-08-25 13:19 - 2012-08-25 13:25 - 0004608 _____ () C:\Users\Tobi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-08-30 22:34 - 2012-08-30 22:34 - 0000094 _____ () C:\Users\Tobi\AppData\Local\fusioncache.dat 2014-08-31 23:50 - 2014-08-31 23:50 - 0000017 _____ () C:\Users\Tobi\AppData\Local\resmon.resmoncfg 2015-04-26 15:13 - 2015-04-26 15:13 - 0000003 _____ () C:\Users\Tobi\AppData\Local\updater.log 2015-04-26 15:13 - 2015-04-26 15:13 - 0000424 _____ () C:\Users\Tobi\AppData\Local\UserProducts.xml 2011-11-25 19:02 - 2011-11-25 19:02 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F3E71781-4549-49E1-B591-9E13E32BBFE6} 2011-11-27 20:04 - 2011-11-27 20:04 - 0000000 _____ () C:\Users\Tobi\AppData\Local\{F98C5B73-8232-4300-BE5E-AD6FFF1F8CB1} Einige Dateien in TEMP: ==================== C:\Users\Tobi\AppData\Local\Temp\avgnt.exe C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe C:\Users\Tobi\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-02 15:15 ==================== Ende von log ============================ |
12.08.2015, 08:58 | #13 |
/// the machine /// TB-Ausbilder | Verzögerte Tastatureingabe, Freezes in Spielen - Malware?ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Verzögerte Tastatureingabe, Freezes in Spielen - Malware? |
abgebrochen, abständen, anti-malware, befehle, bildschirm, fehlermeldung, forum, freeze, freezes, friert, glaube, hoffe, langsam virus, malware, malwarebytes, malwarebytes anti-malware, nicht mehr, nichts, reagiert, regelmäßigen, scan, schonmal, spiele, standbild, stark, stunde, tastatureingabe, unregelmäßige, verzögert, verzögerung |